Card checks

POST

/v1/functions/hospitality.function.card_checks/invoke

curl --request POST \
  --url https://api.aerandil.com/v1/functions/hospitality.function.card_checks/invoke \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "params": { "property_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" } }'

• Production API

The desk’s review queue for the card rail’s holds, and the Watchtower refusals it may still act on. to_review: every hold still standing (payment pending) that the rail held for the house’s decision (review_state = held, placed with manual_capture_after_review because its assessment recommended review: Radar’s manual review, or a band the network lifted), oldest first, and every hold the desk declined whose release has not gone through (blocked_still_held). Each carries the payment, amount, booking, guest, card, the hold’s deadline (decide_by), the network’s floor when its answer matched, reportable (blocking it may also give the outcome to the network: the house takes part, and the assessment rests on its own evidence rather than a network answer that matched) and reported; the band and Radar’s risk level only for a caller cleared for internal.restricted. The decision is resolve_payment_review, apart from any capture, as a Radar Review closes apart from the PaymentIntent. refused: the network’s refusals of the last 31 days, newest first, each with its answer, floor basis, booking, guest and whether the desk contested it. participates says whether the house takes part in Watchtower. may_decide says whether this caller may keep or block a hold: only one cleared to read internal.restricted, the assessment it decides on (a front desk sees the queue read-only, waiting on a manager). Read-only.

Authorizations

• aerandil_oauth
  functions:invoke
• aerandil_oauth
  functions:hospitality.function.card_checks:invoke

Request Body^required

Media typeapplication/json

object

params

required

object

property_id

required

Property

string format: uuid

Example^generated

{
  "params": {
    "property_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
  }
}

Responses

200

Function invoked. The body carries the typed return_value shaped by the function’s declared return_type.

Media typeapplication/json

InvokeFunctionResponse

Envelope returned by the Aerandil function engine. correlation_id is the per-invocation id for trace stitching; return_value is the typed value the function computed (shape declared by the function’s return_type).

object

correlation_id

required

Per-invocation correlation id; appears on log/trace records this function emitted.

string format: uuid

return_value

required

object

as_of

required

string format: date-time

may_decide

required

boolean

participates

required

boolean

refused

required

Array<object>

object

assessment_id

required

string format: uuid

confirmation_number

string

contested

required

boolean

contested_at

string format: date-time

floor_basis

string

Allowed values: none contact card_unconfirmed card_corroborated card_own_house desk_override

guest_name

string

issued_at

required

string format: date-time

reservation_id

string format: uuid

signal_id

string format: uuid

to_review

required

Array<object>

object

amount

object

amount

required

string format: decimal

currency

required

string format: iso-4217

assessment_id

required

string format: uuid

band

string

Allowed values: low medium high block not_assessed

card_brand

string

card_last4

string

confirmation_number

string

decide_by

string format: date-time

guest_name

string

issued_at

required

string format: date-time

network_floor_basis

string

Allowed values: none contact card_unconfirmed card_corroborated card_own_house desk_override

payment_id

required

string format: uuid

radar_risk_level

string

reportable

required

boolean

reported

required

boolean

reservation_id

string format: uuid

state

required

string

Allowed values: review blocked_still_held

Example

{
  "return_value": {
    "refused": [
      {
        "floor_basis": "none"
      }
    ],
    "to_review": [
      {
        "band": "low",
        "network_floor_basis": "none",
        "state": "review"
      }
    ]
  }
}

Headers

Cache-Control

string

Always no-store — function results are time-sensitive and never cacheable.

404

Function or target object not found.

422

Parameter validation or domain-rule violation.