> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://en.docs.api.corpx.com/ib/referencia/accounts/create-limit-request-message/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://en.docs.api.corpx.com/_mcp/server. # Reply to a limit-request information ask POST https://client.api.corpx.com/v1/accounts/{accountId}/limit-requests/{requestId}/messages Content-Type: application/json Text reply from the account holder. Accepted only while the request is `info_requested`. Up to 2000 characters. Reference: https://en.docs.api.corpx.com/ib/referencia/accounts/create-limit-request-message ## Authentication - `Authorization` header (bearer token, required) — Bearer authentication of the form `Bearer `, where token is your auth token. ## Request ### Path parameters - `accountId` (string, required) — Account identifier. - `requestId` (string, required) — Limit request id. ### Headers - `X-Tenant-Id` (string, required) — Tenant context used for authorization and routing. - `X-Acting-Document` (string, optional) — CPF of the human performing the operation. Required on cashout routes when the credential enforces a transaction PIN. - `Idempotency-Key` (string, optional) — Optional client-generated idempotency token (recommended for safe retries). - `X-Request-Timestamp` (string, required) — Unix seconds. Required on the signed host; tolerance is 300s either way (`403 request_timestamp_skew`). - `X-Content-SHA256` (string, required) — Lowercase hex SHA-256 of the body. An empty body hashes the empty string, so the header is always present. Mismatch returns `400 body_hash_mismatch`. - `X-Request-Signature` (string, required) — Detached JWS (`..`, ES256 or PS256) over `METHOD\nPATH?QUERY\nTIMESTAMP\nIDEMPOTENCY_KEY_OR_EMPTY\nX_CONTENT_SHA256`. ## Response ### 201 Message stored. ## Errors ### 409 Conflict Error `limit_request_closed`. - `errorCode` (string, required) — Stable machine-readable code. See `ErrorCode` for the known values. - `message` (string, required) — Human-readable explanation (pt-BR). Presentation only; may change. - `docs` (string, optional) — Link to this code in the public error catalogue. - `requestId` (string, optional) — Gateway request id. Quote it when contacting support. - `details` (map from string to any, optional) — Optional machine-readable context for the specific `errorCode` (for example `kind` on `identity_verification_monthly_limit_exceeded`, `maxBytes` on `payload_too_large`, `attemptsRemaining` on `facetec_attempts_exhausted`). Keys are documented per operation; absent when the code carries no extra context. - `partner` (ErrorResponsePartner, optional) — Raw error from the settlement bank, when the failure came from it. Diagnostic only. ### 422 Unprocessable Entity Error Empty message or message longer than 2000 characters. - `errorCode` (string, required) — Stable machine-readable code. See `ErrorCode` for the known values. - `message` (string, required) — Human-readable explanation (pt-BR). Presentation only; may change. - `docs` (string, optional) — Link to this code in the public error catalogue. - `requestId` (string, optional) — Gateway request id. Quote it when contacting support. - `details` (map from string to any, optional) — Optional machine-readable context for the specific `errorCode` (for example `kind` on `identity_verification_monthly_limit_exceeded`, `maxBytes` on `payload_too_large`, `attemptsRemaining` on `facetec_attempts_exhausted`). Keys are documented per operation; absent when the code carries no extra context. - `partner` (ErrorResponsePartner, optional) — Raw error from the settlement bank, when the failure came from it. Diagnostic only. ## Types ### ErrorResponsePartner Raw error from the settlement bank, when the failure came from it. Diagnostic only. - `code` (string, optional) - `message` (string, optional) - `field` (string, optional) — Field the partner pointed at, when any. ## Examples **Request** ```json { "body": "Segue o extrato em anexo." } ``` **Response** ```json { "authorKind": "holder", "body": "Segue o extrato em anexo.", "createdAt": "2026-10-04T13:00:00Z", "documentTypes": [], "id": "lrm_2" } ``` **SDK Code** ```python Accounts_createLimitRequestMessage_example import requests url = "https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages" payload = { "body": "Segue o extrato em anexo." } headers = { "X-Content-SHA256": "X-Content-SHA256", "X-Request-Signature": "X-Request-Signature", "X-Request-Timestamp": "X-Request-Timestamp", "X-Tenant-Id": "X-Tenant-Id", "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.post(url, json=payload, headers=headers) print(response.json()) ``` ```javascript Accounts_createLimitRequestMessage_example const url = 'https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages'; const options = { method: 'POST', headers: { 'X-Content-SHA256': 'X-Content-SHA256', 'X-Request-Signature': 'X-Request-Signature', 'X-Request-Timestamp': 'X-Request-Timestamp', 'X-Tenant-Id': 'X-Tenant-Id', Authorization: 'Bearer ', 'Content-Type': 'application/json' }, body: '{"body":"Segue o extrato em anexo."}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Accounts_createLimitRequestMessage_example package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages" payload := strings.NewReader("{\n \"body\": \"Segue o extrato em anexo.\"\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("X-Content-SHA256", "X-Content-SHA256") req.Header.Add("X-Request-Signature", "X-Request-Signature") req.Header.Add("X-Request-Timestamp", "X-Request-Timestamp") req.Header.Add("X-Tenant-Id", "X-Tenant-Id") req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Accounts_createLimitRequestMessage_example require 'uri' require 'net/http' url = URI("https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["X-Content-SHA256"] = 'X-Content-SHA256' request["X-Request-Signature"] = 'X-Request-Signature' request["X-Request-Timestamp"] = 'X-Request-Timestamp' request["X-Tenant-Id"] = 'X-Tenant-Id' request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"body\": \"Segue o extrato em anexo.\"\n}" response = http.request(request) puts response.read_body ``` ```java Accounts_createLimitRequestMessage_example import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages") .header("X-Content-SHA256", "X-Content-SHA256") .header("X-Request-Signature", "X-Request-Signature") .header("X-Request-Timestamp", "X-Request-Timestamp") .header("X-Tenant-Id", "X-Tenant-Id") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"body\": \"Segue o extrato em anexo.\"\n}") .asString(); ``` ```php Accounts_createLimitRequestMessage_example request('POST', 'https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages', [ 'body' => '{ "body": "Segue o extrato em anexo." }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', 'X-Content-SHA256' => 'X-Content-SHA256', 'X-Request-Signature' => 'X-Request-Signature', 'X-Request-Timestamp' => 'X-Request-Timestamp', 'X-Tenant-Id' => 'X-Tenant-Id', ], ]); echo $response->getBody(); ``` ```csharp Accounts_createLimitRequestMessage_example using RestSharp; var client = new RestClient("https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages"); var request = new RestRequest(Method.POST); request.AddHeader("X-Content-SHA256", "X-Content-SHA256"); request.AddHeader("X-Request-Signature", "X-Request-Signature"); request.AddHeader("X-Request-Timestamp", "X-Request-Timestamp"); request.AddHeader("X-Tenant-Id", "X-Tenant-Id"); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"body\": \"Segue o extrato em anexo.\"\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift Accounts_createLimitRequestMessage_example import Foundation let headers = [ "X-Content-SHA256": "X-Content-SHA256", "X-Request-Signature": "X-Request-Signature", "X-Request-Timestamp": "X-Request-Timestamp", "X-Tenant-Id": "X-Tenant-Id", "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = ["body": "Segue o extrato em anexo."] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://client.api.corpx.com/v1/accounts/accountId/limit-requests/requestId/messages")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```