# Flowg8 · Create a Sandbox

Ensure the automatically created Sandbox exists. Repeated and concurrent requests return the same environment.

Send the Live organization ID. No data is cloned and nested Sandboxes are rejected. Discover the returned environment.mode and environment.organizationId (the parent organization); organization.id is the isolated Sandbox workspace ID. This endpoint is naturally idempotent per organization and does not require Idempotency-Key.

## POST /v1/sandbox

Authentication: FLOWG8_ACCESS_TOKEN from Flowg8 sign-in
Required tenant header: X-Organization-Id.
Required user permissions: Administrator role required. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Request example (replace example IDs)

```sh
curl -X POST "https://api.flowg8.io/v1/sandbox" \
  -H "authorization: Bearer $FLOWG8_ACCESS_TOKEN" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001" \
  -H "content-type: application/json" \
  --data-raw '{}'
```

Source: /docs/create-sandbox
Full schemas: /docs/openapi.json