Headers

• PRE-ACCESS-KEY string Required

  Broker access key identifier.

  Format should match the following pattern: ^[A-Za-z0-9._~-]{1,64}$.

• PRE-ACCESS-SIGNATURE string Required

  Keyed BLAKE2b-256 signature (hex lowercase, 64 characters).

  Format should match the following pattern: ^[0-9a-f]{64}$.

• PRE-ACCESS-TIMESTAMP string(date-time) Required

  RFC3339 timestamp with milliseconds (e.g., 2025-10-30T06:00:34.075Z). Must be within clock_skew_tolerance (default 5m) of server time.

• Idempotency-Key string Required

  Stable idempotency token reused on retries. Reuse with identical payload => 202. Reuse with different payload => 409 idempotency_key_mismatch.

  Maximum length is 64. Format should match the following pattern: ^[A-Za-z0-9._~-]{1,64}$.

• Correlation-Id string

  Optional UUIDv7 correlation identifier (lowercase). Must match RFC4122 UUIDv7 (version nibble '7', variant 8|9|a|b). If present but invalid → 422 invalid_correlation_id (error_code).

  Format should match the following pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$.

Path parameters

• account_id string Required

  Broker-supplied account identifier; length 1..128; charset [A-Za-z0-9._~-].

  Maximum length is 128. Format should match the following pattern: ^[A-Za-z0-9._~-]{1,128}$.

Responses

• 201 application/json

  Cancellation command accepted

  Any of:

  object-1 object object-2 object

  Confirmation of command acceptance. Contains at least one order identifier.

  Hide attributes Show attributes

  • order_id string(uuid) Required

    Internal Order ID (if known or generated).

  • client_order_id string

    Client-supplied identifier (if provided).

  Confirmation of command acceptance. Contains at least one order identifier.

  Hide attributes Show attributes

  • order_id string(uuid)

    Internal Order ID (if known or generated).

  • client_order_id string Required

    Client-supplied identifier (if provided).

• 202 application/json

  Idempotent replay (already accepted)

  Any of:

  object-1 object object-2 object

  Confirmation of command acceptance. Contains at least one order identifier.

  Hide attributes Show attributes

  • order_id string(uuid) Required

    Internal Order ID (if known or generated).

  • client_order_id string

    Client-supplied identifier (if provided).

  Confirmation of command acceptance. Contains at least one order identifier.

  Hide attributes Show attributes

  • order_id string(uuid)

    Internal Order ID (if known or generated).

  • client_order_id string Required

    Client-supplied identifier (if provided).

• 404 application/json

  Resource not found

  Hide response attributes Show response attributes object

  • error_code string Required
  • message string Required
  • details object

    Additional properties are allowed.

• 409 application/json

  Idempotency-Key reused with different payload

  Hide response attributes Show response attributes object

  • error_code string Required
  • message string Required
  • details object

    Additional properties are allowed.

• 422 application/json

  Validation / semantic error

  Hide response attributes Show response attributes object

  • error_code string Required
  • message string Required
  • details object

    Additional properties are allowed.

• 503 application/json

  Backpressure / temporary unavailability

  Hide response attributes Show response attributes object

  • error_code string Required
  • message string Required
  • details object

    Additional properties are allowed.