Toggle the merchant kill-switch (admin-only, no body)

Toggles the kill-switch state — a bodyless toggle (every call flips disabled ↔ enabled); there are NO request fields such as `active` or `reason`. Admin-only: requires a platform-operator JWT session (role `admin`/`platform_admin`); HMAC pairs and merchant cabinet sessions get 403. Admin alias: `POST /api/v1/p2p/admin/merchants/{merchant_id}/kill-switch`.

POST/api/v1/p2p/merchants/{merchant_id}/kill-switch

Toggles the kill-switch state — a bodyless toggle (every call flips disabled ↔ enabled); there are NO request fields such as active or reason. Admin-only: requires a platform-operator JWT session (role admin/platform_admin); HMAC pairs and merchant cabinet sessions get 403. Admin alias: POST /api/v1/p2p/admin/merchants/{merchant_id}/kill-switch.

Authorization

MerchantToken MerchantSignature

X-Merchant-Token<token>

64-character hex public merchant token assigned during onboarding.

In: header

X-Signature<token>

Stripe-style HMAC-SHA256 signature. Format: t=<unix_seconds>,v1=<hex_hmac_sha256> where hex_hmac = HMAC-SHA256(webhook_secret, "<unix_seconds>.<raw_body>"). Replay window: 5 minutes (60s future drift tolerated).

In: header

Path Parameters

merchant_id*string

Target merchant UUID.

Formatuuid

Response Body

`application/json`

`application/problem+json`

curl -X POST "https://example.com/api/v1/p2p/merchants/497f6eca-6276-4993-bfeb-53cbbbba6f08/kill-switch"

{  "merchant_id": "500924a8-3f5e-4c00-beb8-2efcde988aea",  "disabled": true,  "disabled_at": "2019-08-24T14:15:22Z"}

{  "type": "../dictionary",  "title": "string",  "status": 0,  "detail": "string",  "instance": "../dictionary",  "errors": [    {      "field": "amount",      "message": "must be greater than 0",      "code": "POSITIVE_REQUIRED"    }  ]}

Empty