---
title: "Fulfill a Lockbox Request"
method: POST
path: "/v1/lockboxes/fulfill_request"
tags: ["mailbox"]
---

# Fulfill a Lockbox Request

`POST /v1/lockboxes/fulfill_request`

Notifies Chariot that a new PO box has been provisioned by the lockbox provider.

The `request_id` is a one-time unique value generated by Chariot for each PO box request.

See the [Provisioning guide](/v2026-01-15/guides/lockbox-providers/provisioning) for the full provisioning flow.

## Request body

- object
  - `request_id` string, required — The unique request identifier originally provided by Chariot when the PO box was requested.
  - `location_id` string, required — The identifier of the newly provisioned PO box.
  - `address` Address, required
    - `city` string, required — City, district, suburb, town, or village. Maximum length: 255 characters.
    - `country` string, required — Two-letter country code (https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2)
    - `line1` string, required — Address line 1 (e.g. street, PO Box, or company name). Maximum length: 255 characters.
    - `line2` string — Address line 2 (e.g. apartment, suite, unit, or building). Maximum length: 255 characters.
    - `postal_code` string, required — ZIP or postal code. Maximum length: 40 characters.
    - `state` string, required — State, county, province, or region

## Response `200`

Indicates the PO box has been successfully provisioned.

## Other responses

- `400` — The request is invalid or contains invalid parameters
- `401` — Unauthorized. The request is missing the security (OAuth2 Bearer token) requirements and the server is unable to verify the identify of the caller.
- `403` — Access denied
- `500` — Internal Server Error

---

[API](https://skmtc.net/chariot-giving/apis/specs.md) · [All operations](https://skmtc.net/chariot-giving/apis/specs/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/chariot-giving/specs/revisions/8446023e02fb/schema)