LIlightsparkdev
Strong Customer Authentication

Start trusting a beneficiary

Changed on

Begin trusting (whitelisting) an external account so future sends to it can skip the per-transaction SCA ceremony. Returns the scaChallenge to satisfy (when one is issued). Complete with POST /customers/external-accounts/{externalAccountId}/trust/confirm.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

post/customers/external-accounts/{externalAccountId}/trust

Request

  • Base URL
    https://api.lightspark.com/grid/2025-10-13
  • URL
    https://api.lightspark.com/grid/2025-10-13/customers/external-accounts/{externalAccountId}/trust
  • Auth
    HTTP basic

Response

Beneficiary trust started; the SCA challenge (if any) is returned.

Example response

{
  "scaChallenge": {
    "id": "ScaChallenge:019542f5-b3e7-1d02-0000-000000000007",
    "expiresAt": "2025-10-03T12:05:00Z",
    "availableFactors": [
      "SMS_OTP"
    ],
    "purpose": "PAYOUT",
    "passkeyAllowedOrigins": [
      "https://app.example.com"
    ]
  }
}

Changes

  • d996ddfb9d2bRevision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f11f1e76bdd7Revision changes
    • warning

      added the new PURCHASE_CARD_LIMIT_REACHED enum value to the response property for the response status