Reply to a clarification request
The account holder’s reply to the review’s question. Only accepted in info_requested; otherwise 409 med_not_writable. Attachments that explain the message go through evidence/add with the returned messageId. Close the package with POST .../submit.
Authentication
Bearer authentication of the form Bearer <token>, where token is your auth token.
Path parameters
The medId.
Headers
Optional client-generated idempotency token (recommended for safe retries).
Unix seconds. Required on the signed host; tolerance is 300s either way (403 request_timestamp_skew).
Lowercase hex SHA-256 of the body. An empty body hashes the empty string, so the header is always present. Mismatch returns 400 body_hash_mismatch.
Detached JWS (<protected>..<signature>, ES256 or PS256) over METHOD\nPATH?QUERY\nTIMESTAMP\nIDEMPOTENCY_KEY_OR_EMPTY\nX_CONTENT_SHA256.