DocsAPI ReferenceLogin
Apps

Set one operation's per-app fee (stacks on the global fee)

PUT
/apps/{id}/fees/{operation}

Authorization

cookieAuth
pid_access<token>

JWT access token set by /auth/google/callback or /auth/refresh

In: cookie

Path Parameters

id*string
Formatuuid
operation*string

Value in

  • "topup"
  • "transaction"
  • "withdraw"

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

curl -X PUT "https://example.com/apps/497f6eca-6276-4993-bfeb-53cbbbba6f08/fees/topup" \  -H "Content-Type: application/json" \  -d '{    "percentBps": 0,    "minIdr": "string",    "maxIdr": "string",    "enabled": true  }'
{}

Set the app's ledger-callback endpoint POST

PeridotID POSTs signed ledger events here (e.g. `fiat.transfer.posted` when funds land on this app's escrow account). Returns a `pidwh_…` HMAC signing secret **once**; every callback carries `X-Pid-Signature: sha256=<hex>` over the raw body and `X-Pid-Event`. https required (http allowed for localhost). Owners only.

Selectors a nonfinancial permission may never invoke GET

Mirror of the on-chain `_deniedSelector` list (second layer only — exact target+selector scope is the first).