Decline or request owner PIN confirmation for a purchase

POST

/dashboard/v1/merchants/{merchantId}/{mode}/purchase_intents/{id}/decision

curl --request POST \
  --url https://api.xaalis.org/dashboard/v1/merchants/example/test/purchase_intents/example/decision \
  --header 'Content-Type: application/json' \
  --header 'idempotency-key: example' \
  --cookie better-auth.session_token=<better-auth.session_token> \
  --data '{ "decision": "approve" }'

Authorizations

• dashboardSession

Parameters

Path Parameters

merchantId

required

string

mode

required

string

Allowed values: test live

id

required

string

Header Parameters

idempotency-key

required

Required retry-safe key; reuse it only for the same operation and request body

string

>= 1 characters <= 255 characters

Required retry-safe key; reuse it only for the same operation and request body

Request Body^required

Media typeapplication/json

object

decision

required

string

Allowed values: approve decline

Responses

200

Decision

Media typeapplication/json

object

object

required

string

Allowed values: agent_purchase_intent

id

required

string

wallet_id

required

string

card_id

required

string

livemode

required

boolean

currency

required

string

Allowed values: USD

action_id

required

string

merchant_name

required

string

<= 100 characters

max_amount

required

integer

>= 1 <= 100000000

reason

required

string

status

required

string

Allowed values: approved pending_owner declined expired consumed

expires_at

required

string

created_at

required

string

purpose

required

string

Allowed values: agent_purchase

pin_url

required

string | null

pin_expires_at

required

string

Example

{
  "object": "agent_purchase_intent",
  "currency": "USD",
  "status": "approved",
  "purpose": "agent_purchase"
}

400

Validation error

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

401

Authentication required

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

403

Forbidden

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

404

Not found

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

409

Idempotency conflict or invalid state

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

422

Policy limit or insufficient funds

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

429

Rate limited

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

503

Service unavailable

Media typeapplication/json

object

error

required

object

code

required

string

message

required

string

details

Example^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}