RIriskified
Pre-Authorization Flow

Merchant Decision

Changed on

Update the existing order external status. The /decision endpoint should be used in the following scenarios:

  • To confirm to Riskified that authorization was successful (common scenario)

  • To update Riskified about the final status of the order (specific use cases)

Let us know what was your decision on your order.

post/api/decision

Request

  • Base URL
    https://sandbox.riskified.com
  • URL
    https://sandbox.riskified.com/api/decision
  • Auth
    none declared. Required headers: x-riskified-shop-domain, x-riskified-hmac-sha256, Content-Type, accept

Headers

x-riskified-shop-domainstring required
Example:merchant.example.com

The merchant shop domain registered with Riskified.

x-riskified-hmac-sha256string required
Example:b1946ac92492d2347c6235b4d2611184

Verification hash for the Request. Generated by performing an SHA256 encryption on the request's POST body and calculating the HMAC hash of the result using your Riskified authentication token. Please use UTF8 encoding.

Content-Type'application/json' required

As payloads are sent to Riskified in JSON format, value should be: application/json

accept'application/vnd.riskified.com; version=2' required

Specify the version of the API to target. For example, to target the latest version of the API, use the following: application/vnd.riskified.com; version=2

Request body

Example request

{
  "order": {
    "id": "450789469",
    "gateway": "Adyen_3ds",
    "decision": {
      "external_status": "approved",
      "decided_at": "2025-11-20T17:15:00Z",
      "reason": "Approved by automated risk system",
      "amount": 400,
      "currency": "USD",
      "notes": "Order passed all checks."
    },
    "payment_details": [
      {
        "payment_type": "card",
        "id": "pmt_01",
        "credit_card_bin": "482932",
        "credit_card_number": "9876",
        "credit_card_company": "Visa",
        "authorization_id": "AUTH_SUCCESS_8765",
        "avs_result_code": "Y",
        "cvv_result_code": "M",
        "initial_payment_amount": 400,
        "payment_frequency": 1,
        "acquirer_region": "NONEU",
        "mid": "AD_MID_7890",
        "expiry_month": 12,
        "expiry_year": 2028,
        "authentication_result": {
          "eci": "05",
          "liability_shift": true,
          "created_at": "2025-11-20T17:14:00Z"
        }
      }
    ]
  }
}

Response

Successful operation

Example response

{
  "order": {
    "id": "53953819"
  }
}

Changes

  • 4b9133c61e7fRevision changes
    • breaking

      added the new required header request parameter Content-Type

    • breaking

      added the new required request property /

    • warning

      deleted the header request parameter content_type

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • info

      api tag Pre-Authorization Flow added

    • info

      api tag Automation Endpoints removed

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status