Production authority

Issue a one-time challenge for a registered mandate

Requires an active live key, a current business-agreement acceptance, an active account-registered mandate and the RFC 7638 thumbprint of an active account-pinned payment-authority key. The nonce expires after five minutes and is consumable once for the same account, mandate, protocol and pinned key.

post/api/v2/challenges

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v2/challenges
  • Auth: HTTP bearer

Request body

mandate_idstring required
protocol'AP2' | 'TAP' | 'UCP' | 'X402' | 'MPP' | 'ACP' | 'CUSTOM' required

Exact protocol for this challenge. ANY is valid only when registering a trust-key pin.

key_thumbprintstring required

RFC 7638 thumbprint of the account-pinned payment-authority key.

Response

Challenge issued

noncestring required
created_atinteger required

Unix milliseconds

expires_atinteger required

Unix milliseconds

mandate_idstring required
mandate_versioninteger required
mandate_hashstring required
protocolstring required
key_thumbprintstring required
issuerstring required

Issuer registered with the selected key pin. Sign this exact value.

audiencestring required

Audience registered with the selected key pin. Sign this exact value.

expires_at_isostring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.