v2

latestOpenAPI 3.1.0Source-specific upstream terms; see response catalog metadata2026-07-26139203447.9 KB

Support

Create a customer-support ticket

Public write exception for customer support. Authentication is optional, but the boolean accept_privacy=true is mandatory and is persisted as the purpose-bound audit event privacy_accepted / privacy_policy_v1. The submitted contact details, message, client IP and a user-agent capped by the runtime are stored in the account database solely to process, audit and protect the support request; ticket contents are never public or available to the public MCP. Related context accepts only a validated company slug and a local or canonical-origin OpenMercantil URL, which is stored as text and never dereferenced. The JSON body is capped at 32 KiB.

post/api/v1/support/ticket

Request body

emailstring email required

namestring

Trimmed before persistence; ASCII control characters are rejected.

Stable support-routing category accepted by the current account schema.

subjectstring required

Trimmed before length validation; ASCII control characters are rejected.

bodystring required

Trimmed before length validation. TAB, CR and LF are permitted; other ASCII control characters are rejected.

related_company_slugstring

Optional validated context; it does not establish identity or ownership.

related_urlstring

Optional context restricted at runtime to a single-slash absolute same-origin path or an HTTPS URL on exactly openmercantil.es, without userinfo, port, backslash or control characters. Query and fragment are removed before persistence. The URL is stored as text and never dereferenced.

accept_privacytrue required

Strict purpose-bound acceptance, persisted as privacy_accepted/privacy_policy_v1; never interpreted as marketing consent.

Response

Ticket created; only its internal numeric id and non-secret public reference are returned

oktrue required

ticket_idinteger required

public_idstring required