Search Fraud network contribution

POST

/v1/object-types/hospitality.fraud_network_contribution/search

const url = 'https://api.aerandil.com/v1/object-types/hospitality.fraud_network_contribution/search';
const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: '{"branch":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","cursor":"example","filters":[{"property":"id","type":"eq","value":"example"}],"limit":1,"order":"asc","property_id":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","scope":{"level":"tenant"},"sort_by":"created_at"}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.aerandil.com/v1/object-types/hospitality.fraud_network_contribution/search \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "branch": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "cursor": "example", "filters": [ { "property": "id", "type": "eq", "value": "example" } ], "limit": 1, "order": "asc", "property_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "scope": { "level": "tenant" }, "sort_by": "created_at" }'

Search for instances. Filters eq, contains, gte and lte AND-compose; or / not are additive follow-ups. Pages with an opaque cursor; the +1 fetch returns has_more without a second round-trip. Ordered by sort_by (default created_at) in order (default ascending), id breaking ties; rows with no value for a property key sort last.

A confirmed fraud outcome this house offered to Watchtower, the card rail’s federated fraud network (proposal 0029): a dispute lost for fraud (chargeback_lost_fraud, the issuer’s word) or an assessment applied as a block on the house’s own evidence (confirmed_fraud, the house’s word — at another house it sends a hold to review, never blocks it, and it may not rest on the network’s own answer), carried as salted one-way fingerprints of the card, the guest’s email and phone. Only the digests reach the network, never the identifiers, never the booking; the network never tells another house which house contributed. Recorded by the card rail only, under the house’s fraud_network consent; withdraw_fraud_signal takes it back out (forward-only — answers already given stand), by the house or, on its review of a contested answer, by the platform on the house’s behalf (withdrawn_by). One per source (source_reference, the processor’s dispute id or the assessment id).

Authorizations

aerandil_oauth
objects:read
aerandil_oauth
objects:hospitality.fraud_network_contribution:read

Request Body^required

application/json

object

branch

Optional open-branch id. Search composes that branch’s copy-on-first-write overlay instead of main, so a preview reads its own hypothetical writes. Omit to read main.

string format: uuid

cursor

Opaque cursor from a prior response’s next_cursor. Pass back verbatim; do not introspect.

string

filters

Conjunctive list of predicates. Empty or omitted matches every row in scope, capped by limit.

Array

One of:

object

property

required

Allowed value: id

type

required

Allowed value: eq

value

required

string

limit

Page size. Server defaults to 50, silently clamps at 500 (AIP-158 §3).

integer

>= 1 <= 500

order

Direction of sort_by: asc (oldest / smallest first) or desc. A cursor is bound to the sort_by and order it was minted under; another pair is refused (422).

string

default: asc

Allowed values: asc desc

property_id

The house a desk stands in: keeps this property’s rows (property- or venue-scoped there) and every row scoped to no property (tenant, brand, portfolio), and drops a sibling house’s — the meaning property_id has on the event tail.

string format: uuid

scope

One of: discriminator: level

object

level

required

string

Allowed value: tenant

Allowed values: tenant

sort_by

What the page is ordered by: the row’s created_at or updated_at, or a property whose type orders — strings, enums and dates as text, ints, decimals and durations as numbers, datetimes as instants. Rows with no value sort last in either direction. A property the caller is not cleared to read is refused (403).

string

default: created_at

Allowed values: created_at updated_at id outcome status source_reference salt_epoch contributed_at withdrawn_at withdrawal_reason withdrawn_by

Responses

200

Search results, ordered by (sort_by, id) in the requested order (ascending by default).

application/json

object

data

required

Array<object>

object

created_at

required

string format: date-time

required

string format: uuid

object_type

required

Allowed value: hospitality.fraud_network_contribution

properties

required

object

contributed_at

required

When the outcome was offered

string format: date-time

fingerprints

The digests offered, as `[{kind, digest}]` — `kind` one of card / email / phone, `digest` 64 lower-case hex (HMAC-SHA256 under the network salt). Never an identifier

required

Contribution id

string

outcome

required

The confirmed outcome contributed

string

Allowed values: chargeback_lost_fraud confirmed_fraud

salt_epoch

required

The network salt generation the digests were taken under

integer

source_reference

What the outcome was read from — the processor's dispute id or the assessment id; one contribution per source

string

status

required

Whether the contribution stands in the network

string

Allowed values: active withdrawn

withdrawal_reason

Why it was taken back, in words

string

withdrawn_at

When it was taken back out of the network

string format: date-time

withdrawn_by

Who took it back — the house, or the platform on its review of a contest, on the house's behalf. Absent on a withdrawal recorded before 2026-11-03, which was the house's

string

Allowed values: house platform

provenance

Per-property source attribution and pins. An entry under properties means the property’s current value came from that source (on the source’s own clock, source_updated_at); an entry under pins is a human override protecting the property from sourced writes.

object

pins

object

key

additional properties

object

pinned_at

string format: date-time

pinned_by

object

reason

required

string

properties

object

key

additional properties

object

external_id

string

recorded_at

required

string format: date-time

source

required

string

source_updated_at

string format: date-time

stream

string

scope

required

One of: discriminator: level

object

level

required

string

Allowed value: tenant

Allowed values: tenant

tenant_id

required

string format: uuid

updated_at

required

string format: date-time

version

required

integer

>= 1

has_more

required

boolean

next_cursor

Cursor for the next page; omitted when the result set is exhausted.

string

Example

{
  "data": [
    {
      "object_type": "hospitality.fraud_network_contribution",
      "properties": {
        "outcome": "chargeback_lost_fraud",
        "status": "active",
        "withdrawn_by": "house"
      },
      "scope": {
        "level": "tenant"
      }
    }
  ]
}

422

Validation error — unknown property or filter type mismatch.

Search Fraud network contribution

Authorizations

Request Bodyrequired

Responses

200

Example

422

Request Body^required