Test with sandboxes

Create a Sandbox workspace

Create a workspace and choose Sandbox as the environment. Sandbox workspaces generate API keys with the mb_sk_sbx_ prefix and only see sandbox-scoped sources.

Use a separate Production workspace when you are ready for live credentials, live patients, and production export destinations.

Load sample patients

Open the dashboard Patients page and click Load sample patients. Medblocks imports synthetic Synthea patients into the active workspace, up to the workspace cap.

Test dashboard workflows

Use synthetic patients when you need realistic records without PHI. Synthetic records are useful for UI states, mapping logic, exports, and webhook handlers. They should not be used to infer source coverage or production data quality.

Good sandbox checks include:

• Patient lists and patient detail pages.
• Record status and pull history.
• Export destination setup and retry behavior.
• Webhook endpoint setup, event delivery, retries, and redelivery.
• Support workflows such as auth event history.

Test source-specific flows

Some EHR vendors provide public or partner sandbox portals. Their behavior is close enough to test OAuth and SMART on FHIR, but they may not match every production quirk.

When a guide has vendor-specific sandbox details, use that guide:

• Epic
• Cerner
• athenahealth
• eClinicalWorks
• CMS Blue Button

Prepare for Production

Before switching to production, confirm:

• Your Production workspace exists.
• Production credentials are configured from Configure connections.
• Your return URLs are HTTPS and match the configured apps.
• Webhook signature verification uses the raw request body.
• API keys and webhook secrets live in server-side secret storage.
• Your UI or dashboard workflow handles failed authorization and reconnect prompts.
• Export destinations have been tested with non-production data.