Sign in

v1

latestOpenAPI 3.0.02026-07-2417129274.8 KB
Automation Endpoints

Merchant Decision

Notify Riskified of the final external status of an order. Use this call to update Riskified when the merchant’s or payment gateway’s final decision differs from Riskified’s recommendation — for example, if the order was declined, canceled, or successfully captured after review. This ensures Riskified maintains full visibility into the complete order lifecycle and can continuously improve decision accuracy.

post/api/decision

Headers

x-riskified-shop-domainstring required
Example:merchant.example.com

The merchant shop domain registered with Riskified.

x-riskified-hmac-sha256string required
Example:b1946ac92492d2347c6235b4d2611184

Verification hash for the Request. Generated by performing an SHA256 encryption on the request's POST body and calculating the HMAC hash of the result using your Riskified authentication token. Please use UTF8 encoding.

content_type'application/json' required

As payloads are sent to Riskified in JSON format, value should be: application/json

accept'application/vnd.riskified.com; version=2' required

Specify the version of the API to target. For example, to target the latest version of the API, use the following: application/vnd.riskified.com; version=2

Request body

Example request

{
  "order": {
    "decision": {
      "external_status": "approved",
      "decided_at": "2025-11-19T16:15:00Z",
      "reason": "Approved by automated risk system",
      "amount": 400,
      "currency": "USD",
      "notes": "No suspicious activity detected; customer history clear."
    }
  }
}

Response

Successful operation

Example response

{
  "order": {
    "id": "53953819"
  }
}