{ "info": { "_postman_id": "c019727f-29fc-4038-9301-7642d5395209", "name": "Grid Agent Management Strong Customer Authentication API", "description": "API for managing global payments on the open Money Grid. Built by Lightspark. See the full documentation at https://docs.lightspark.com/.\n\n\nContact Support:\n Name: Lightspark Support\n Email: support@lightspark.com", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "lastUpdatedBy": "35240", "uid": "35240-c019727f-29fc-4038-9301-7642d5395209" }, "item": [ { "name": "sca", "item": [ { "name": "factors", "item": [ { "name": "confirm", "item": [ { "name": "Confirm SCA factor enrollment", "id": "6dbd4c78-e95f-4a0f-a2f2-f5464d16b39e", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] }, "description": "Finalize the factor enrollment started by `POST /sca/factors`. The request\nbody is discriminated by `type`: for `TOTP`, submit the shared `secret` from\nthe start call plus the first `code`; for `PASSKEY`, submit the WebAuthn\n`credential` the device produced plus the `origin` it was produced against.\nThe threaded secret/credential binds the confirmation to its enrollment, so\nno separate id is needed.\n\nA TOTP confirmation returns one-time recovery codes (shown once); a passkey\nconfirmation returns the enrolled factor.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n\nIn sandbox, the TOTP code is always `123456`.\n" }, "response": [ { "id": "ddfe3719-24f4-430c-8d18-e081ac69a4f4", "name": "Factor enrolled; the factor-specific result is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"type\": \"TOTP\",\n \"recoveryCodes\": [\n \"\",\n \"\"\n ]\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-ddfe3719-24f4-430c-8d18-e081ac69a4f4" }, { "id": "2a581463-a21e-457c-9659-e06460873a9e", "name": "Invalid or incorrect confirmation proof", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-2a581463-a21e-457c-9659-e06460873a9e" }, { "id": "a73b9a9a-221f-4b36-ad0f-ec9b101dd679", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a73b9a9a-221f-4b36-ad0f-ec9b101dd679" }, { "id": "2d706c69-4d1b-4f76-a887-e1b28bf7c240", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-2d706c69-4d1b-4f76-a887-e1b28bf7c240" }, { "id": "54baaa4d-fd45-4f64-9dce-f8a558e6e837", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-54baaa4d-fd45-4f64-9dce-f8a558e6e837" }, { "id": "751b0332-f1d4-4b8a-90d8-fc02abb99fa6", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"code\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/confirm?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "confirm" ], "query": [ { "description": "(Required) The unique identifier of the customer confirming a factor enrollment.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-751b0332-f1d4-4b8a-90d8-fc02abb99fa6" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-6dbd4c78-e95f-4a0f-a2f2-f5464d16b39e" } ], "id": "60cf68b7-f19b-4c15-923f-893388334910", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-60cf68b7-f19b-4c15-923f-893388334910" }, { "name": "{credentialId}", "item": [ { "name": "Delete an enrolled SCA factor", "id": "ba5c0507-9d60-443f-a93e-9344aaf14c0b", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "id": "1c9c0636-03f1-429e-9ed2-fb679f10d1bc", "key": "credentialId", "value": "", "description": "(Required) The credential id of the enrolled factor to delete (from the factor's `credentialId`)." } ] }, "description": "Delete an enrolled SCA factor by its credential id. Today only `PASSKEY`\nfactors carry a `credentialId` and are deletable this way.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "60b13a2f-4461-4695-ac65-dd189c7bb2f7", "name": "Factor deleted; no content is returned.", "originalRequest": { "method": "DELETE", "header": [ { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "key": "credentialId" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-60b13a2f-4461-4695-ac65-dd189c7bb2f7" }, { "id": "be742e37-c04d-47b4-9e11-04c1b16482b3", "name": "Unauthorized", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "key": "credentialId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-be742e37-c04d-47b4-9e11-04c1b16482b3" }, { "id": "68ba8ea8-1761-424e-80b9-869a3a21fd5a", "name": "Customer or factor not found", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "key": "credentialId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-68ba8ea8-1761-424e-80b9-869a3a21fd5a" }, { "id": "5b2a977b-2f2c-47a2-9256-f72015240dc9", "name": "SCA is not required for this customer.", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "key": "credentialId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-5b2a977b-2f2c-47a2-9256-f72015240dc9" }, { "id": "de5827bf-134b-4acb-aaff-086e6dcead50", "name": "Internal service error", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/:credentialId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", ":credentialId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factor is being deleted.", "key": "customerId", "value": "" } ], "variable": [ { "key": "credentialId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-de5827bf-134b-4acb-aaff-086e6dcead50" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-ba5c0507-9d60-443f-a93e-9344aaf14c0b" } ], "id": "2410e917-8fa8-4b56-826b-dc3cc9292804", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-2410e917-8fa8-4b56-826b-dc3cc9292804" }, { "name": "reset", "item": [ { "name": "{resetId}", "item": [ { "name": "complete", "item": [ { "name": "Complete a 2FA reset", "id": "1dc32da3-b40f-4926-b9d9-d6fdea6fb7b1", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "id": "968340f2-e1de-4bb9-a931-0c8d07c32668", "key": "resetId", "value": "", "description": "(Required) The reset handle returned by the start call." } ] }, "description": "Complete a 2FA reset once liveness has passed, clearing the lost factor so\nthe customer can re-enroll.