Clear the merchant kill-switch
Nullifies `disabled_at`, re-enabling authentication.
/api/v1/p2p/merchant/{merchant_id}/enableNullifies disabled_at, re-enabling authentication.
Authorization
MerchantToken MerchantSignature 64-character hex public merchant token assigned during onboarding.
In: header
Stripe-style HMAC-SHA256 signature.
Format: t=<unix_seconds>,v1=<hex_hmac_sha256>
where hex_hmac = HMAC-SHA256(webhook_secret, "<unix_seconds>.<raw_body>").
Replay window: 5 minutes (60s future drift tolerated).
In: header
Path Parameters
Target merchant UUID.
uuidRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/problem+json
curl -X POST "https://example.com/api/v1/p2p/merchant/497f6eca-6276-4993-bfeb-53cbbbba6f08/enable" \ -H "Content-Type: application/json" \ -d '{}'{}{ "type": "../dictionary", "title": "string", "status": 0, "detail": "string", "instance": "../dictionary", "errors": [ { "field": "amount", "message": "must be greater than 0", "code": "POSITIVE_REQUIRED" } ]}Activate the merchant kill-switch POST
Sets `disabled_at` on the merchant row. All subsequent auth attempts for this merchant return `PERMISSION_DENIED`.
Toggle the merchant kill-switch (admin-only, no body) POST
Toggles the kill-switch state — a bodyless toggle (every call flips disabled ↔ enabled); there are NO request fields such as `active` or `reason`. Admin-only: requires a platform-operator JWT session (role `admin`/`platform_admin`); HMAC pairs and merchant cabinet sessions get 403. Admin alias: `POST /api/v1/p2p/admin/merchants/{merchant_id}/kill-switch`.