Daily's meeting-token reference warns that omitting room_name allows a token to access rooms across its domain. In a Daily Video integration, mint narrowly scoped tokens on the server.
Try the token in both its intended test room and a different room. A successful join proves functionality; rejection from the unintended room checks the access boundary.