\n\nFor an `SMS_OTP` reset, supply the new `mobile` number in the body \u2014 completing\nthe reset enrolls it as the customer's number. Other factors need no body.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "7f507ce9-6ac3-44c8-8a67-4e189f28f76d", "name": "Reset completed; no content is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-7f507ce9-6ac3-44c8-8a67-4e189f28f76d" }, { "id": "646c9a1f-55b4-46b0-902e-2088391f1fd4", "name": "Reset not ready (liveness not yet passed)", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-646c9a1f-55b4-46b0-902e-2088391f1fd4" }, { "id": "c4dd509f-f035-4f32-a2df-7b3dd2caf7c5", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c4dd509f-f035-4f32-a2df-7b3dd2caf7c5" }, { "id": "207abb1c-6929-4510-b617-851d677d898f", "name": "Customer or reset not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-207abb1c-6929-4510-b617-851d677d898f" }, { "id": "134a9396-0d20-4e5f-bf56-8630c65beff3", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-134a9396-0d20-4e5f-bf56-8630c65beff3" }, { "id": "35bcc56c-85d5-47ae-88b7-658113f3e992", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"mobile\": {\n \"countryCode\": \"\",\n \"number\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing the reset.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-35bcc56c-85d5-47ae-88b7-658113f3e992" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-1dc32da3-b40f-4926-b9d9-d6fdea6fb7b1" } ], "id": "9d741e53-6e10-4896-8275-22c3736c7efb", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-9d741e53-6e10-4896-8275-22c3736c7efb" }, { "name": "Get 2FA reset status", "id": "22ada1e0-0735-46ba-a534-d408bf7532ed", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "id": "31cbdf5e-fc2b-4b78-859b-a077deb9cae5", "key": "resetId", "value": "", "description": "(Required) The reset handle returned by the start call." } ] }, "description": "Poll the status of an in-progress 2FA reset until it reaches the liveness-passed value, after which the reset can be completed.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "8226bf02-2a49-453e-bb5b-b635d2f5dea4", "name": "The current reset status.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"COMPLETED\",\n \"factor\": \"TOTP\",\n \"expiresAt\": \"\",\n \"enrollmentStatus\": null,\n \"completedAt\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-8226bf02-2a49-453e-bb5b-b635d2f5dea4" }, { "id": "68ea30d5-f81a-489a-bd6a-bb449dcd63f8", "name": "Unauthorized", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-68ea30d5-f81a-489a-bd6a-bb449dcd63f8" }, { "id": "81361639-0f63-42c8-a768-05c7ddfaa9e7", "name": "Customer or reset not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-81361639-0f63-42c8-a768-05c7ddfaa9e7" }, { "id": "88ccf59b-7ae1-4a90-8db0-7a88ed349b10", "name": "SCA is not required for this customer.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-88ccf59b-7ae1-4a90-8db0-7a88ed349b10" }, { "id": "2ee7438e-0024-4475-953c-996f77deb9ca", "name": "Internal service error", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors/reset/:resetId?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset", ":resetId" ], "query": [ { "description": "(Required) The unique identifier of the customer whose reset status is polled.", "key": "customerId", "value": "" } ], "variable": [ { "key": "resetId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-2ee7438e-0024-4475-953c-996f77deb9ca" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-22ada1e0-0735-46ba-a534-d408bf7532ed" } ], "id": "89706822-f6ec-4ee5-bdb4-e86ddd182a4d", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-89706822-f6ec-4ee5-bdb4-e86ddd182a4d" }, { "name": "Start a 2FA reset", "id": "59b0790f-9628-453e-869b-25d58c85e13b", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] }, "description": "Begin recovering a lost enrolled factor via a liveness-gated, poll-based\nflow. Opens the liveness check and returns a `resetId` plus the\nopaque liveness handles (`livenessAccessToken` / `verificationLink`) the end\nuser completes it with. Poll\n`GET /sca/factors/reset/{resetId}` until liveness\npasses, then call the complete endpoint.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "cc4762f7-36e8-478a-a7ff-184fb7985af6", "name": "Reset initiated; the reset handle and liveness material are returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Created", "code": 201, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"resetId\": \"\",\n \"livenessAccessToken\": \"\",\n \"verificationLink\": \"\",\n \"expiresAt\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-cc4762f7-36e8-478a-a7ff-184fb7985af6" }, { "id": "2bd977ba-5eeb-414b-96d3-02c791e87a48", "name": "Invalid or unknown factor", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-2bd977ba-5eeb-414b-96d3-02c791e87a48" }, { "id": "67bed466-9c93-45bd-9d29-616b79242d67", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-67bed466-9c93-45bd-9d29-616b79242d67" }, { "id": "4515dd4c-44b1-4afd-99b5-be3be1bb7414", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-4515dd4c-44b1-4afd-99b5-be3be1bb7414" }, { "id": "9b581d93-9502-463e-9536-69a73e85629d", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-9b581d93-9502-463e-9536-69a73e85629d" }, { "id": "a75b75a7-2098-467a-855f-26c4e83882bd", "name": "Too many reset attempts. Reset initiation is rate-limited to 5 per 24 hours per customer; retry after the window indicated by `Retry-After`.