RandomRoute API Workbench REST API

Read your workspace's collections, environments, inbound endpoints and history, start collection runs from CI, and execute saved requests.

Authentication. Create a token under Test Tokens with an api:* scope and send it as Authorization: Bearer awk_…. A token belongs to one workspace; every call is scoped to it, and ids from other workspaces answer 404.

Scopes. api:read for every GET; api:run to start runs and execute requests (and to poll runs). RandomRoute AEP Lab (/adobe/*): adobe:read for every GET; adobe:run to verify connections and start suite and loop-test runs (and to poll them).

RandomRoute AEP Lab completion webhook. When a workspace has a RandomRoute AEP Lab webhook, every finished suite run and loop-test run is POSTed to it as JSON: {"event": "adobe.suite_run.finished" or "adobe.loop_run.finished", "workspace": {...}, "run": {...}}, where run has the same shape as GET /adobe/suite-runs/{id} or GET /adobe/loop-test-runs/{id}. The request is signed with the workspace's HMAC credential from the vault. With the credential's defaults that is X-Timestamp: <unix seconds> and X-Signature: hex(HMAC-SHA256(secret, "<X-Timestamp>.<raw body>")); the header names, algorithm, encoding and string to sign follow the credential's settings. Recompute the HMAC over the raw body with your copy of the secret, compare in constant time, and reject timestamps older than a few minutes.

Pagination. List endpoints return {"data": [...], "next_cursor": "…", "limit": 25}, newest first. Pass cursor=<next_cursor> for the next page; limit is 1–100.

Errors use RFC 7807 application/problem+json. Requests are limited to 120 per minute per token (X-RateLimit-* headers; 429 with Retry-After when exceeded).

Example: curl -H "Authorization: Bearer $AWK_TOKEN" https://api.randomroute.io/api/v1/collections