# MerchantFlowConfig

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

The merchant's transaction-flow configuration. Today it carries the transaction screening
block, which holds the built-in fraud rules evaluated before the transaction reaches a
processor.

## Fields
- `id` (string(uuid)): Identifier of the flow configuration. Assigned by the platform. (nullable)
- `name` (string): Display name of the flow configuration. Optional and not used for matching. (nullable)
- `screening` ([FraudScreeningConfig](https://devportal.demo.winkpg.io/docs/api/models/FraudScreeningConfig.md)): Transaction screening configuration for this merchant. Null or absent leaves every  screening rule unconfigured, which screens nothing.
  Fields:
  - `contributors` ([FraudContributors](https://devportal.demo.winkpg.io/docs/api/models/FraudContributors.md)): The screening rules evaluated for this merchant. Null or absent leaves every rule  unconfigured.
  - `reviewHoldDeadlineMinutes` (integer(int32)): How long, in minutes, a transaction held by one of this merchant's screening rules waits for  a reviewer before its deadline passes. Applies to every rule whose action is  `HoldForReview`; a hold requested by an external screening provider follows that  provider's own setting instead. Null applies the platform default of 4320 minutes (three  days). Accepted range 15 to 43200 (30 days). (nullable, min 15, max 43200)
  - `reviewHoldExpiryAction` ([ReviewHoldExpiryAction](https://devportal.demo.winkpg.io/docs/api/models/ReviewHoldExpiryAction.md)): What happens to a transaction held by one of this merchant's screening rules when nobody  approves or declines it before the deadline. `Decline` declines it, as a reviewer  rejection would. `ApproveAndContinue` releases it to authorization and records that  the deadline, not a reviewer, approved it. Null applies `Decline`. (nullable)
    Values:
    - `Decline`: Decline the held transaction when the deadline passes, exactly as a reviewer rejection would. The default.
    - `ApproveAndContinue`: Release the held transaction to authorization when the deadline passes, recording that it was approved by expiry rather than by a reviewer.
  - `cardTestingBackstopOverride` ([CardTestingBackstopOverride](https://devportal.demo.winkpg.io/docs/api/models/CardTestingBackstopOverride.md)): Lowers the platform card-testing protection for this merchant. `Observe` keeps  detection and alerting but never refuses or stops one of this merchant's transactions;  `Off` turns the protection off for this merchant. Null follows the platform setting.  The override can only lower the protection, never raise it. Changing it requires a  dedicated administrator permission. (nullable)
    Values:
    - `Off`: Count nothing for this merchant: no window, no detection, no enforcement.
    - `Observe`: Count and detect for this merchant, and alert on an attack, but never refuse or stop one of its transactions, even when the platform enforces.

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.