List transactions
const url = 'https://api.elephants.inc/api/v1/organizations/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/transactions';const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://api.elephants.inc/api/v1/organizations/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/transactions \ --header 'Authorization: Bearer <token>'List an organization’s transactions — card spend, payments in and out, swaps, fees, purchases, and points — newest first, with keyset pagination (pass cursor = the last transaction’s id). Filter by type, category, currency, date range, card, or free-text search.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”The organization’s ID
Query Parameters
Section titled “Query Parameters”Only include transactions for this card
Only include the payments of this payment batch, whatever their approval state
Canonical transaction types to include
Customer-facing transaction categories to include. Fees categorize with their parent activity: “add_money” also returns fees charged on those deposits.
Currencies to include, matched against the organization’s own balances. A payout that debits USD and lands THB is USD here. A swap matches both the currency it sold and the one it bought.
Page size, clamped to 1..100 (default 50)
Transaction id of the last item from the previous page
Responses
Section titled “Responses”Transactions
object
object
object
ISO 4217 alpha-3 currency code
ISO 4217 alpha-3 currency code
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
The slice of points the monthly allowance covered — the receipt’s “included with your plan” figure, and the slice the fee’s within-allowance rate was priced on. Tracks points_cap_outcome: not_capped means the whole award is here. Where no monthly cap is configured the whole award reads as allowance. “0” when the award holds nothing covered; null only when there is no award at all.
The points the transaction would have earned before the monthly allowance cut it. Populated only on an award no booster applied to that met an exhausted or nearly exhausted allowance; null everywhere else — boosted earning is never reduced.
The slice of points past the monthly allowance — the receipt’s “with booster” figure, split against the allowance headroom at the award’s most recent amendment. The charged fee keeps the split struck at authorisation (an amendment scales the charge in proportion, it does not re-split it), so after an amendment that moves the award this pair can differ from the fee charged beside it. Tracks points_cap_outcome: non-zero exactly when a boosted award straddled or passed the ceiling — billed, never refused; an award no booster applied to stops at the ceiling instead and reads “0” here. points_allowance + points_overage = points whenever an award exists; a voided award reads 0 / 0. Null only when there is no award at all.
Whether the source transaction was undone. Every full reversal voids the whole award — fees and points follow the money in the same proportion — so a reversed award’s points figure reads “0” and its points_allowance / points_overage split reads 0 / 0. points_cap_outcome keeps the award’s cap history. Null when there is no award at all.
object
object
ISO 4217 alpha-3 currency code
object
USD credited to the organization, net of fees — falling back to the coin quantity for deposits recorded before conversion amounts were persisted, so the denomination is not guaranteed. Prefer effect for the USD balance change and coin_amount for the on-chain quantity; this field is retained for existing clients.
object
The coin quantity that arrived on chain, coupled with its asset. An organization never holds a balance in the coin — it is received into platform custody and converted — so this is the asset that moved, not a balance the organization holds.
object
Decimal string at the asset’s own scale
Coin symbol, e.g. “USDC”
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
Coin quantity sent, denominated in coin
object
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
The slice of points the monthly allowance covered — the receipt’s “included with your plan” figure, and the slice the fee’s within-allowance rate was priced on. Tracks points_cap_outcome: not_capped means the whole award is here. Where no monthly cap is configured the whole award reads as allowance. “0” when the award holds nothing covered; null only when there is no award at all.
The points the transaction would have earned before the monthly allowance cut it. Populated only on an award no booster applied to that met an exhausted or nearly exhausted allowance; null everywhere else — boosted earning is never reduced.
The slice of points past the monthly allowance — the receipt’s “with booster” figure, split against the allowance headroom at the award’s most recent amendment. The charged fee keeps the split struck at authorisation (an amendment scales the charge in proportion, it does not re-split it), so after an amendment that moves the award this pair can differ from the fee charged beside it. Tracks points_cap_outcome: non-zero exactly when a boosted award straddled or passed the ceiling — billed, never refused; an award no booster applied to stops at the ceiling instead and reads “0” here. points_allowance + points_overage = points whenever an award exists; a voided award reads 0 / 0. Null only when there is no award at all.
Whether the source transaction was undone. Every full reversal voids the whole award — fees and points follow the money in the same proportion — so a reversed award’s points figure reads “0” and its points_allowance / points_overage split reads 0 / 0. points_cap_outcome keeps the award’s cap history. Null when there is no award at all.
object
Coin quantity deducted from the organization’s balance, denominated in coin
Fee coin quantity, denominated in coin
Coin quantity landing at the destination, denominated in coin
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
object
object
object
ISO 4217 alpha-3 currency code
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
The slice of points the monthly allowance covered — the receipt’s “included with your plan” figure, and the slice the fee’s within-allowance rate was priced on. Tracks points_cap_outcome: not_capped means the whole award is here. Where no monthly cap is configured the whole award reads as allowance. “0” when the award holds nothing covered; null only when there is no award at all.
The points the transaction would have earned before the monthly allowance cut it. Populated only on an award no booster applied to that met an exhausted or nearly exhausted allowance; null everywhere else — boosted earning is never reduced.
