Replace the account cashout locks
Takes the whole desired document. Applied field by field:
tightening (blocking, narrowing the window, removing an IP) takes effect
immediately; loosening waits 6 hours and comes back as pending with
pendingEffectiveAt.
Requires scope security_locks.manage.
Authentication
Bearer authentication of the form Bearer <token>, where token is your auth token.
Path parameters
Headers
Real IP of the end user, for integrator credentials calling on their behalf. This is the IP evaluated against cashoutSourceIps — without it the check would see your server’s IP. Ignored for delegated credentials, where the connection IP is already the right one.
Optional client-generated idempotency token (recommended for safe retries).
Request
true rejects every outgoing payment (423 cashout_locked).
Allowed window for outgoing payments. A window crossing midnight is accepted (start greater than end).
IPs/CIDRs allowed to move money out. Integrators must pass the end user’s IP in X-Acting-Ip for this to mean anything.
Response
Locks stored; the response states what applies now and what waits.
When the loosening takes over (6h after the request).