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Too Many Requests", "code": 429, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 429,\n \"code\": \"RATE_LIMITED\",\n \"details\": {\n \"dolore_7\": true,\n \"veniam_e3\": -30937493.972410172\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a75b75a7-2098-467a-855f-26c4e83882bd" }, { "id": "c28f35a3-62f5-4412-8aed-c5de3b419063", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"SMS_OTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors/reset?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors", "reset" ], "query": [ { "description": "(Required) The unique identifier of the customer resetting a factor.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c28f35a3-62f5-4412-8aed-c5de3b419063" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-59b0790f-9628-453e-869b-25d58c85e13b" } ], "id": "47a6f85e-c0be-4b38-8901-2eccc06a1734", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-47a6f85e-c0be-4b38-8901-2eccc06a1734" }, { "name": "List enrolled SCA factors", "id": "1c710535-163f-44e5-894a-5bdb9923f268", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] }, "description": "List the Strong Customer Authentication factors the customer has enrolled.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "3b2bc2dc-5811-429e-86d7-9f1f542f190b", "name": "The customer's enrolled SCA factors.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"factors\": [\n {\n \"factor\": \"SMS_OTP\",\n \"credentialId\": \"\",\n \"name\": \"\"\n },\n {\n \"factor\": \"SMS_OTP\",\n \"credentialId\": \"\",\n \"name\": \"\"\n }\n ]\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-3b2bc2dc-5811-429e-86d7-9f1f542f190b" }, { "id": "83893de6-c6a7-4973-8d2f-67480029f5fb", "name": "Unauthorized", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-83893de6-c6a7-4973-8d2f-67480029f5fb" }, { "id": "380bff1b-defc-4e15-aac6-dd01effbfe28", "name": "Customer not found", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-380bff1b-defc-4e15-aac6-dd01effbfe28" }, { "id": "4fa646df-b43b-476d-9640-35b7628f68fc", "name": "SCA is not required for this customer.", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-4fa646df-b43b-476d-9640-35b7628f68fc" }, { "id": "41a7700c-a52e-4c63-82d1-05e0ab9410ce", "name": "Internal service error", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-41a7700c-a52e-4c63-82d1-05e0ab9410ce" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-1c710535-163f-44e5-894a-5bdb9923f268" }, { "name": "Start SCA factor enrollment", "id": "c72af0ff-4bdb-4aef-903a-4686c8b85a73", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] }, "description": "Begin enrolling an SCA factor for the customer. Enrollment covers the\nexplicit, opt-in factors a customer chooses to add \u2014 the request body's\n`type` selects `TOTP` or `PASSKEY`. Returns the factor-specific material\nneeded to finish via `POST /sca/factors/confirm`.\n\n`SMS_OTP` is implicit and is not enrolled through this endpoint. Every\ncustomer in an SCA-regulated region has a verified phone number from\ncustomer creation (via the Contact Verification flows \u2014\n`POST /customers/{customerId}/verify-phone` and `.../verify-phone/confirm`),\nso SMS is always available as a factor with no extra setup and appears\namong the customer's enrolled factors in `GET /sca/factors`.\n\nA customer may have **only one passkey**. Starting a passkey enrollment when\none is already enrolled returns `409` (`PASSKEY_ALREADY_ENROLLED`) \u2014 delete it\nvia `DELETE /sca/factors/{credentialId}` first.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "d8a488d1-e7fd-4910-bc0b-2ea1f65666e1", "name": "Enrollment started; the factor-specific completion material is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"type\": \"TOTP\",\n \"secret\": \"\",\n \"secretBase32Encoded\": \"\",\n \"totpUri\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-d8a488d1-e7fd-4910-bc0b-2ea1f65666e1" }, { "id": "9f69c839-f828-4f10-99bc-9dc6adfe351f", "name": "Invalid request", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-9f69c839-f828-4f10-99bc-9dc6adfe351f" }, { "id": "b05a6ac9-1383-4eb9-be15-e54f0af9b346", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-b05a6ac9-1383-4eb9-be15-e54f0af9b346" }, { "id": "a0646d1d-ce92-48b0-855f-10346c7577ee", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a0646d1d-ce92-48b0-855f-10346c7577ee" }, { "id": "d4c5df8f-ec32-45b6-8679-4e94882f0be6", "name": "SCA is not required for this customer (`CONFLICT`), or a passkey enrollment was requested while one is already enrolled (`PASSKEY_ALREADY_ENROLLED`) \u2014 only one passkey per customer is supported.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-d4c5df8f-ec32-45b6-8679-4e94882f0be6" }, { "id": "e4ec17e2-d42c-463d-928b-23e715c649f5", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"type\": \"TOTP\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/factors?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "factors" ], "query": [ { "description": "(Required) The unique identifier of the customer whose factors are listed or enrolled.