Developers
Test keys go to a practice network, so a developer never spends by accident.
Keys — shown once, then locked
WebhookSigning secret · Reveal
https://api.kilimobora.co.ke/hooks/smsDelivered and failed, signed, retried for 24 hours
TimeEventResult
09:45:12message.delivered200 OK · 41 ms
09:44:31message.delivered200 OK · 38 ms
curlNodePHPPython
curl https://hub.nurunet.co.ke/v1/messages \
-H "Authorization: Bearer mwz_test_b91F…" \
-H "Idempotency-Key: 8f1c-22aa" \
-d to=0712345678 -d from=MWANGAZA -d text="Your code is 481209"
201 · 92 ms
{ "id": "msg_01JB8Q4", "parts": 1, "cost": "0.60", "status": "queued" }Same key twice returns the same message. 50 requests a second on this account. Revoked keys stop within 5 seconds.
How this works
Test mode runs the same API — same statuses, same webhooks — but spends nothing and delivers nowhere. Every webhook is signed so your server knows it’s really us.