The slice of points past the monthly allowance — the receipt’s “with booster” figure, split against the allowance headroom at the award’s most recent amendment. The charged fee keeps the split struck at authorisation (an amendment scales the charge in proportion, it does not re-split it), so after an amendment that moves the award this pair can differ from the fee charged beside it. Tracks points_cap_outcome: non-zero exactly when a boosted award straddled or passed the ceiling — billed, never refused; an award no booster applied to stops at the ceiling instead and reads “0” here. points_allowance + points_overage = points whenever an award exists; a voided award reads 0 / 0. Null only when there is no award at all.
Whether the source transaction was undone. Every full reversal voids the whole award — fees and points follow the money in the same proportion — so a reversed award’s points figure reads “0” and its points_allowance / points_overage split reads 0 / 0. points_cap_outcome keeps the award’s cap history. Null when there is no award at all.
object
ISO 4217 alpha-3 currency code
ISO 4217 alpha-3 currency code
ISO 4217 alpha-3 currency code
ISO 4217 alpha-3 currency code
The payout rail the quote was priced on (swift or local); null on quotes priced before the rail was recorded
object
object
ISO 4217 alpha-3 currency code
object
The credited amount once Elephants releases the deposit; the normalized gross before. Same denomination as currency.
ISO 4217 alpha-3 currency code
The receiving account the money landed in. Null for deposits with no attributed collection account.
object
object
ISO 4217 alpha-3 currency code
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
Gross, fee and net of the posted credit. Null until the receipt posts.
object
Gross, fee and net are all denominated in this currency, which always equals the deposit’s own currency — crediting refuses cross-currency collects.
Who sent the money, as the provider’s bank observed them. Null when the deposit carries no payer facts at all.
object
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
Provider collect state, e.g. “succeeded”
What the money did, in the customer’s vocabulary. Always carries at least the synthetic received entry.
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
The all-in exchange rate, inclusive of all charges: multiplying source_amount by rate reproduces target_amount to well beyond display precision. The amounts are authoritative; the rate is unrounded — round it for display.
object
ISO 4217 alpha-3 currency code
The amount the organization received
ISO 4217 alpha-3 currency code
object
What the fee took out of the balance — the sum of every component allocated to this charge. Same denomination as currency.
Who the charged transaction was with — the payer, for a deposit fee. Null when the source carries no counterparty.
ISO 4217 alpha-3 currency code
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The deposit this fee was charged on. Null for fees charged against another kind of transaction.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
object
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
object
The other organization in the transfer, by its verified name when it has one (verified: true), else by its organization name.
object
The payer’s description of the payment, shown to both sides.
object
ISO 4217 alpha-3 currency code, or ELEPOINTS for points-denominated effects
object
The points-cap band split behind a merged booster line: each band’s own rate and the slice of the amount it billed. Null on every other line.
object
The line’s own magnitude against the effect’s base — what it actually cost per unit, which caps and clips can put below the face rate in rate.
The payer’s own notes. Null on the payee’s row.
The payment batch this transaction is one row of; pass to getPaymentBatch. Null when the transaction is not a batch payment.
object
Example
{ "data": [ { "approval_request": { "status": "approved" }, "direction": "in", "effect": { "direction": "in", "fees": [ { "bands": [ { "band": "within_allowance" } ], "type": "platform" } ] }, "points_cap_outcome": "not_capped", "type": "card_transaction" } ]}Invalid request parameters or body
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}Missing, invalid, or expired bearer token
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}Too many requests
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
object
Example
{ "error": { "type": "rate_limited" }}Headers
Section titled “Headers”How long to wait before retrying, expressed as delay seconds or an HTTP date
Unexpected server error
Error response. error.type is the machine-readable code — branch on it, never on error.message or the HTTP status. error.message is display-grade prose safe to render to a user; when a failure has no specific copy it falls back to a generic sentence, so it never carries a machine code. Unrecognised failures collapse to the generic unprocessable_entity code, so treat type as an open enum: match the codes you handle and fall through to a default branch for the rest.
object
object
Structured error details (e.g. validation errors), when present
Display-grade message, safe to render verbatim. Never a machine code — do not branch on it.
Correlation ID for this request (also in the x-request-id response header). Include it when contacting support.
object
Method used to deliver this challenge
Challenge expiry
Sudo session ID returned to completeStepUp
3-digit number-matching code. This response is the ORIGINATING surface: display the code; a user approving from the Ele mobile app is asked to enter it. Null only for challenges minted before match codes existed.
Available verification methods
The step-up authentication this challenge was minted from — a DIFFERENT id from id (the sudo session). completeStepUp takes id as sudo_session_id; requestStepUpFallback takes this one.
object
object
Machine-readable error code from a stable vocabulary (open enum — handle unknown values)
Example generated
{ "error": { "details": "example", "message": "example", "request_id": "example", "step_up": { "delivery": "example", "expires_at": "2026-04-15T12:00:00Z", "id": "example", "match_code": "example", "methods": [ "example" ], "step_up_authentication_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "webauthn": { "allow_credentials": [ { "id": "example", "transports": [ "example" ], "type": "example" } ], "challenge": "example", "challenge_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "rp_id": "example", "timeout": 1, "user_verification": "example" } }, "type": "example" }}