AFFIXIO
API sandbox
Live calls to the AffixIO ticket, QR, edge, and Merkle APIs. Signed with aio_web_demo. Every successful mint, verify, redeem, and proof run is audited into the live Merkle tree and inclusion-checked. Tickets, edge, QR, and ZK panels use synthetic references only. No personal data is collected or stored. Session data lives in your browser tab only. Refresh clears everything.
Live Merkle root
Fetched from api.affix-io.com. No mock audit data.
What this sandbox covers
Proxies mirror /var/www/vhosts/api (tickets, QR, edge) and api.affix-io.com (circuits, identity, Merkle audit tree). All responses are live. Latency is shown on every call.
API proxy endpoints (CORS enabled)
GET/POST /sandbox/api/cms/* → local CMS (port 3000) GET/POST /sandbox/api/zk/* → api.affix-io.com (aio_web_demo)
Sandbox QR redirect
Redirect-style QR. Any destination URL (including external sites) is wrapped as /q/<code>. Each scan audits Merkle, then redirects.
Ticket controls schema
Loading…
Available circuits
- Loading…
Mint ticket
POST /api/tickets/generate with HMAC-signed compact token. Event, tier, and gate controls only. No holder or seat fields.
Verify, redeem, revoke
Tickets with an entry point (e.g. main-gate) must send that gate on verify and redeem. Revoke uses ticket ID from mint.
Ticket status
Edge issue
Offline-capable v3 tickets. POST /api/tickets/edge/issue
Edge verify and consume
PQC QR generator
POST /api/qr/generate with ML-DSA-65 attestation. Merkle audit on every scan.
Short link via /q/<code>. Merkle audit on each scan, then redirect.
Wrap legacy QR (optional)
POST /api/qr/migrate. Fingerprint a third-party QR, mint compact-v3, sign migration manifest with ML-DSA-65.
ZK identity verify
POST /api/demo/identity-verify with signed attestation via aio_web_demo. Synthetic policy references only, no personal data.
Circuit prove and verify
Run Prove first. It generates a proof and verifies it against the live Merkle tree.
Merkle audit tree
Live audit Merkle from api.affix-io.com. sha256-sorted-pairs algorithm.