Analysis only

Analyze a purchase against policy boundaries

Non-executable analysis. This operation always returns enforcement_authorized=false, including for persisted live-key decisions. Do not place it in a payment execution switch.

post/api/v1/preflight

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v1/preflight
  • Auth: one of:
    • HTTP bearer
    • none

Request body

protocol'AP2' | 'TAP' | 'UCP' | 'X402' | 'MPP' | 'ACP' | 'CUSTOM' required
mandate_idstring required
agent_idstring required
merchant_idstring required
asset_idstring

Exact token or asset identifier. Required for X402 and matched byte-for-byte to the registered mandate after surrounding whitespace is removed.

networkstring

Exact network or chain identifier. Required for X402 and matched to the registered mandate.

resourcestring

Exact paid-resource identifier. Required for X402 and matched to the registered mandate; a different path or resource is a substitution.

created_atstring date-time
expires_atstring date-time
idempotency_keystring required
intent_hashstring
checkout_hashstring

Digest or stable identifier for the exact final checkout. Required by the strict AP2 closed-payment projection.

user_consentboolean
credential_bindingstring
purposestring

Response

Analysis completed; never execution authority

decision'ALLOW' | 'REVIEW' | 'BLOCK' required
policy_decision'ALLOW' | 'REVIEW' | 'BLOCK'
scoreinteger required

Deterministic control-coverage indicator, not a calibrated probability of fraud or loss.

receiptstring required
checked_atstring date-time required
protocolstring required
recommended_actionstring required
mode'sandbox' | 'test' | 'live' | 'strict' required
persistedboolean required
enforcement_authorizedfalse required

The v1 analysis profile never authorizes execution.

Changes

No recorded changes to this operation across all 1 revision of this API.