Skip to main content

​
What is the Playground?

The Grantex Playground is a browser-based walkthrough of the sandbox authorization lifecycle. It makes real API calls and displays the request and response for each step. By default, Start creates a new sandbox developer through POST /v1/signup; you do not need to bring an existing account or key. This account is not automatically deleted on Reset. The playground is not a live-mode consent or passkey enrollment client.

​
Getting Started

  1. Open the playground — Visit grantex.dev/playground.
  2. Click “Start Demo” — The playground creates a fresh sandbox account and holds its key in this browser session. No shared public key is used.
  3. Walk through each step — Click “Run” on each step to execute the API call and see the response.
  4. (Optional) Click “Advanced” to use your own sandbox key or a custom server URL. Before creating an agent, the page calls GET /v1/me and refuses any key whose account mode is not sandbox.

​
The 7 Steps

The playground walks you through the complete Grantex lifecycle:

​
Features

  • Auto-populated values — Each step fills its request from previous responses (agent ID, auth code, grant token, refresh token, and grant ID).
  • JWT decoding — Grant-token claims are decoded for inspection, not verified by the decoder. The separate Verify step calls the online verifier.
  • Request and response panels — JSON is shown as text, including error responses.
  • Status badges — Each step shows its current state: Pending, Running, Done, or Error.
  • Sandbox mode — The playground uses sandbox mode, which auto-approves consent and returns the authorization code directly — no redirect needed.
  • No browser build step — The page uses plain HTML/CSS/JS; the flow still depends on a reachable Grantex auth service.

​
Sandbox Mode

The playground relies on a sandbox-mode developer key, which is independent of plan tier. When it calls POST /v1/authorize, the auth service:
  1. Skips the consent redirect flow
  2. Auto-approves the authorization request
  3. Returns the authorization code directly in the response
This means you can complete the full flow without any browser redirects or user interaction — perfect for learning and testing.

​
Using Your Own Server

If you’re self-hosting Grantex, set Server URL under Advanced to your compatible Grantex auth service. It must allow requests from the browser origin. Use HTTPS, or HTTP on localhost for local development. The page sends the sandbox key to the configured URL. A live-mode key cannot complete this sandbox-only walkthrough because live authorization requires separate consent.

​
Security Notes

  • Start creates a new sandbox key rather than using a shared public key. Avoid real customer data in a demo account.
  • Your key and token responses remain in the current page’s memory and DOM until Reset or navigation; Reset clears the page state but does not delete server-side agents, grants, or the sandbox account.
  • Never paste a live or production API key. With a custom Server URL, the key is sent directly to that host. The UI rejects plain HTTP except on localhost, but you must still trust the host you choose.
  • A custom sandbox account’s agents and grants remain on its server. If you use your own dashboard-managed key, you can manage those records in the dashboard. Disposable accounts do not automatically appear under another dashboard login.

​
Ownership

Grantex is owned by Orchestrum Technologies LLP. Inventor and owner: Sanjeev Kumar. Ownership contact: sanjeev@orchestrum.in or mishra.sanjeev@gmail.com.
Last modified on September 27, 2026