Surcharging: Activates surcharging without waiting out the mandatory notice period.

POST /api/surcharging/configurations/{merchantId}/force-enable deprecated

Requires: Surcharging.Admin.ForceEnable, merchant scope.

Requires API key scope: admin (Administration)

Available only in an allowlisted non-production environment with the sandbox-override setting on.

Signed in, you can send this request to your own sandbox merchant from the console and read the answer. Sign in to try it.

Example request

Every block below sends the same request. Replace {{BASE_URL}} with the address of the API you are calling and {{API_KEY}} with your own key.

The request body is a . See the Request body section below for its fields.

cURL PowerShell TypeScript C# Python

cURL

curl -X POST "{{BASE_URL}}/api/surcharging/configurations/{merchantId}/force-enable" \
  -H "api-key: {{API_KEY}}"

PowerShell

$headers = @{
    'api-key' = '{{API_KEY}}'
}

$response = Invoke-RestMethod -Method POST -Uri '{{BASE_URL}}/api/surcharging/configurations/{merchantId}/force-enable' `
    -Headers $headers

npm install @winkpg/winkpg-api

TypeScript (SDK)

import { Configuration, SurchargingApi } from '@winkpg/winkpg-api';

const api = new SurchargingApi(new Configuration({
  basePath: '{{BASE_URL}}',
  apiKey: '{{API_KEY}}',
}));

const { data } = await api.surchargeConfigurationForceEnable("3fa85f64-5717-4562-b3fc-2c963f66afa6");

TypeScript (raw HTTP)

const response = await fetch('{{BASE_URL}}/api/surcharging/configurations/{merchantId}/force-enable', {
  method: 'POST',
  headers: {
    "api-key": "{{API_KEY}}",
  },
});

const data = await response.json();

dotnet add package WinkPg.Api.Client

C# (SDK)

using WinkPg.Api.Client.Api;
using WinkPg.Api.Client.Client;

var config = new Configuration { BasePath = "{{BASE_URL}}" };
config.AddApiKey("api-key", "{{API_KEY}}");

var api = new SurchargingApi(config);
var result = await api.SurchargeConfigurationForceEnableAsync(Guid.Parse("3fa85f64-5717-4562-b3fc-2c963f66afa6"));

C# (raw HTTP)

using var http = new HttpClient { BaseAddress = new Uri("{{BASE_URL}}") };

var request = new HttpRequestMessage(new HttpMethod("POST"), "/api/surcharging/configurations/{merchantId}/force-enable");
request.Headers.Add("api-key", "{{API_KEY}}");

var response = await http.SendAsync(request);
response.EnsureSuccessStatusCode();
var json = await response.Content.ReadAsStringAsync();

pip install winkpg-api

Python (SDK)

import winkpg_api

configuration = winkpg_api.Configuration(host="{{BASE_URL}}")
configuration.api_key["ApiKey"] = "{{API_KEY}}"

with winkpg_api.ApiClient(configuration) as client:
    api = winkpg_api.SurchargingApi(client)
    result = api.surcharge_configuration_force_enable("3fa85f64-5717-4562-b3fc-2c963f66afa6")

pip install requests

Python (raw HTTP)

import requests

headers = {
    "api-key": "{{API_KEY}}",
}

response = requests.request(
    "POST",
    "{{BASE_URL}}/api/surcharging/configurations/{merchantId}/force-enable",
    headers=headers,
)
response.raise_for_status()
data = response.json()

Parameters

Name In Type Description

merchantId required

path

string (uuid)

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

suppressNulls required

query

boolean

If true, omit properties with null values.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

Request body

application/json , required

Field	Type	Description

This request body has no documented fields.

Responses

200 OK

Body: SurchargeConfigurationDto SurchargeConfigurationDto Each item has these fields.

Field Type Description

id required

string (uuid)

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

creationTime required

string (date-time)

The date and time when this entity was created.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

creatorId required

string (uuid)

The ID of the user who created this entity. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

lastModificationTime required

string (date-time)

The date and time when this entity was last modified. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

lastModifierId required

string (uuid)

The ID of the user who last modified this entity. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

isDeleted required

boolean

Indicates whether this entity has been deleted.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

deleterId required

string (uuid)

The ID of the user who deleted this entity, if it is deleted. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

deletionTime required

string (date-time)

The date and time when this entity was deleted, if it is deleted. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

merchantId required

string (uuid)

The merchant this configuration belongs to.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

tenantId required

string (uuid)

Owning tenant (null in the host tenant). nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

isEnabled required

boolean

Whether surcharging is currently enabled for the merchant. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

status required

SurchargeConfigurationStatus SurchargeConfigurationStatus

Persisted lifecycle status of the configuration. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

