Stripe: Approve an authorization

Stripe issuing.postIssuingAuthorizationsAuthorizationApprove: arguments, response, policy and SDK examples.

Operation stripe.postissuingauthorizationsauthorizationapprove

Provider route: POST /v1/issuing/authorizations/{authorization}/approve. Alter supplies the connection’s credentials and routing.

Call through Alter

Install @alter-ai/sdk @alter-ai/stripe with npm, or alter-sdk-stripe with pip. Supply your connected customer’s grant ID and the arguments described below.

import { App } from "@alter-ai/sdk";
import { StripeIntegration } from "@alter-ai/stripe";

async function execute(input: Parameters<StripeIntegration["issuing"]["postIssuingAuthorizationsAuthorizationApprove"]>[0]) {
  const app = new App({ apiKey: process.env.ALTER_API_KEY! });
  try {
    const provider = new StripeIntegration(app, { grantId: process.env.PROVIDER_GRANT_ID! });
    const call = await provider.issuing.postIssuingAuthorizationsAuthorizationApprove(input);
    const result = await call.wait();
    return result.bodyJson();
  } finally {
    await app.close();
  }
}

import os
from alter_sdk import App
from alter_sdk_stripe import StripeIntegration

async def execute(arguments):
    async with App(api_key=os.environ["ALTER_API_KEY"]) as app:
        provider = StripeIntegration(app, {"grant_id": os.environ["PROVIDER_GRANT_ID"]})
        call = await provider.issuing.post_issuing_authorizations_authorization_approve(arguments)
        result = await call.wait()
        return result.body_json()

Input

Field	Type	Presence	Description and constraints
`$`	object	Root	Additional keys: not allowed
`path`	object	Required within parent	Additional keys: not allowed
`path.authorization`	string	Required within parent	Maximum length: 5000
`headers`	object	Optional	Additional keys: not allowed
`headers.Idempotency-Key`	string	Optional	Minimum length: 1 Maximum length: 255
`body`	object	Optional	Additional keys: not allowed
`body.amount`	integer	Optional	If the authorization’s `pending_request.is_amount_controllable` property is `true`, you may provide this value to control how much to hold for the authorization. Must be positive (use [`decline`](https://docs.stripe.com/api/issuing/authorizations/decline) to decline an authorization request).
`body.expand`	array	Optional	Specifies which fields in the response should be expanded.
`body.expand[]`	string	Each item	Maximum length: 5000
`body.metadata`	JSON	Optional	Set of [key-value pairs](https://docs.stripe.com/api/metadata) that you can attach to an object. This can be useful for storing additional information about the object in a structured format. Individual keys can be unset by posting an empty value to them. All keys can be unset by posting an empty value to `metadata`.
`body.metadata (anyOf 1)`	object	Alternative	Additional keys: see wildcard field
`body.metadata (anyOf 1).*`	string	Additional keys
`body.metadata (anyOf 2)`	string	Alternative	One of:

Response

Response media type: application/json. The table describes the pinned successful response. Referenced models link to their complete fields.

Field	Type	Presence	Description and constraints
`$`	Model	Root	Expand Update an authorization — response body

Referenced models: Update an authorization — response body

Schemas

706 more schemas are linked from the tables above, on the schema pages.

