Transfer between wallets

POST 
/transfers

Either token. With your machine token you act for any of your users. With a user token the caller may only act for themselves.

Request

Responses

201

Created

400

Malformed request — validation failure, or a header such as Idempotency-Key is missing or not a UUID.

401

Missing, expired, or untrusted bearer token.

403

Authenticated but not permitted — the caller's role or scope does not grant this operation, or the resource belongs to another tenant.

404

The referenced wallet, transaction, user, or tenant does not exist within the caller's tenant.

409

Idempotency conflict — a request with this Idempotency-Key is still in flight. Retry once it settles. A key belonging to an already-completed request is NOT an error: the original response is replayed with its original status.

422

The request is well-formed but violates a business rule — for example a posting that would breach a wallet fund's balance floor, a transaction type not enabled for the tenant, a per-transaction or daily issuance cap, or an operation on a frozen wallet.

500

Unexpected server error.