---
title: "Grant Build Credits. Fresh operator session, reason required, idempotent per requestId"
method: POST
path: "/operator/billing/accounts/{organizationId}/build-credits"
tags: ["Operator"]
---

# Grant Build Credits. Fresh operator session, reason required, idempotent per requestId

`POST /operator/billing/accounts/{organizationId}/build-credits`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/billing/accounts/{organizationId}/build-credits`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `organizationId` string, uuid, required

## Request body

- object
  - `credits` integer, required
  - `reason` string, required: required: shown in the audit log verbatim
  - `requestId` string, uuid, required: generated once per confirmation dialog: repeating the request (double click, retry) never repeats the money movement

## Response `200`

Granted

- object
  - `status` 'ok', required
  - `reference` string, nullable, required: the Stripe object created (credit note, balance transaction) when any
  - `replay` boolean

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden); details.requiresSession for plan/payment changes over a token
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state, e.g. a subscription already exists (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Billing is not set up on this server (code not_configured)
- `503`: The payment provider is unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)