Postbacks

Validate postback

POST/application-validation/validateipn

Checks an application token and optionally its saved order details. No access token is needed. This endpoint does not authenticate the postback sender or verify the incoming status. Before fulfillment, reconcile with the authenticated Get application status endpoint.

Set verifyParams to true and send the order details you have on file to also confirm the application matches your order. This is the recommended mode.

The response is plain text:

ResponseMeaning
VERIFIED_PTThe application exists, is in an accepted status (including review, cancellation, decline, and refund), and matches details when verifyParams is true.
INCOMPLETE_PTThe application exists but is not in an accepted status, or the details do not match.
NOT_FOUND_PTuuid is empty or cmd is not _validate-me.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

text/plain

curl -X POST "https://example.com/application-validation/validateipn" \  -H "Content-Type: application/json" \  -d '{    "cmd": "_validate-me",    "uuid": "3f9c2a7e5b8d4e1fa0c6b2d9e7f41a53",    "verifyParams": true,    "loanAmount": 1149.97,    "firstName": "Jordan",    "lastName": "Rivera",    "street": "123 Main St",    "city": "Charlotte",    "state": "NC",    "zip": "28202"  }'
"VERIFIED_PT"