Fail a testmode card — response body

Field	Type	Presence	Description and constraints
`$`	object	Root	You can [create physical or virtual cards](https://docs.stripe.com/issuing) that are issued to cardholders.
`brand`	string	Required within parent	The brand of the card. Maximum length: 5000
`cancellation_reason`	JSON	Optional
`cancellation_reason (anyOf 1)`	string	Alternative	The reason why the card was canceled. Known values: design_rejected, fulfillment_error, lost, stolen
`cancellation_reason (anyOf 2)`	null	Alternative
`cardholder`	Model	Required within parent	Expand Create a cardholder — response body
`created`	JSON	Required within parent
`created (anyOf 1)`	integer	Alternative	Time at which the object was created. Measured in seconds since the Unix epoch. Format: unix-time
`created (anyOf 2)`	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
`currency`	string	Required within parent	Three-letter [ISO currency code](https://www.iso.org/iso-4217-currency-codes.html), in lowercase. Supported currencies are `usd` in the US, `eur` in the EU, and `gbp` in the UK. Format: currency
`cvc`	string	Optional	The card's CVC. For security reasons, this is only available for virtual cards, and will be omitted unless you explicitly request it with [the `expand` parameter](https://docs.stripe.com/api/expanding_objects). Additionally, it's only available via the ["Retrieve a card" endpoint](https://docs.stripe.com/api/issuing/cards/retrieve), not via "List all cards" or any other endpoint. Maximum length: 5000
`exp_month`	JSON	Required within parent
`exp_month (anyOf 1)`	integer	Alternative	The expiration month of the card.
`exp_month (anyOf 2)`	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
`exp_year`	JSON	Required within parent
`exp_year (anyOf 1)`	integer	Alternative	The expiration year of the card.
`exp_year (anyOf 2)`	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
`financial_account`	JSON	Optional
`financial_account (anyOf 1)`	string	Alternative	The financial account this card is attached to. Maximum length: 5000
`financial_account (anyOf 2)`	null	Alternative
`id`	string	Required within parent	Unique identifier for the object. Maximum length: 5000
`last4`	string	Required within parent	The last 4 digits of the card number. Maximum length: 5000
`latest_fraud_warning`	JSON	Optional
`latest_fraud_warning (anyOf 1)`	JSON	Alternative	Stripe’s assessment of whether this card’s details have been compromised. If this property isn't null, cancel and reissue the card to prevent fraudulent activity risk.
`latest_fraud_warning (anyOf 1) (anyOf 1)`	Model	Alternative	Expand Fail a testmode card — response body — latest fraud warning value started at, type
`latest_fraud_warning (anyOf 2)`	null	Alternative
`lifecycle_controls`	JSON	Optional
`lifecycle_controls (anyOf 1)`	JSON	Alternative	Rules that control the lifecycle of this card, such as automatic cancellation. Refer to our [documentation](/issuing/controls/lifecycle-controls) for more details.
`lifecycle_controls (anyOf 1) (anyOf 1)`	Model	Alternative	Expand Fail a testmode card — response body — lifecycle controls value cancel after
`lifecycle_controls (anyOf 2)`	null	Alternative
`livemode`	boolean	Required within parent	If the object exists in live mode, the value is `true`. If the object exists in test mode, the value is `false`.
`metadata`	object	Required within parent	Set of [key-value pairs](https://docs.stripe.com/api/metadata) that you can attach to an object. This can be useful for storing additional information about the object in a structured format. Additional keys: see wildcard field
`metadata.*`	string	Additional keys	Maximum length: 500
`number`	string	Optional	The full unredacted card number. For security reasons, this is only available for virtual cards, and will be omitted unless you explicitly request it with [the `expand` parameter](https://docs.stripe.com/api/expanding_objects). Additionally, it's only available via the ["Retrieve a card" endpoint](https://docs.stripe.com/api/issuing/cards/retrieve), not via "List all cards" or any other endpoint. Maximum length: 5000
`object`	string	Required within parent	String representing the object's type. Objects of the same type share the same value. Known values: issuing.card
`personalization_design`	JSON	Optional
`personalization_design (anyOf 1)`	JSON	Alternative	The personalization design object belonging to this card.
`personalization_design (anyOf 1) (anyOf 1)`	string	Alternative	Maximum length: 5000
`personalization_design (anyOf 1) (anyOf 2)`	Model	Alternative	Expand Create a personalization design — response body
`personalization_design (anyOf 2)`	null	Alternative
`replaced_by`	JSON	Optional
`replaced_by (anyOf 1)`	JSON	Alternative	The latest card that replaces this card, if any.
`replaced_by (anyOf 1) (anyOf 1)`	string	Alternative	Maximum length: 5000
`replaced_by (anyOf 1) (anyOf 2)`	Model	Alternative	Expand Fail a testmode card — response body
`replaced_by (anyOf 2)`	null	Alternative
`replacement_for`	JSON	Optional
`replacement_for (anyOf 1)`	JSON	Alternative	The card this card replaces, if any.
`replacement_for (anyOf 1) (anyOf 1)`	string	Alternative	Maximum length: 5000
`replacement_for (anyOf 1) (anyOf 2)`	Model	Alternative	Expand Fail a testmode card — response body
`replacement_for (anyOf 2)`	null	Alternative
`replacement_reason`	JSON	Optional
`replacement_reason (anyOf 1)`	string	Alternative	The reason why the previous card needed to be replaced. Known values: damaged, expired, fulfillment_error, lost, stolen
`replacement_reason (anyOf 2)`	null	Alternative
`second_line`	JSON	Optional
`second_line (anyOf 1)`	string	Alternative	Text separate from cardholder name, printed on the card. Maximum length: 5000
`second_line (anyOf 2)`	null	Alternative
`shipping`	JSON	Optional
`shipping (anyOf 1)`	JSON	Alternative	Where and how the card will be shipped.
`shipping (anyOf 1) (anyOf 1)`	Model	Alternative	Expand Fail a testmode card — response body — shipping / Where and how the card will be shipped / service: express, priority, standard, type: bulk, individual
`shipping (anyOf 2)`	null	Alternative
`spending_controls`	Model	Required within parent	Expand Fail a testmode card — response body — spending controls
`status`	string	Required within parent	Whether authorizations can be approved on this card. May be blocked from activating cards depending on past-due Cardholder requirements. Defaults to `inactive`. Known values: active, canceled, inactive
`type`	string	Required within parent	The type of the card. Known values: physical, virtual
`wallets`	JSON	Optional
`wallets (anyOf 1)`	JSON	Alternative	Information relating to digital wallets (like Apple Pay and Google Pay).
`wallets (anyOf 1) (anyOf 1)`	Model	Alternative	Expand Fail a testmode card — response body — wallets value apple pay, google pay, primary account identifier
`wallets (anyOf 2)`	null	Alternative

