Commit withdrawal
Mark the portal withdrawal paid after handing cash. Requires Idempotency-Key. Body: code, pin, optional amount (must match quote).
200: status: paid, paidAt. Credits partner float per ledger rules.
Authentication (AND, not OR)
Partner-Id + Bearer client_secret + Timestamp + Signature. See Authentication.
401 unauthorized · 422 hmac-invalid · 422 hmac-skew · 403 country-mismatch.
Headers
X-Lucky-Tom-Partner-Id
Public partner id. Required (AND). Not a secret.
X-Lucky-Tom-Timestamp
Unix ms. Pre-request Script overwrites on Send.
X-Lucky-Tom-Signature
HMAC-SHA256 hex. Pre-request Script overwrites on Send.
Idempotency-Key
Required on this mutation. Not in the HMAC canonical string.
Request
This endpoint expects an object.
pin
code
Errors
401
Unauthorized Error
422
Unprocessable Entity Error