Sandbox
Without an API tier your keys are on the free sandbox tier - data routes answer from a recorded pack of real data.
Every account can make keys under Account → Developer API. While the account has no API tier (none bought, and no Elite plan), its keys are on the sandbox tier: the same cdk_ keys, URLs, answers, headers and errors as live, but the data routes answer from a recorded pack shipped with the API, never from live data. Account routes (/v1/me, /v1/usage) and webhook management answer live.
#What the sandbox has
No sandbox pack is installed.
Everything else answers 404 sandbox_not_recorded, and the message lists what is recorded for that route, so the error tells you what to ask for instead. from, to, limit and cursor work on the recorded rows: pages, cursors and windows behave as they do live.
Every sandbox answer carries an extra attribution line, Sandbox: recorded data (<date>), not live; not for production use. The times are the recorded times: the sandbox does not pretend to be now.
#Limits
The sandbox tier has its own small limits (see Tiers): enough to build against, not to run a product on. Its units count in X-Quota-Remaining like a live tier's.
#Moving to live data
Buy an API tier (or hold Elite): the same keys switch to live data within a minute. Nothing changes in your code.