POST

Authorizations

Authorization
string
header
required

The caller's id_token from authentication — the ID token, not the access_token. The program and environment come from the token.

Path Parameters

customerId
string
required

The customer id.

Body

application/json
action
enum<string>
required

The step to run.

Available options:
verify,
initiate,
passkey-challenge,
submit
payments
object[]

The payment items. Required for verify, initiate, and submit.

scaChallenge
object

The strong-customer-authentication challenge from initiate. Pass it back on submit.

confirmation
Passkey · object

Step-up confirmation (for submit). Set method to passkey, totp, or pin and include that method's fields. pin is a program capability — see Program capabilities.

idempotencyKey
string<uuid>

Optional. Reuse the same key to make submit safe to retry.

batchId
string<uuid>

Optional. On verify, the draft being re-verified after edits — omit to create a new draft. On submit, the draft to pay; it is checked for expiry and ownership and cannot be paid twice. Absent keeps the pre-draft behaviour.

Response

Result for the requested action

The response is of type object.