Sell into a collection offer

POST

/v1/policy-accepts

curl --request POST \
  --url https://api.digirare.com/v1/policy-accepts \
  --header 'Content-Type: application/json' \
  --header 'x-session-token: <x-session-token>' \
  --data '{ "accept_id": "example", "psbt_hex": "example" }'

The seller-signed child: verified byte-for-byte against the quote, then atomically claims the funding set and the asset outpoint (first valid signature wins across checkout, exact offers, and accepts), is co-signed by the market signer, journaled with its parent, and submitted as a package. 202 when the journaled package is still being relayed by recovery. Every policy-offer route answers 503 service_unavailable when collection-offer signing is unavailable.

Authorizations

• session

Request Body^required

Media typeapplication/json

object

accept_id

required

string

psbt_hex

required

The quoted child with the seller’s input-1 signature (DEFAULT/ALL).

string

/^[0-9a-f]+$/

Example^generated

{
  "accept_id": "example",
  "psbt_hex": "example"
}

Responses

200

Policy acceptance lifecycle

Media typeapplication/json

object

result

required

object

protocol_version

required

Allowed value: funded_policy_offer_v1

accept_id

required

string

status

required

string

Allowed values: quoted signed journaled broadcast confirmed conflicted failed

parent_txid

required

string

/^[0-9a-f]{64}$/

child_txid

required

string

/^[0-9a-f]{64}$/

asset

required

Canonical compact Counterparty key. A subasset uses its A ID; asset_longname is display metadata.

string

seller

required

Mainnet P2TR or P2WPKH address. The SIGNING capability: every signature is verified by reconstructing a BIP-143/BIP-341 witness sighash.

string

asset_outpoint

object

txid

required

string

/^[0-9a-f]{64}$/

vout

required

integer

price_sats

required

integer

>= 1 <= 9007199254740991

platform_fee_sats

required

integer

>= 1 <= 9007199254740991

network_fee_sats

required

integer

>= 1 <= 9007199254740991

seller_proceeds_sats

required

integer

>= 1 <= 9007199254740991

refusal_code

string | null

last_error

string | null

settlement

object | null

created_at

integer

updated_at

integer

already_completed

boolean

id

string

Example

{
  "result": {
    "protocol_version": "funded_policy_offer_v1",
    "status": "quoted"
  }
}

202

Policy acceptance lifecycle

Media typeapplication/json

object

result

required

object

protocol_version

required

Allowed value: funded_policy_offer_v1

accept_id

required

string

status

required

string

Allowed values: quoted signed journaled broadcast confirmed conflicted failed

parent_txid

required

string

/^[0-9a-f]{64}$/

child_txid

required

string

/^[0-9a-f]{64}$/

asset

required

Canonical compact Counterparty key. A subasset uses its A ID; asset_longname is display metadata.

string

seller

required

Mainnet P2TR or P2WPKH address. The SIGNING capability: every signature is verified by reconstructing a BIP-143/BIP-341 witness sighash.

string

asset_outpoint

object

txid

required

string

/^[0-9a-f]{64}$/

vout

required

integer

price_sats

required

integer

>= 1 <= 9007199254740991

platform_fee_sats

required

integer

>= 1 <= 9007199254740991

network_fee_sats

required

integer

>= 1 <= 9007199254740991

seller_proceeds_sats

required

integer

>= 1 <= 9007199254740991

refusal_code

string | null

last_error

string | null

settlement

object | null

created_at

integer

updated_at

integer

already_completed

boolean

id

string

Example

{
  "result": {
    "protocol_version": "funded_policy_offer_v1",
    "status": "quoted"
  }
}

4XX

Stable machine-readable failure

Media typeapplication/json

object

error

required

string

code

required

string

Allowed values: invalid_request unsupported_address_type unauthenticated forbidden not_found method_not_allowed state_changed expired invalid_transaction rate_limited internal_error upstream_unavailable service_unavailable checkout_changed target_unavailable signature_invalid template_mismatch mempool_rejected broadcast_unknown conflict_spend duplicate_funding_slot offer_selection_unavailable attached_delivery_single_item_only insufficient_funds insufficient_asset_balance price_below_minimum listing_price_above_maximum counter_price_invalid self_trade offer_capacity_full open_offer_limit policy_offer_refused

retryable

boolean

mempool_policy

On 422 mempool_rejected from a broadcast: which deterministic node policy refused the bytes. Retrying the same bytes fails the same way. fee_floor: re-quote at a higher fee_rate. chain_too_long: too many unconfirmed ancestors; wait for a confirmation, then retry. truc: a version-3 (TRUC) package rule, such as spending an unconfirmed version-3 output; wait for a confirmation, then retry.

