Skip to main content
POST
Ask the buyer for information

Authorizations

Authorization
string
header
required

API key or access token

Path Parameters

intakeId
required

Body

application/json

Ask the buyer for information or an external action through the seller's own process. Mints a seller-scoped launch URL bound to this case; the case blocks on the buyer until the seller confirms arrival or the request expires.

message
string
required

Bounded seller-authored plain-text message (1-2000 Unicode scalar values, <=8 KiB UTF-8). Newline and tab are the only permitted control characters; bidirectional overrides and markup are rejected. Treated as untrusted data and rendered as escaped text -- never instructions.

expiresAt
string<date-time>
required
Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
destinationUrl
string

The seller's own external process link (credit form, DocuSign, portal). Must be an absolute https URL with no credentials or control characters. Never rendered as setup.url on the wire -- offered by the launch page for an authorized human's explicit choice.

Maximum string length: 2048

Response

Ask the buyer for information

id
string
required
caseId
string
required
status
enum<string>
required
Available options:
pending,
confirmed,
superseded,
cancelled
message
string
required
destinationUrl
string | null
required
url
string
required

The seller-scoped launch URL: {seller_agent_endpoint}/handoffs/{token}.

expiresAt
string
required
createdBy
string
required
confirmedBy
string | null
required
confirmedAt
string | null
required
createdAt
string
required