`NotConfigured`	No surcharging has been set up for the merchant.
`PendingNotice`	Configuration exists but the required card-brand notice has not been filed.
`WaitingPeriod`	Notice filed; the mandatory waiting period is still running.
`Active`	Surcharging is live.
`Disabled`	Surcharging was turned off after having been configured.

waitingPeriodExpiresAt required

string (date-time)

The instant surcharging becomes permitted, i.e. when the mandatory notice waiting period elapses. Surcharging is blocked until this is in the past. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

noticeFiledAt required

string (date-time)

When the most recent notice was recorded in WinkPG. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

noticeFiledBy required

string

The user who filed the most recent notice. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

noticeAttestedDate required

string (date-time)

The calendar date the merchant attested they filed the most recent notice with the card networks, when that predates `noticeFiledAt`. Null when the notice was filed as of the record date, and on every notice recorded before this fact existed. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

defaultRate required

number (double)

Default surcharge rate (decimal fraction) when no network override applies. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

channelRestrictions required

SurchargeChannelFlags SurchargeChannelFlags

The channels surcharging applies to. Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

`None`	No channels enabled.
`VirtualTerminal`	Merchant-operated virtual terminal.
`Api`	Direct API integrations.
`HostedPaymentPage`	Hosted payment pages.
`RecurringBilling`	Recurring / scheduled billing.

processorAccountId required

string

The processor account under which the current notice / waiting period was established. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

disclosureCopyTemplate required

string

The merchant's own surcharge disclosure copy in the `SurchargeDisclosureCopy` token grammar, or null when the platform default copy applies. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

attestedCostOfAcceptanceRate required

number (double)

The merchant's attested effective cost of acceptance (decimal fraction), a hard ceiling. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

costOfAcceptanceAttestedAt required

string (date-time)

When the cost-of-acceptance rate was attested. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

costOfAcceptanceAttestedBy required

string

The user who attested the cost-of-acceptance rate. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

differentialNetworkRatesAttested required

boolean

Whether differing surcharge rates across the allowed card networks have been attested as carrying documented legal signoff. Required before such a rate set can be saved. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

differentialNetworkRatesAttestedAt required

string (date-time)

When the differential-rate signoff was attested. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

differentialNetworkRatesAttestedBy required

string

The user who attested the differential-rate signoff. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

forceEnabledAt required

string (date-time)

When surcharging was activated through the non-production waiting-period bypass, if it ever was. Null on every configuration activated the normal way, so a non-null value is the signal that this merchant's notice waiting period was not actually served. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

forceEnabledBy required

string

The user who activated surcharging through the non-production bypass. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

promotionHeldAt required

string (date-time)

When an explicit promotion hold was placed on this configuration, or null when none is in force. While it is set, the waiting-period sweep will not promote the configuration and both enable and force enable are refused with `Surcharging:PromotionHeld`. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

promotionHeldBy required

string

The user who placed the promotion hold currently in force. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

promotionHoldReason required

string

Why the promotion hold currently in force was placed, when a reason was given. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

disabledAt required

string (date-time)

When surcharging was last disabled on this configuration, or null when it has not been disabled since it was last enabled. While it is set, the waiting-period sweep will not promote the configuration, even after a notice filed since the disable has returned `status` to `WaitingPeriod`. Enabling or force enabling the configuration clears it. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

disabledBy required

string

The user who applied the disable currently in force. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

autoPromotionBlockedReason required

SurchargeAutoPromotionBlockReason SurchargeAutoPromotionBlockReason

Why the deployment's auto-promotion source policy is refusing to promote this configuration, or null when it is not refusing. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

`NoApiFiledNotice`	The policy is ApiFiledOnly and none of the notices the waiting period counts was filed under an API key. Filing a fresh notice over the API clears it; the waiting period runs again from that notice.
`PolicyNone`	The policy is None, so nothing promotes on this deployment whatever the notices say. Only an operator changing the policy clears it.

networkPolicies required

array of SurchargeNetworkPolicyDto array of SurchargeNetworkPolicyDto

Per-network surcharge policies. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

Fields of each SurchargeNetworkPolicyDto:

Field Type Description

network required

string

The card network this policy applies to. Required, and it must be one of these spellings: Visa; Mastercard, Master Card or MC; Discover; Amex or American Express; JCB; Diners, Diners Club or Diners Club International; UnionPay, Union Pay, China Union Pay, China UnionPay or CUP; Interac. Case and surrounding spaces are ignored, and the name is stored and returned as sent. A configuration names each network once: two spellings of one network (Mastercard and MC) are the same network. nullablemax length 64

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

isAllowed required

boolean

Whether surcharging is allowed on this network. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

customRate required

number (double)