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-e4ec17e2-d42c-463d-928b-23e715c649f5" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c72af0ff-4bdb-4aef-903a-4686c8b85a73" } ], "id": "a1448615-e83a-4a62-a3ed-c816b6017e24", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-a1448615-e83a-4a62-a3ed-c816b6017e24" }, { "name": "login", "item": [ { "name": "start", "item": [ { "name": "Start an SCA login", "id": "a59b8996-9456-4f7b-9a0e-b8cde0d278bf", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] }, "description": "Begin an SCA login for the customer with the chosen factor, opening the\nend-user SCA session (an exemption gating read / account access beyond the\nper-transaction window). Returns factor-specific material: `SMS_OTP`\ndispatches a code and returns a `challengeId` + `expiresAt`; `TOTP` returns\nonly the factor (the customer reads the code from their app); `PASSKEY`\nreturns WebAuthn `passkeyOptions`. Complete with\n`POST /sca/login/complete`.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "dfe2be7d-75e0-4b9d-989b-05ad14923df1", "name": "SCA login started; factor-specific material is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"factor\": \"SMS_OTP\",\n \"challengeId\": \"\",\n \"expiresAt\": \"\",\n \"passkeyOptions\": null,\n \"allowedOrigins\": [\n \"\",\n \"\"\n ],\n \"relyingPartyId\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-dfe2be7d-75e0-4b9d-989b-05ad14923df1" }, { "id": "e48dd75b-0ba8-4cef-8b5c-53656f9ec0c3", "name": "Invalid or unknown factor", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-e48dd75b-0ba8-4cef-8b5c-53656f9ec0c3" }, { "id": "31e7ba52-013d-4a4f-9926-9e25e91938a8", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-31e7ba52-013d-4a4f-9926-9e25e91938a8" }, { "id": "f2adab06-225b-4255-88e1-599fb7166116", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-f2adab06-225b-4255-88e1-599fb7166116" }, { "id": "8ace1cd9-9a02-4a93-96c9-bf0f52317b37", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-8ace1cd9-9a02-4a93-96c9-bf0f52317b37" }, { "id": "5268f558-82ea-4e0c-a446-220afeabe3ac", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"factor\": \"PASSKEY\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/start?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "start" ], "query": [ { "description": "(Required) The unique identifier of the customer starting an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-5268f558-82ea-4e0c-a446-220afeabe3ac" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a59b8996-9456-4f7b-9a0e-b8cde0d278bf" } ], "id": "9b6311e6-04e2-45c0-85e3-f4be40ee4863", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-9b6311e6-04e2-45c0-85e3-f4be40ee4863" }, { "name": "complete", "item": [ { "name": "Complete an SCA login", "id": "59104f35-013b-4b04-a94f-3cdc75fcec7f", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] }, "description": "Finalize an SCA login by submitting the proof for the started factor\n(`code` for `SMS_OTP` / `TOTP`, or `passkeyAssertion` + `origin` for\n`PASSKEY`), echoing the `challengeId` for `SMS_OTP`. Returns the\nreported session status.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n\nIn sandbox, the SMS/TOTP code is always `123456`.\n" }, "response": [ { "id": "1e00bbbe-1974-4d6d-956e-bc31be242d4d", "name": "SCA login completed; the session status is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-1e00bbbe-1974-4d6d-956e-bc31be242d4d" }, { "id": "bcaabafb-cdce-45e8-b6e6-5f893420c5ab", "name": "Invalid or expired proof", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-bcaabafb-cdce-45e8-b6e6-5f893420c5ab" }, { "id": "4fcc3205-54de-48e0-90a4-201f50e6566b", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-4fcc3205-54de-48e0-90a4-201f50e6566b" }, { "id": "8bf349b3-bb31-4b4e-9ae6-66bb8339194a", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-8bf349b3-bb31-4b4e-9ae6-66bb8339194a" }, { "id": "1f5a52be-f8e3-48fd-96a4-80eebf29c9a4", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-1f5a52be-f8e3-48fd-96a4-80eebf29c9a4" }, { "id": "039a15d3-7b02-4eee-afb8-77b7f33ba7ba", "name": "The customer's login is locked (or suspended) after too many failed attempts. `details.lockedUntil` says when they may retry.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Locked (WebDAV) (RFC 4918)", "code": 423, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 423,\n \"code\": \"ACCOUNT_LOCKED\",\n \"details\": {\n \"suspended\": \"\",\n \"lockedUntil\": \"\",\n \"failedAttempts\": \"\",\n \"voluptate__d3\": 13366829.561081633,\n \"tempor_84\": 27536268,\n \"proident_4\": \"occaecat reprehenderit Lorem commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-039a15d3-7b02-4eee-afb8-77b7f33ba7ba" }, { "id": "512508ea-d653-42b7-aa15-a7d99579f282", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/login/complete?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "login", "complete" ], "query": [ { "description": "(Required) The unique identifier of the customer completing an SCA login.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-512508ea-d653-42b7-aa15-a7d99579f282" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-59104f35-013b-4b04-a94f-3cdc75fcec7f" } ], "id": "ddab984c-6893-4cfe-8ef4-343f4b1ca680", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-ddab984c-6893-4cfe-8ef4-343f4b1ca680" } ], "id": "0051c1ac-c583-49c9-90a0-c5d63a676dfb", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-0051c1ac-c583-49c9-90a0-c5d63a676dfb" }, { "name": "record-event", "item": [ { "name": "Record a security event", "id": "286f0a0d-99d8-4a96-a243-98dee7907d7c", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] }, "description": "Record a client-side security-relevant event for the customer with Grid's risk engine (e.g. a sign-in, a sensitive view), to\nfeed adaptive-authentication signals.