Approve or decline a proposed mandate

curl --request PUT \
  --url https://api.sumvin.com/v0/mandate-ceremonies/current/decision \
  --header 'Content-Type: application/json' \
  --header 'x-juno-jwt: <api-key>' \
  --data '
{
  "decision": "approved",
  "signature": "0x3d5f...1b"
}
'

import requests

url = "https://api.sumvin.com/v0/mandate-ceremonies/current/decision"

payload = {
    "decision": "approved",
    "signature": "0x3d5f...1b"
}
headers = {
    "x-juno-jwt": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {'x-juno-jwt': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({decision: 'approved', signature: '0x3d5f...1b'})
};

fetch('https://api.sumvin.com/v0/mandate-ceremonies/current/decision', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.sumvin.com/v0/mandate-ceremonies/current/decision",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'decision' => 'approved',
    'signature' => '0x3d5f...1b'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "x-juno-jwt: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.sumvin.com/v0/mandate-ceremonies/current/decision"

	payload := strings.NewReader("{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("x-juno-jwt", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.sumvin.com/v0/mandate-ceremonies/current/decision")
  .header("x-juno-jwt", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.sumvin.com/v0/mandate-ceremonies/current/decision")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["x-juno-jwt"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}"

response = http.request(request)
puts response.read_body

{
  "_links": {
    "decision": {
      "href": "/v0/mandate-ceremonies/current/decision",
      "method": "PUT"
    },
    "self": {
      "href": "/v0/mandate-ceremonies/current"
    }
  },
  "ceremony_id": "mcer-4f2a91c0",
  "chain_id": 1329,
  "expires_at": 1757337600000,
  "mandate_uri": "sr:us:pint:9f14c2",
  "scopes": [
    "sr:us:pint:spend:visa_checkout?max=500.00&currency=USD"
  ],
  "signer_anchor": "registered_safe_owner",
  "statement": "Authorise spending of up to 500.00 USD. This authorisation lapses on 2026-09-08T12:00:00Z.",
  "status": "proposed",
  "typed_data": {
    "domain": {
      "chainId": 1329,
      "name": "Sumvin Purchase Intent",
      "verifyingContract": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984",
      "version": "3"
    },
    "message": {
      "conditions": [],
      "expiresAt": 1757337600000,
      "maxAmount": 0,
      "maxAmountToken": "0x0000000000000000000000000000000000000000",
      "nonce": 4,
      "resources": [
        "sr:us:person:safe:0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
      ],
      "scopes": [
        "sr:us:pint:spend:visa_checkout?max=500.00&currency=USD"
      ],
      "statement": "Authorise spending of up to 500.00 USD. This authorisation lapses on 2026-09-08T12:00:00Z.",
      "wallet": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
    },
    "primaryType": "PurchaseIntent",
    "types": {}
  },
  "verifying_contract": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>",
      "input": "<unknown>",
      "ctx": {}
    }
  ]
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

Mandates

Approve or decline a proposed mandate

Record the account holder’s answer to a proposed spending mandate. Send the ticket from the approval link in the x-sumvin-ceremony-ticket header.

Approving requires the signature over the prepared authorisation exactly as it was supplied — sign the stored bytes, not a copy rebuilt from the rendered fields, so an approval always means exactly what was shown. Declining is final and needs no signature; the mandate is withdrawn either way it ends, so a refusal cannot be worked around.

An approval can be given once. Answering a second time, answering after the window has passed, or answering with the wrong account signed in are each reported distinctly.

PUT

mandate-ceremonies

current

decision

Approve or decline a proposed mandate

curl --request PUT \
  --url https://api.sumvin.com/v0/mandate-ceremonies/current/decision \
  --header 'Content-Type: application/json' \
  --header 'x-juno-jwt: <api-key>' \
  --data '
{
  "decision": "approved",
  "signature": "0x3d5f...1b"
}
'

import requests

url = "https://api.sumvin.com/v0/mandate-ceremonies/current/decision"

payload = {
    "decision": "approved",
    "signature": "0x3d5f...1b"
}
headers = {
    "x-juno-jwt": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {'x-juno-jwt': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({decision: 'approved', signature: '0x3d5f...1b'})
};

fetch('https://api.sumvin.com/v0/mandate-ceremonies/current/decision', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.sumvin.com/v0/mandate-ceremonies/current/decision",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'decision' => 'approved',
    'signature' => '0x3d5f...1b'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "x-juno-jwt: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.sumvin.com/v0/mandate-ceremonies/current/decision"

	payload := strings.NewReader("{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("x-juno-jwt", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.sumvin.com/v0/mandate-ceremonies/current/decision")
  .header("x-juno-jwt", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.sumvin.com/v0/mandate-ceremonies/current/decision")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["x-juno-jwt"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"decision\": \"approved\",\n  \"signature\": \"0x3d5f...1b\"\n}"

