Contents

API reference

Accounts

API reference descriptions are provided in English to preserve the exact published contract.

Get the authenticated account

GET /v1/accounts/{AC}

Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Update the authenticated account

PATCH /v1/accounts/{AC}

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (6 fields)
Request body
NameTypeRequiredDescription
autoReadReceiptsboolean
consentPolicy"STRICT" | "STANDARD"
displayNamestring (max 128 chars)
homeRegionstring (pattern ^[a-z0-9][a-z0-9-]*$, max 64 chars)
reasonstring (max 2000 chars)yes
timezonestring (max 64 chars) | nullIANA time zone the account schedules in (for example Africa/Lagos). null returns to the zone of the organization's country.

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

List API date versions and the account default

GET /v1/accounts/{AC}/api-versions

The version registry: known dates, their status and their end-of-support dates, together with this account's default and the version this request resolved to. Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Set the account default API version

PATCH /v1/accounts/{AC}/api-versions/default

: the per-account default a request without `ShipMessages-Version` resolves to. `null` restores the platform default. A sunset or unknown date is refused. Required scope: any one of `accounts:write`, `api_keys:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (1 fields)
Request body
NameTypeRequiredDescription
versionstring (pattern ^\d{4}-\d{2}-\d{2}$) | nullyes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Irreversibly close the authenticated account

POST /v1/accounts/{AC}/close

Required scope: `organization:delete`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (4 fields)
Request body
NameTypeRequiredDescription
caseRefstring (max 128 chars)yes
confirmationstring (max 28 chars)yes
reasonstring (max 2000 chars)yes
stepUpTokenstring (max 256 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Get the owning organization

GET /v1/accounts/{AC}/organization

Required scope: `users:read`.

Parameters

Parameters
NameTypeRequiredDescription
limitquery · integer (1–100)
cursorquery · string (max 2048 chars)
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Update the owning organization

PATCH /v1/accounts/{AC}/organization

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (5 fields)
Request body
NameTypeRequiredDescription
countrystring (pattern ^[A-Z]{2}$)
defaultCurrencystring (pattern ^[A-Z]{3}$)
displayNamestring (max 128 chars)
legalNamestring (max 200 chars)
reasonstring (max 2000 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

List organization accounts

GET /v1/accounts/{AC}/organization/accounts

Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
limitquery · integer (1–100)
cursorquery · string (max 2048 chars)
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Create an account in the organization

POST /v1/accounts/{AC}/organization/accounts

Required scope: `organization:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (3 fields)
Request body
NameTypeRequiredDescription
displayNamestring (max 128 chars)yes
homeRegionstring (pattern ^[a-z0-9][a-z0-9-]*$, max 64 chars)yes
reasonstring (max 2000 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Irreversibly close the organization

POST /v1/accounts/{AC}/organization/close

Required scope: `organization:delete`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (4 fields)
Request body
NameTypeRequiredDescription
caseRefstring (max 128 chars)yes
confirmationstring (max 28 chars)yes
reasonstring (max 2000 chars)yes
stepUpTokenstring (max 256 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Read customer key custody configuration and verification state

GET /v1/accounts/{AC}/security/customer-kms

Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Configure approved customer OpenBao Transit custody

POST /v1/accounts/{AC}/security/customer-kms

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (7 fields)
Request body
NameTypeRequiredDescription
addressstring (max 500 chars)yes
approvalSidstring (AP… SID)yes
mountstring (max 128 chars)yes
namespacestring (max 128 chars)
provider"CUSTOMER_OPENBAO_TRANSIT"yes
stepUpTokenstring (max 256 chars)yes
tokenSecretRefstring (max 500 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Activate approved customer key custody after verification

POST /v1/accounts/{AC}/security/customer-kms/activate

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (2 fields)
Request body
NameTypeRequiredDescription
approvalSidstring (AP… SID)yes
stepUpTokenstring (max 256 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Start approved customer key custody rotation

POST /v1/accounts/{AC}/security/customer-kms/start

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (2 fields)
Request body
NameTypeRequiredDescription
approvalSidstring (AP… SID)yes
stepUpTokenstring (max 256 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Show the account data encryption key version and its last rotation

GET /v1/accounts/{AC}/security/keys

Required scope: `audit:read`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Rotate the account data encryption key (new Transit key version)

POST /v1/accounts/{AC}/security/keys/rotate

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (4 fields)
Request body
NameTypeRequiredDescription
approvalSidstring (AP… SID)yes
caseRefstring (max 128 chars)
reasonstring (max 2000 chars)yes
stepUpTokenstring (max 256 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

List subaccounts

GET /v1/accounts/{AC}/subaccounts

Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
limitquery · integer (1–100)
cursorquery · string (max 2048 chars)
ACpath · string (AC… SID)yesAccount SID

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Create a subaccount

POST /v1/accounts/{AC}/subaccounts

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
Request body (1 fields)
Request body
NameTypeRequiredDescription
displayNamestring (max 128 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Get a subaccount

GET /v1/accounts/{AC}/subaccounts/{SA}

Required scope: `accounts:read`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
SApath · string (SA… SID)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Update a subaccount

PATCH /v1/accounts/{AC}/subaccounts/{SA}

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
SApath · string (SA… SID)yes
Request body (1 fields)
Request body
NameTypeRequiredDescription
displayNamestring (max 128 chars)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Close an empty subaccount

DELETE /v1/accounts/{AC}/subaccounts/{SA}

Required scope: `accounts:write`.

Parameters

Parameters
NameTypeRequiredDescription
ACpath · string (AC… SID)yesAccount SID
SApath · string (SA… SID)yes

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Public API changelog feed

GET /v1/changelog

Every known API date version with its release, deprecation and end-of-support dates, newest first. The same entries are published as RSS 2.0 at `/v1/changelog.rss`.

Parameters

Parameters
NameTypeRequiredDescription
limitquery · integer (1–100)
cursorquery · string (max 2048 chars)

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.

Public API changelog feed as RSS 2.0

GET /v1/changelog.rss

Errors: 400, 401, 403, 404, 409, 422, 429, 500, 503 — see errors.