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "aa01d919-5615-4c9c-8049-e3a587d02827", "name": "Event recorded; the customer's resulting login-security state is returned (including any lockout).", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"eventType\": \"FAILED_LOGIN_ATTEMPT\",\n \"suspended\": \"\",\n \"failedAttempts\": \"\",\n \"lockedUntil\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-aa01d919-5615-4c9c-8049-e3a587d02827" }, { "id": "a9a2a0fa-990e-4b82-b206-c583508dbdef", "name": "Invalid event type", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a9a2a0fa-990e-4b82-b206-c583508dbdef" }, { "id": "7538275f-e368-410c-8f5d-b24fca333b35", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-7538275f-e368-410c-8f5d-b24fca333b35" }, { "id": "d906a922-5b29-468b-a559-11a4a147968a", "name": "Customer not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-d906a922-5b29-468b-a559-11a4a147968a" }, { "id": "ef5dfc05-93b4-48a0-9bb8-4a98e0af3544", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-ef5dfc05-93b4-48a0-9bb8-4a98e0af3544" }, { "id": "22dc57d1-0611-48b9-a6b7-1ba950641234", "name": "The customer's login is locked (or suspended) after too many failed attempts. `details.lockedUntil` says when they may retry.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Locked (WebDAV) (RFC 4918)", "code": 423, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 423,\n \"code\": \"ACCOUNT_LOCKED\",\n \"details\": {\n \"suspended\": \"\",\n \"lockedUntil\": \"\",\n \"failedAttempts\": \"\",\n \"voluptate__d3\": 13366829.561081633,\n \"tempor_84\": 27536268,\n \"proident_4\": \"occaecat reprehenderit Lorem commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-22dc57d1-0611-48b9-a6b7-1ba950641234" }, { "id": "87e661df-ca1d-4f7e-8e4a-ab8b141cf525", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"eventType\": \"RESET_PASSWORD_COMPLETED\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/sca/record-event?customerId=", "host": [ "{{baseUrl}}" ], "path": [ "sca", "record-event" ], "query": [ { "description": "(Required) The unique identifier of the customer the security event is recorded for.", "key": "customerId", "value": "" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-87e661df-ca1d-4f7e-8e4a-ab8b141cf525" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-286f0a0d-99d8-4a96-a243-98dee7907d7c" } ], "id": "93cef285-dc0e-4651-8f02-e5f57f535342", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-93cef285-dc0e-4651-8f02-e5f57f535342" } ], "id": "c743e2f0-0199-49b8-9789-5370e1479018", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-c743e2f0-0199-49b8-9789-5370e1479018" }, { "name": "customers", "item": [ { "name": "external-accounts", "item": [ { "name": "{externalAccountId}", "item": [ { "name": "trust", "item": [ { "name": "confirm", "item": [ { "name": "Confirm trusting a beneficiary", "id": "c379b5d7-964b-4d33-bfaa-d756beba69b9", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "id": "954b6d5f-d0c1-4d34-860a-0b6fe2d6fd4a", "key": "externalAccountId", "value": "", "description": "(Required) The unique identifier of the external account (beneficiary) being trusted." } ] }, "description": "Finalize trusting a beneficiary (identified by the `externalAccountId` in the\npath) by submitting the SCA proof (`code` for `SMS_OTP` / `TOTP`, or\n`passkeyAssertion` + `origin` for `PASSKEY`), echoing the `challengeId` when\none was issued. Returns `trusted: true`.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n\nIn sandbox, the SMS/TOTP code is always `123456`.\n" }, "response": [ { "id": "73b20bf1-2957-4a9c-9eb6-89f08f47f293", "name": "Beneficiary trusted.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"trusted\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-73b20bf1-2957-4a9c-9eb6-89f08f47f293" }, { "id": "d9bee5f9-2324-48c6-93ac-745d363be46b", "name": "Invalid or expired proof", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-d9bee5f9-2324-48c6-93ac-745d363be46b" }, { "id": "f452aa7c-85b8-488f-be34-a0d2cedec261", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-f452aa7c-85b8-488f-be34-a0d2cedec261" }, { "id": "57d5582e-a5d0-4ae8-936d-19250d4dfcc2", "name": "Customer or external account not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-57d5582e-a5d0-4ae8-936d-19250d4dfcc2" }, { "id": "332a8871-51c3-4986-97e1-72f82a3c5075", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-332a8871-51c3-4986-97e1-72f82a3c5075" }, { "id": "67d74878-ce92-461f-8d54-14f0b3b2ec28", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-67d74878-ce92-461f-8d54-14f0b3b2ec28" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c379b5d7-964b-4d33-bfaa-d756beba69b9" } ], "id": "dc4636f5-f0f6-4252-b608-12b03812ca2e", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-dc4636f5-f0f6-4252-b608-12b03812ca2e" }, { "name": "Start trusting a beneficiary", "id": "cf5e86d3-f19d-4f5f-ac58-17d326dc971e", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "id": "322e8d8d-001d-463e-9b42-9d27d531afaf", "key": "externalAccountId", "value": "", "description": "(Required) The unique identifier of the external account (beneficiary) being trusted." } ] }, "description": "Begin trusting (whitelisting) an external account so future sends to it can\nskip the per-transaction SCA ceremony. Returns the `scaChallenge` to satisfy\n(when one is issued). Complete with\n`POST /customers/external-accounts/{externalAccountId}/trust/confirm`.