Mock Request Tokens

A request_token parameter is required to be sent with every request to the Filter and Risk API endpoints. In order to test Castle without having a client-side integration in place, you can use Mock Request Tokens to evaluate different risk scenarios.

Format

test|<parameter>:<value>|<parameter>:<value>...

Usage

Mock Request Tokens will streamline your testing process by giving you a way to force certain aspects and characteristics of a request, without doing a full integration. For example, if you want to simulate a user using Firefox on a Windows device in the US, you can use the following Mock Request Token value:

request_token: "test|device:firefox_on_windows|ip:us-ca"

🚧

Reminder

Test tokens are only supported on Sandbox environments.

Test Token Parameters & Values

Parameter

Possible Values

Description

device

chrome_on_mac
safari_on_mac
firefox_on_mac
chrome_on_windows
firefox_on_windows
bot_on_linux

Pre-determined device combinations to represent various device types

ip

se
us-ca
jp

IP location of the request

policy.action

allow
challenge
deny

Force a policy action to be returned by Castle

risk

value from 0-1.0

Set the Castle risk score to a specific value

Examples

Mac computer using a Chrome browser, connecting from California, US:

test|device:chrome_on_mac|ip:us-ca

Headless browser, connecting from Japan:

test|device:bot_on_linux|ip:jp