Skip to main content
POST
Post the request your browser captured when the agent submitted a placeholder card to a recognized payment processor. Agentcard returns an approvalUrl for the user. When they approve, their device sends the real card to the processor and the authorization carries the processor response you replay into the paused request. The SDK makes this call for you. Call it directly only if you run your own interception.
​
string
required
The connected user whose vaulted card pays.
​
string
required
Shown to the user on the approval screen. Up to 120 printable characters.
​
integer
The amount the user approves, in the smallest unit (2306 for $23.06). Travels with currency. On a Stripe PaymentIntent confirm, Agentcard holds the processor to this amount.
​
string
ISO 4217 code for amount_cents.
​
string
Display string, required only when amount_cents and currency are not given.
​
string
required
The payment processor: stripe, shopify, square, recurly, razorpay, adyen, tranzila.
​
string
token (default), cse (Adyen), or hosted_form (Tranzila). Required for cse and hosted_form.
​
string
Which of the user’s vaulted cards should pay. Defaults to the most recently added. The user can still pick another.
​
object
required
The captured processor request: url, method, headers, body.
Errors. 400 mode_required, 400 mode_mismatch, 400 currency_required / amount_cents_required, 404 card_not_found, 409 amount_mismatch (Stripe intent disagrees with amount_cents; carries expected_cents and actual_cents), 409 intent_not_confirmable, 502 amount_unverifiable. Authorizations expire after 15 minutes without approval. When you fulfill the paused browser request with the approved response, add access-control-allow-origin echoing the request’s Origin and access-control-allow-credentials: true, or the page rejects it.