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "c1a5cbfc-cc4c-42e9-8ef8-48d97e450752", "name": "Beneficiary trust started; the SCA challenge (if any) is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"scaChallenge\": {\n \"id\": \"\",\n \"expiresAt\": \"\",\n \"factor\": \"PASSKEY\",\n \"availableFactors\": [\n \"SMS_OTP\",\n \"TOTP\"\n ],\n \"purpose\": \"\",\n \"passkeyAssertionOptions\": null,\n \"passkeyAllowedOrigins\": null\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c1a5cbfc-cc4c-42e9-8ef8-48d97e450752" }, { "id": "f2334a5c-643b-4fcb-8186-bf78ad659ca6", "name": "Invalid request", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-f2334a5c-643b-4fcb-8186-bf78ad659ca6" }, { "id": "8000fa25-c053-499d-8f79-ae99a1e192ce", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-8000fa25-c053-499d-8f79-ae99a1e192ce" }, { "id": "68061207-792d-4d5f-bcc9-30896070263e", "name": "Customer or external account not found", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-68061207-792d-4d5f-bcc9-30896070263e" }, { "id": "ddf9d74d-3db1-43b0-a410-156acab6ce4f", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-ddf9d74d-3db1-43b0-a410-156acab6ce4f" }, { "id": "978e5a11-4514-4af2-bc71-ca19c62ed3dd", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/trust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "trust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-978e5a11-4514-4af2-bc71-ca19c62ed3dd" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-cf5e86d3-f19d-4f5f-ac58-17d326dc971e" } ], "id": "9e632e4e-ef8f-4e6e-a0b5-963949ca45d2", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-9e632e4e-ef8f-4e6e-a0b5-963949ca45d2" }, { "name": "untrust", "item": [ { "name": "confirm", "item": [ { "name": "Confirm untrusting a beneficiary", "id": "34c97b7b-f0be-4e48-bb07-a710c0302e2a", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "id": "7d36d781-3f76-46e6-89fa-6d6611136206", "key": "externalAccountId", "value": "", "description": "(Required) The unique identifier of the external account (beneficiary) being untrusted." } ] }, "description": "Finalize untrusting a beneficiary (identified by the `externalAccountId` in\nthe path) by submitting the SCA proof (`code` for `SMS_OTP` / `TOTP`, or\n`passkeyAssertion` + `origin` for `PASSKEY`), echoing the `challengeId` when\none was issued. Returns `trusted: false`.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n\nIn sandbox, the SMS/TOTP code is always `123456`.\n" }, "response": [ { "id": "1f512a39-f1a1-404f-a048-02a0bb4cb2e1", "name": "Beneficiary untrusted.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"trusted\": \"\"\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-1f512a39-f1a1-404f-a048-02a0bb4cb2e1" }, { "id": "75ffbddb-cd76-41e1-8d84-1583938f4e2e", "name": "Invalid or expired proof", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-75ffbddb-cd76-41e1-8d84-1583938f4e2e" }, { "id": "08d484b4-fdc2-426e-9895-822ee6ab2380", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-08d484b4-fdc2-426e-9895-822ee6ab2380" }, { "id": "ad59aad2-a51a-4e89-b6fb-f0d14e083263", "name": "Customer or external account not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-ad59aad2-a51a-4e89-b6fb-f0d14e083263" }, { "id": "0e38ca0f-0053-4c6a-9923-cf4c687a4844", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-0e38ca0f-0053-4c6a-9923-cf4c687a4844" }, { "id": "febdeb0e-240e-4122-b7a3-8af597fc33ef", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": true\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust/confirm", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust", "confirm" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-febdeb0e-240e-4122-b7a3-8af597fc33ef" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-34c97b7b-f0be-4e48-bb07-a710c0302e2a" } ], "id": "6c230e63-8ae8-4978-9c49-115d2664b5fe", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-6c230e63-8ae8-4978-9c49-115d2664b5fe" }, { "name": "Start untrusting a beneficiary", "id": "4808766f-a454-4bc4-a9c3-db0326d260ea", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "id": "b8bc27f5-e93e-4798-9b94-79d454584c33", "key": "externalAccountId", "value": "", "description": "(Required) The unique identifier of the external account (beneficiary) being untrusted." } ] }, "description": "Begin untrusting (removing the trusted mark from) an external account, so\nfuture sends to it are dynamically linked and require the per-transaction SCA\nceremony again. Returns the `scaChallenge` to satisfy (when one is issued).\nComplete with\n`POST /customers/external-accounts/{externalAccountId}/untrust/confirm`.\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n" }, "response": [ { "id": "c56b0b3d-5f17-4cf7-91ad-e0fffb634f86", "name": "Beneficiary untrust started; the SCA challenge (if any) is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"scaChallenge\": {\n \"id\": \"\",\n \"expiresAt\": \"\",\n \"factor\": \"PASSKEY\",\n \"availableFactors\": [\n \"SMS_OTP\",\n \"TOTP\"\n ],\n \"purpose\": \"\",\n \"passkeyAssertionOptions\": null,\n \"passkeyAllowedOrigins\": null\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c56b0b3d-5f17-4cf7-91ad-e0fffb634f86" }, { "id": "9882b508-d5a5-49cd-8afa-fc3564690443", "name": "Invalid request", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-9882b508-d5a5-49cd-8afa-fc3564690443" }, { "id": "23517804-77b2-4a31-98b0-2298b3a7f3da", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-23517804-77b2-4a31-98b0-2298b3a7f3da" }, { "id": "f5349697-abcb-413e-95d3-9b5844f0182c", "name": "Customer or external account not found", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-f5349697-abcb-413e-95d3-9b5844f0182c" }, { "id": "5e1e8395-d6d9-47ab-b5a6-82c998450df6", "name": "SCA is not required for this customer.