SandboxTest environment — this is not the live fleet. Hires, invoices and machines here are demo data, and customer emails are redirected to the office.

Settings

Xero connection failed: Xero cannot be connected while SESSION_SECRET is unset.

Xero

Connected to Demo Company (NZ)

Token refreshed 28/07/2026 — refreshes automatically when used. If the app sits unused for 60+ days, Xero expires the connection and you’ll need to reconnect.

Reconnect

Pull your Xero customers into the fleet app. Existing customers are matched by name or prior link and overwritten with Xero’s details; new contacts are created. Safe to re-run.

Users

No accounts yet — you’re signed in via the bootstrap APP_PASSWORD. Add your own account below (it was created automatically on first login).

Add a user

Pick a role to set sensible defaults, then fine-tune below. Editing a section automatically grants viewing it.

Hires
Quotes
Customers
Transport
Returns
Fleet
Enquiries
Capabilities

We’ll email them a welcome note — they sign in with their Google Workspace account.

Price list

Default rates per model, used to prefill new hires (negotiated rates on a hire always win). Saving creates a new price effective from today — past hires keep the rates they were booked at.

Auto-set nightly to 1.7× the NZ national average (MBIE), and used with each machine’s tank size to work out the refuel charge on a return. A manual save here holds only until the next nightly update.

0608ME
0812E
1018RD
1218RD
1414E Plus
1623RD
AB15J
AB18J
Add a model

Carriers

Transport providers you can assign to transport jobs.

Add carrier

API keys

Keys give programmatic access to the REST API at /api/v1 (assets, hires, customers, availability). Send as Authorization: Bearer sbk_…

  • CER (Vercel sandbox) sbk_test_34d…last used 02/08/2026
    Full access
Permissions

Tick nothing to give the key full access to the API (how every existing key works). Ticking any box limits the key to exactly those permissions.

The key can then only read or change hires with this source, and hires it creates are stamped with it. Leave as “All hires” for staff/internal keys.

Ticks the 7 permissions the Casual Equipment Rentals app needs and locks the key to CER_SELF_SERVE hires. Use this for the production CER key.

Website booking webhook

The website form posts to /api/public/booking with header X-Booking-Token. The token is set via BOOKING_WEBHOOK_TOKEN in .env.