Generate a public sandbox-only key, run API probes, and inspect the minimal MCP boundary. This key is deliberately limited to public sandbox endpoints and cannot unlock private operator/admin surfaces.
TOKEN=$(curl -fsS https://13flow.eu/api/sandbox/key | python3 -c 'import json,sys; print(json.load(sys.stdin)["token"])')
curl -fsS -H "Authorization: Bearer $TOKEN" https://13flow.eu/api/sandbox/v1/status
curl -fsS -H "Authorization: Bearer $TOKEN" https://13flow.eu/api/sandbox/v1/funds
curl -fsS -H "Authorization: Bearer $TOKEN" https://13flow.eu/api/sandbox/v1/mcp-minimumThe public sandbox includes this minimum MCP shape only: public discovery and read-only status/product context. It is only a small public integration shape, not a product claim.
curl -fsS https://13flow.eu/api/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
--data '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'