Referenced models: Fail a testmode card — response body, Create a cardholder — response body, Create a personalization design — response body, Fail a testmode card — response body — spending controls, Fail a testmode card — response body — latest fraud warning value started at, type, Fail a testmode card — response body — lifecycle controls value cancel after, Fail a testmode card — response body — shipping / Where and how the card will be shipped / service: express, priority, standard, type: bulk, individual, Fail a testmode card — response body — wallets value apple pay, google pay, primary account identifier

Update a transaction — response body — amount details value atm fee, cashback amount

Field	Type	Presence	Description and constraints
`$`	object	Root
`atm_fee`	JSON	Optional
`atm_fee (anyOf 1)`	JSON	Alternative
`atm_fee (anyOf 1) (anyOf 1)`	integer	Alternative	The fee charged by the ATM for the cash withdrawal.
`atm_fee (anyOf 1) (anyOf 2)`	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
`atm_fee (anyOf 2)`	null	Alternative
`cashback_amount`	JSON	Optional
`cashback_amount (anyOf 1)`	JSON	Alternative
`cashback_amount (anyOf 1) (anyOf 1)`	integer	Alternative	The amount of cash requested by the cardholder.
`cashback_amount (anyOf 1) (anyOf 2)`	string	Alternative	Pattern: ^-?[0-9]+(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?$
`cashback_amount (anyOf 2)`	null	Alternative

Create a cardholder — response body — company value tax id provided

Field	Type	Presence	Description and constraints
`$`	object	Root
`tax_id_provided`	boolean	Required within parent	Whether the company's business ID number was provided.

Policy, approvals and errors

SDK function policy ID: stripe.postissuingauthorizationsauthorizationapprove. Catalog operation: PostIssuingAuthorizationsAuthorizationApprove. Rules can name either ID; function rules distinguish managed calls and conservatively cover raw calls sharing the route. Existing grant permissions and policy rules apply. wait() returns an immediate result or waits for a required approval; it never approves the request itself. Persist the approval ID to resume after a restart.

Provider errors retain their response; JSON decoding raises ProviderAPIError for provider failures. ManagedOperationError identifies contract/input/retention errors. See error handling and provider-specific behavior. Sensitive input may be refused before approval storage. A decoding error never resubmits a write.

Pinned headers: {"Stripe-Version": "2026-09-30.endive"}

Official provider source

Report an issue with this page