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-5e1e8395-d6d9-47ab-b5a6-82c998450df6" }, { "id": "7ee962c1-3666-4cb7-8da1-4750fea80bf9", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/customers/external-accounts/:externalAccountId/untrust", "host": [ "{{baseUrl}}" ], "path": [ "customers", "external-accounts", ":externalAccountId", "untrust" ], "variable": [ { "key": "externalAccountId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-7ee962c1-3666-4cb7-8da1-4750fea80bf9" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-4808766f-a454-4bc4-a9c3-db0326d260ea" } ], "id": "a9c67398-b52c-4a3f-aac7-c1a25aee3cb3", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-a9c67398-b52c-4a3f-aac7-c1a25aee3cb3" } ], "id": "b78ee35a-f605-4714-9c9b-a5d3eb84cc33", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-b78ee35a-f605-4714-9c9b-a5d3eb84cc33" } ], "id": "aa6b57f2-17f8-4129-b90f-17ddf7a56850", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-aa6b57f2-17f8-4129-b90f-17ddf7a56850" } ], "id": "adb941d0-342f-4345-a22b-c476e64997cb", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-adb941d0-342f-4345-a22b-c476e64997cb" }, { "name": "quotes", "item": [ { "name": "{quoteId}", "item": [ { "name": "authorize", "item": [ { "name": "resend", "item": [ { "name": "Resend a quote's SCA challenge code", "id": "322e27e4-1f7c-4219-aaae-4f6d97941e55", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "id": "dae0bf9a-1ed1-4846-935a-79e3bea278f8", "key": "quoteId", "value": "", "description": "(Required) The unique identifier of the quote whose SCA challenge code should be re-sent." } ] }, "description": "Re-send the one-time code for a realtime-funding quote in\n`PENDING_AUTHORIZATION` status whose `scaChallenge.factor` is `SMS_OTP`. The\nexisting challenge is reused \u2014 no new challenge is issued, and its\n`scaChallenge.expiresAt` is **not** extended; once the challenge is past\n`expiresAt` it can no longer be authorized.\n\nOnly meaningful for customers in a region where SCA is required (e.g. EU);\na 409 is returned otherwise. `PASSKEY` challenges cannot be re-sent and return 409.\n\nIn sandbox, the code is always `123456`.\n" }, "response": [ { "id": "8d5d1415-7584-480f-99be-fd62ebf95eef", "name": "Code re-sent.", "originalRequest": { "method": "POST", "header": [ { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-8d5d1415-7584-480f-99be-fd62ebf95eef" }, { "id": "594b2560-996a-4b99-8dfb-539c3c150e95", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-594b2560-996a-4b99-8dfb-539c3c150e95" }, { "id": "a03a23cb-bcfd-4f7f-ba35-eb99f0c2fe96", "name": "Quote not found", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a03a23cb-bcfd-4f7f-ba35-eb99f0c2fe96" }, { "id": "2d8b716f-c26d-4027-a728-924ae77fa364", "name": "SCA is not required for this customer, the quote has no pending SMS challenge, or the challenge uses a factor whose code cannot be re-sent (e.g. passkey).", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-2d8b716f-c26d-4027-a728-924ae77fa364" }, { "id": "4abae03b-04b4-4347-802b-5d480e78b5c6", "name": "Too many requests. Returned with `RATE_LIMITED` when codes are re-sent too frequently, to avoid spamming the customer's phone. Clients should back off and retry after the interval indicated by the `Retry-After` response header.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Too Many Requests", "code": 429, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 429,\n \"code\": \"RATE_LIMITED\",\n \"details\": {\n \"dolore_7\": true,\n \"veniam_e3\": -30937493.972410172\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-4abae03b-04b4-4347-802b-5d480e78b5c6" }, { "id": "5af33630-0486-4357-be16-16dfb47b3dc3", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize/resend", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize", "resend" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-5af33630-0486-4357-be16-16dfb47b3dc3" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-322e27e4-1f7c-4219-aaae-4f6d97941e55" } ], "id": "8b474946-3d24-4584-938e-7952dc6dfde4", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-8b474946-3d24-4584-938e-7952dc6dfde4" }, { "name": "Authorize a quote's SCA challenge", "id": "a45b9f53-d3b7-4740-b5c0-1e75dae6d5b3", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "id": "2e9d0db5-c376-4e21-a28c-315bc05a1b90", "key": "quoteId", "value": "", "description": "(Required) The unique identifier of the quote whose SCA challenge is being authorized." } ] }, "description": "Satisfy the Strong Customer Authentication challenge carried by a quote in\n`PENDING_AUTHORIZATION` status by submitting an `ScaAuthorization` proof.\n\nThis is used for realtime-funding quotes: the quote is returned with an\n`scaChallenge` and **without** `paymentInstructions`; once authorized, the\nquote advances and its `paymentInstructions` are populated so the customer\ncan fund the transfer.\n\nAs with all SCA, a quote may require more than one authorization: after\nauthorizing, if the quote is still `PENDING_AUTHORIZATION` it carries the\nnext `scaChallenge` \u2014 authorize that too, repeating until it advances (see\n`ScaChallenge`).\n\nThis endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.\n\nIn sandbox, the SMS code is always `123456`.\n" }, "response": [ { "id": "c54d8247-9c9b-4436-a8a4-13b06ebe9ab4", "name": "Challenge authorized; the updated quote is returned.