response = http.request(request)
puts response.read_body

{
  "_links": {
    "decision": {
      "href": "/v0/mandate-ceremonies/current/decision",
      "method": "PUT"
    },
    "self": {
      "href": "/v0/mandate-ceremonies/current"
    }
  },
  "ceremony_id": "mcer-4f2a91c0",
  "chain_id": 1329,
  "expires_at": 1757337600000,
  "mandate_uri": "sr:us:pint:9f14c2",
  "scopes": [
    "sr:us:pint:spend:visa_checkout?max=500.00&currency=USD"
  ],
  "signer_anchor": "registered_safe_owner",
  "statement": "Authorise spending of up to 500.00 USD. This authorisation lapses on 2026-09-08T12:00:00Z.",
  "status": "proposed",
  "typed_data": {
    "domain": {
      "chainId": 1329,
      "name": "Sumvin Purchase Intent",
      "verifyingContract": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984",
      "version": "3"
    },
    "message": {
      "conditions": [],
      "expiresAt": 1757337600000,
      "maxAmount": 0,
      "maxAmountToken": "0x0000000000000000000000000000000000000000",
      "nonce": 4,
      "resources": [
        "sr:us:person:safe:0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
      ],
      "scopes": [
        "sr:us:pint:spend:visa_checkout?max=500.00&currency=USD"
      ],
      "statement": "Authorise spending of up to 500.00 USD. This authorisation lapses on 2026-09-08T12:00:00Z.",
      "wallet": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
    },
    "primaryType": "PurchaseIntent",
    "types": {}
  },
  "verifying_contract": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": [
    {
      "loc": [
        "<string>"
      ],
      "msg": "<string>",
      "type": "<string>",
      "input": "<unknown>",
      "ctx": {}
    }
  ]
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

{
  "detail": "No wallet found with ID 12345 for this user.",
  "error_code": "WAL-404-001",
  "instance": "/v0/wallets/12345",
  "status": 404,
  "title": "Wallet Not Found",
  "trace_id": "abc123-def456-ghi789",
  "type": "https://api.sumvin.com/errors/wal-404-001"
}

Authorizations

x-juno-jwt

string

header

required

Session JWT from the identity provider that signed the user in — Dynamic Labs, Privy, or Clerk (consumer sign-in). Send it in the x-juno-jwt header on every authenticated request. An Authorization: Bearer <jwt> header carrying the same JWT is also accepted, and takes precedence when both are present.

Headers

x-sumvin-ceremony-ticket

string | null

Ticket from the approval link. Treat it as a secret: it addresses a live spending authorisation, carries exactly one decision, and stays usable until that decision is made or the approval window closes.

x-juno-jwt

string | null

x-juno-orgid

string | null

Tenant org ID for multi-tenant auth

X-Timestamp-Format

string

Controls how timestamp fields are serialized in JSON response bodies.

Default (header omitted or any other value): epoch milliseconds as integers. iso8601: UTC ISO 8601 strings of the form YYYY-MM-DDTHH:MM:SSZ.

Example: with X-Timestamp-Format: iso8601, the field value 1704067200000 becomes "2024-01-01T00:00:00Z".

Affected fields (recursively, in dicts and arrays): any field whose name ends in _at, plus the literal field names timestamp, period_start, and period_end. All other fields are passed through unchanged.

Only iso8601 is recognized. Any other value (or omitting the header) yields the default epoch-ms representation; the server does not reject unknown values, so this is documented as an example rather than an enum to keep generated clients permissive.

Example:

"iso8601"

Body

application/json

The account holder's answer to a proposed spending mandate.

decision

enum<string>

required

Whether to authorise the proposed spending mandate. Approving requires the signature; declining does not.

Available options:

approved,

declined

signature

string | null

Signature over the prepared authorisation exactly as it was supplied, produced by a wallet key registered on this account. Required to approve, and ignored when declining.

Response

Decision recorded

A proposed spending mandate as it currently stands.

_links

MandateCeremonyLinks · object

required

HAL-style hypermedia links for navigation.

Show child attributes

ceremony_id

string

required

Stable identifier for this approval, safe to log and to quote in support.

status

enum<string>

required

Where the approval stands: awaiting a decision, authorised, declined, or lapsed. Reconciled against the mandate itself, which a separate actor can move.

Available options:

proposed,

stamped,

declined,

expired

expires_at

integer

required

When this approval lapses, in epoch milliseconds. After it, nothing can be signed.

mandate_uri

string

required

Identifier of the spending mandate being authorised.

statement

string

required

The sentence the wallet shows the account holder. It names the spending limit and the moment the authorisation lapses, and it is part of what is signed.

scopes

string[]

required

Exactly what this mandate authorises, as it appears in the signed authorisation.

chain_id

integer

required

Network the signature is produced on.

verifying_contract

string

required

Address the signature is checked against — the wallet on this account.

signer_anchor

enum<string>

required

What the signature has to prove. registered_safe_owner means it must come from a key registered as an owner of the account's wallet; the wallet is a contract and cannot sign for itself.

Available options:

claimed_wallet,

registered_safe_owner

typed_data

EIP712Payload · object

required

The prepared authorisation to sign, exactly as stored. Sign these bytes unchanged — anything rebuilt from the fields above may differ from what is verified.

Show child attributes

reason

string | null

Why the approval reached this state when that is not simply the account holder's own answer — for example an authorisation withdrawn before it was approved. Null when there is nothing to add.

Introduction

Quickstarts

Guides

Product Guides

API Reference

Approve or decline a proposed mandate

Authorizations

Headers

Body

Response