Evaluate and bind authority for one UCP checkout completion

Accepts a complete UCP checkout response envelope negotiated at either 2026-04-08 or 2026-08-25. The seven UCP top-level checkout fields are required and extension members remain open. August responses must also carry ucp.payment_handlers; line items retain their official required fields and quantity floor; checkout totals contain exactly one subtotal and one total. Historical April callers retain the original adapter's optional payment-handler compatibility. Missing, ambiguous, or unsupported material fails before policy evaluation.

Decionis authorizes; the connected merchant system remains responsible for execution. An ALLOW decision is not itself an execution grant. An authoritative response may carry an exact-action grant that must be claimed immediately before the merchant commits the checkout, then finalized as COMMITTED, FAILED, or INDETERMINATE.

post/v1/ucp/checkout/authorize

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/ucp/checkout/authorize
  • Auth: HTTP bearer

Headers

Idempotency-Keystring

Request body

org_idstring uuid

Optional when the authenticated API key is organization-bound.

approval_urlstring uri
mode'SHADOW' | 'PARALLEL' | 'ENFORCEMENT'
grant_ttl_secondsinteger
idempotency_keystring
degradation_mode'fail_closed'

Compatibility field. Execution authority always fails closed; caller-selected fail-open is rejected.

Response

UCP-shaped authority result; execution authority remains fail-closed

service'decionis' required
checkout_idstring
mode'SHADOW' | 'PARALLEL' | 'ENFORCEMENT'
enforcingboolean
authority_classification'AUTHORITATIVE' | 'OBSERVATIONAL'

Authority possessed by an artifact, independent of its verdict. Only AUTHORITATIVE artifacts may become execution-eligible.

evaluation_mode'SHADOW' | 'PARALLEL' | 'ENFORCEMENT'

Present on some fail-closed evidence errors; normal results use mode.

execution_eligibleboolean

True only for an AUTHORITATIVE ALLOW carrying an exact-action execution grant. Signature validity alone does not make a response execution-eligible.

dossier_idstring nullable
statusstring nullable
continue_urlstring uri
errorobject
requires_human_approvalboolean
reason_codesstring[]

Changes

No recorded changes to this operation across all 1 revision of this API.