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"id\": \"\",\n \"status\": \"COMPLETED\",\n \"expiresAt\": \"\",\n \"createdAt\": \"\",\n \"source\": {\n \"accountId\": \"\",\n \"sourceType\": \"REALTIME_FUNDING\",\n \"customerId\": \"\"\n },\n \"destination\": {\n \"accountId\": \"\",\n \"destinationType\": \"ACCOUNT\",\n \"paymentRail\": \"RTP\"\n },\n \"sendingCurrency\": {\n \"code\": \"\",\n \"name\": \"\",\n \"symbol\": \"\",\n \"decimals\": \"\"\n },\n \"receivingCurrency\": {\n \"code\": \"\",\n \"name\": \"\",\n \"symbol\": \"\",\n \"decimals\": \"\"\n },\n \"totalSendingAmount\": \"\",\n \"totalReceivingAmount\": \"\",\n \"exchangeRate\": \"\",\n \"feesIncluded\": \"\",\n \"transactionId\": \"\",\n \"paymentInstructions\": [\n {\n \"accountOrWalletInfo\": {\n \"accountNumber\": \"\",\n \"accountType\": \"EUR_ACCOUNT\",\n \"paymentRails\": [\n \"RTP\",\n \"RTP\"\n ],\n \"reference\": \"\",\n \"routingNumber\": \"129483800\"\n },\n \"instructionsNotes\": \"\",\n \"isPlatformAccount\": \"\"\n },\n {\n \"accountOrWalletInfo\": {\n \"accountNumber\": \"\",\n \"accountType\": \"POLYGON_WALLET\",\n \"paymentRails\": [\n \"RTP\",\n \"FEDNOW\"\n ],\n \"reference\": \"\",\n \"routingNumber\": \"981557751\"\n },\n \"instructionsNotes\": \"\",\n \"isPlatformAccount\": \"\"\n }\n ],\n \"remittanceInformation\": \"\",\n \"counterpartyInformation\": {\n \"labore_8d8\": \"e\",\n \"nonee\": 44983459\n },\n \"rateDetails\": {\n \"counterpartyMultiplier\": \"\",\n \"counterpartyFixedFee\": \"\",\n \"gridApiMultiplier\": \"\",\n \"gridApiFixedFee\": \"\",\n \"gridApiVariableFeeRate\": \"\",\n \"gridApiVariableFeeAmount\": \"\"\n },\n \"scaChallenge\": {\n \"id\": \"\",\n \"expiresAt\": \"\",\n \"factor\": \"PASSKEY\",\n \"availableFactors\": [\n \"SMS_OTP\",\n \"TOTP\"\n ],\n \"purpose\": \"\",\n \"passkeyAssertionOptions\": null,\n \"passkeyAllowedOrigins\": [\n \"\",\n \"\"\n ]\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-c54d8247-9c9b-4436-a8a4-13b06ebe9ab4" }, { "id": "3af711ed-4f9d-4960-ae18-3c911892ebe8", "name": "Invalid or expired authorization proof", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 400,\n \"code\": \"INVALID_INPUT\",\n \"details\": {\n \"id9cd\": 64915001.158842236\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-3af711ed-4f9d-4960-ae18-3c911892ebe8" }, { "id": "b1ec0720-686d-49db-9952-9cf1b06735d3", "name": "Unauthorized", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Unauthorized", "code": 401, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 401,\n \"code\": \"INVALID_SIGNATURE\",\n \"details\": {\n \"nostrud69\": 73537816,\n \"elit_b4f\": true\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-b1ec0720-686d-49db-9952-9cf1b06735d3" }, { "id": "e699432e-e2d5-48f3-a307-fdd2658c01d7", "name": "Quote not found", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 404,\n \"code\": \"BULK_UPLOAD_JOB_NOT_FOUND\",\n \"details\": {\n \"aliqua_42\": \"eu non laboris dolor ad\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-e699432e-e2d5-48f3-a307-fdd2658c01d7" }, { "id": "fd920d79-34f8-483f-992f-2051162aea6b", "name": "SCA is not required for this customer, or the quote has no pending challenge to authorize.", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 409,\n \"code\": \"EMAIL_OTP_CREDENTIAL_SET_CHANGED\",\n \"details\": {\n \"anim_3\": 23211506,\n \"laboris_3a\": 67469855.47506937\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-fd920d79-34f8-483f-992f-2051162aea6b" }, { "id": "03af72b4-7807-47f1-b928-ac825a86e41d", "name": "Too many requests. Returned with `RATE_LIMITED` when authorization attempts for this challenge happen too frequently (for example, repeated bad codes brute-forcing the OTP). The challenge may be invalidated after too many failed attempts. Clients should b", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Too Many Requests", "code": 429, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 429,\n \"code\": \"RATE_LIMITED\",\n \"details\": {\n \"dolore_7\": true,\n \"veniam_e3\": -30937493.972410172\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-03af72b4-7807-47f1-b928-ac825a86e41d" }, { "id": "f4e43f29-6ddf-43a4-be4d-9476fd4f2a77", "name": "Internal service error", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: basic", "key": "Authorization", "value": "Basic " } ], "body": { "mode": "raw", "raw": "{\n \"code\": \"\",\n \"passkeyAssertion\": {\n \"ipsum_80b\": -80753838.28335516,\n \"officia6d\": 2075330.2407229543\n },\n \"origin\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/quotes/:quoteId/authorize", "host": [ "{{baseUrl}}" ], "path": [ "quotes", ":quoteId", "authorize" ], "variable": [ { "key": "quoteId" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"message\": \"\",\n \"status\": 500,\n \"code\": \"GRID_SWITCH_ERROR\",\n \"details\": {\n \"cupidatatd\": \"dolore quis ad commodo\"\n }\n}", "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-f4e43f29-6ddf-43a4-be4d-9476fd4f2a77" } ], "createdAt": "2026-07-28T02:07:58.000Z", "updatedAt": "2026-07-28T02:07:58.000Z", "uid": "35240-a45b9f53-d3b7-4740-b5c0-1e75dae6d5b3" } ], "id": "bb62df1b-cb28-492f-8fbf-1194c8efadc4", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-bb62df1b-cb28-492f-8fbf-1194c8efadc4" } ], "id": "15d4e0b1-569e-4300-8629-8db4a98e5168", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-15d4e0b1-569e-4300-8629-8db4a98e5168" } ], "id": "db063f90-c22d-4892-aa89-39f9e7785f5c", "createdAt": "2026-07-28T02:07:57.000Z", "updatedAt": "2026-07-28T02:07:57.000Z", "uid": "35240-db063f90-c22d-4892-aa89-39f9e7785f5c" } ], "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}", "type": "string" }, { "key": "password", "value": "{{basicAuthPassword}}", "type": "string" } ] }, "variable": [ { "key": "baseUrl", "value": "https://api.lightspark.com/grid/2025-10-13" } ] }