Commit top-up
Credits the portal wallet and debits partner float. Re-validates the same checks as validate. Requires Idempotency-Key. Same body as validate.
201: topupId, status: completed, createdAt.
Timeouts: retry the same Idempotency-Key and body. Same key + different body → 409 idempotency-conflict.
Authentication (AND, not OR)
Required together: Partner-Id + Bearer client_secret + Timestamp + Signature (AND, not OR). See the Authentication folder.
401 unauthorized · 422 hmac-invalid · 422 hmac-skew · 403 country-mismatch.
Headers
X-Lucky-Tom-Partner-Id
Public partner id. Required (AND). Not a secret.
X-Lucky-Tom-Timestamp
Unix time in milliseconds. Required (AND). Collection Pre-request Script overwrites this on Send.
X-Lucky-Tom-Signature
HMAC-SHA256 hex. Required (AND). Overwritten on Send.
Idempotency-Key
Required on this mutation. Not hashed into the HMAC canonical string. Retry timeouts with the same key and body.
Request
This endpoint expects an object.
amount
userRef
currency
Errors
401
Unauthorized Error
422
Unprocessable Entity Error