Skip to main content

Link Authorisations

Use POST /customers/{customerId}/link-authorizations to create a short-lived invitation token.

The token is returned once and is bound to the authenticated merchant's customer record.

Important boundaries:

  • Merchant API keys cannot approve linking.
  • Possession of the token is not consumer authentication.
  • Consumers must authenticate separately with Sparelane.
  • Approval does not transfer payment methods or create mandates.

Pending link authorisations can be cancelled with POST /customers/{customerId}/link-authorizations/{authorizationId}/cancel.