string

Allowed values: fee_floor chain_too_long truc dust nonstandard

mempool_reason

The node’s own reject reason, on mempool_rejected (422) and on state_changed (409) when a broadcast lost to a conflicting or replacing spend.

string

wait_for_confirmation

Present and true when mempool_policy is chain_too_long or truc.

boolean

claims_released

On a checkout or accept completion refused as mempool_rejected: the journaled settlement ended and every listing, bid, and asset claim it held was released (its inputs were proven unspent). The quote or accept is replaced; request a new one.

boolean

refused_listings

Batch listing routes only: every refused item. The first sets the status and code.

Array<object>

One refused item in a batch refusal’s refused_listings array. Nothing in the batch was changed.

object

index

required

integer

listing_id

required

string

status

required

integer

code

required

string

error

required

string

key

additional properties

any

retry_after_seconds

On 429 rate_limited: the exact seconds until the oldest counted request leaves the window; a retry then is admitted (also sent as Retry-After). Limited writes are bucketed per route scope in exact sliding 60-second windows: by session address when a valid x-session-token is present, otherwise by IP, with a per-IP ceiling across sessions. Expensive writes: 20, ceiling 120. Signed completions: 120, ceiling 600. Session minting (/auth/*): 60 per IP. A request refused by any bucket is counted by none.

integer

>= 1

key

additional properties

any

Example

{
  "code": "invalid_request",
  "mempool_policy": "fee_floor"
}

5XX

Stable machine-readable failure

Media typeapplication/json

object

error

required

string

code

required

string

Allowed values: invalid_request unsupported_address_type unauthenticated forbidden not_found method_not_allowed state_changed expired invalid_transaction rate_limited internal_error upstream_unavailable service_unavailable checkout_changed target_unavailable signature_invalid template_mismatch mempool_rejected broadcast_unknown conflict_spend duplicate_funding_slot offer_selection_unavailable attached_delivery_single_item_only insufficient_funds insufficient_asset_balance price_below_minimum listing_price_above_maximum counter_price_invalid self_trade offer_capacity_full open_offer_limit policy_offer_refused

retryable

boolean

mempool_policy

On 422 mempool_rejected from a broadcast: which deterministic node policy refused the bytes. Retrying the same bytes fails the same way. fee_floor: re-quote at a higher fee_rate. chain_too_long: too many unconfirmed ancestors; wait for a confirmation, then retry. truc: a version-3 (TRUC) package rule, such as spending an unconfirmed version-3 output; wait for a confirmation, then retry.

string

Allowed values: fee_floor chain_too_long truc dust nonstandard

mempool_reason

The node’s own reject reason, on mempool_rejected (422) and on state_changed (409) when a broadcast lost to a conflicting or replacing spend.

string

wait_for_confirmation

Present and true when mempool_policy is chain_too_long or truc.

boolean

claims_released

On a checkout or accept completion refused as mempool_rejected: the journaled settlement ended and every listing, bid, and asset claim it held was released (its inputs were proven unspent). The quote or accept is replaced; request a new one.

boolean

refused_listings

Batch listing routes only: every refused item. The first sets the status and code.

Array<object>

One refused item in a batch refusal’s refused_listings array. Nothing in the batch was changed.

object

index

required

integer

listing_id

required

string

status

required

integer

code

required

string

error

required

string

key

additional properties

any

retry_after_seconds

On 429 rate_limited: the exact seconds until the oldest counted request leaves the window; a retry then is admitted (also sent as Retry-After). Limited writes are bucketed per route scope in exact sliding 60-second windows: by session address when a valid x-session-token is present, otherwise by IP, with a per-IP ceiling across sessions. Expensive writes: 20, ceiling 120. Signed completions: 120, ceiling 600. Session minting (/auth/*): 60 per IP. A request refused by any bucket is counted by none.

integer

>= 1

key

additional properties

any

Example

{
  "code": "invalid_request",
  "mempool_policy": "fee_floor"
}