Optional network-specific rate override (decimal fraction); null uses the default rate. Conditional: When CustomRate is not null. Range: 0 to 0.03. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This body has no documented fields.

statePolicies required

array of SurchargeStatePolicyDto array of SurchargeStatePolicyDto

Per-state surcharge policies. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

Fields of each SurchargeStatePolicyDto:

Field Type Description

stateCode required

string

Two-letter US state code (e.g. "CO", "NY"). nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

restrictionType required

SurchargeStateRestrictionType SurchargeStateRestrictionType

How the state restricts surcharging. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

`Prohibited`	Surcharging is prohibited outright in the state.
`Restricted`	Surcharging is allowed but constrained (e.g. a state cap or disclosure rules).
`Permissive`	Surcharging is permitted with no state-specific restriction beyond network rules.

capRate required

number (double)

Optional state-imposed maximum rate (decimal fraction). Null means the state applies no numeric cap beyond network rules. Conditional: When CapRate is not null. Must be >= 0. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This body has no documented fields.

notices required

array of SurchargeNoticeRecordDto array of SurchargeNoticeRecordDto

Filed card-brand notices (per network). nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

Fields of each SurchargeNoticeRecordDto:

Field Type Description

noticeId required

string (uuid)

The notice's identifier, used to name it in an amendment. Null on a notice recorded before notice identifiers were assigned; such a notice cannot be amended and is corrected by filing a new one. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

network required

string

The card network the notice covers; null for an all-network notice. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

filedAt required

string (date-time)

When this record was created in WinkPG. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

attestedNoticeDate required

string (date-time)

The calendar date the merchant attested they filed notice with the card networks, when that predates `filedAt`. Null when the notice was filed as of the record date. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

effectiveAt required

string (date-time)

When the notice becomes effective (the network is surchargeable at/after this instant). nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

filedByUserId required

string

The user who filed the notice. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

filedByApiKeyId required

string (uuid)

The API key the notice was filed under, or null when it was not filed over the API (a notice filed from the portal records neither this nor `filedByApiKeyName`, and so does every notice recorded before provenance was captured). nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

filedByApiKeyName required

string

The display name the API key carried when the notice was filed. Never re-resolved, so a key renamed since keeps naming itself here the way it was named at the time. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

referenceNumber required

string

The notice reference number issued by the network / processor. The only field an amendment changes. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

amendedAt required

string (date-time)

When the reference number was last amended, or null when it never has been. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

amendedBy required

string (uuid)

The user who last amended the reference number, or null when it has never been amended or the amending caller carried no user id. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

processorAccountId required

string

The processor account the notice was filed under: a processor profile id from the merchant's processing settings, or null for a notice that covers every processor. A value recorded before filing checked it against the merchant's profiles reads back exactly as it was written. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

coversAllProcessors required

boolean

Whether the notice covers every card processor the merchant is boarded on, which is true when it names no processor account.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

coveredProcessorProfileIds required

array of string (uuid) array of

The card processor profiles the notice covers: the one it names, or every card processor profile on the merchant for a notice that names none. Empty when the stored processor account is not a profile id, or when the merchant's profiles could not be read for an all-processor notice. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This body has no documented fields.

cardProcessorCoverage required

array of SurchargeCardProcessorCoverageDto array of SurchargeCardProcessorCoverageDto

Every card processor profile the merchant is boarded on, and whether a filed notice covers each one. Null when the merchant's processing settings could not be read for this response. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

Fields of each SurchargeCardProcessorCoverageDto:

Field Type Description

processorProfileId required

string (uuid)

The processor profile id from the merchant's processing settings.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

processorId required

string

The processor the profile routes to, for example `tsys`. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

processorName required

string

The processor's display name. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

isActive required

boolean

Whether the profile is active. Only an active profile needs a covering notice before surcharging is activated, and only while the platform requires notice coverage per processor.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

isCovered required

boolean

Whether a counted notice covers this profile.

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This body has no documented fields.

concurrencyStamp required

string

Optimistic-concurrency token; supply the value read here when updating. nullable

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

403 Forbidden

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

401 Unauthorized

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

400 Bad Request

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

404 Not Found

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

501 Not Implemented

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

500 Internal Server Error

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

default The request failed. The body carries the standard error envelope: a machine-readable `error.code`, a human-readable `error.message`, and `error.validationErrors` when the failure was a validation rejection. The error reference lists the values `error.code` can take. The request failed. The body carries the standard error envelope: a machine-readable `error.code`, a human-readable `error.message`, and `error.validationErrors` when the failure was a validation rejection. The error reference lists the values `error.code` can take.

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

429 The request was refused because a rate limit was exceeded, or because something a later retry can clear stopped it. A rate limit refusal carries an `application/problem+json` body: wait at least the interval `Retry-After` names before retrying, then back off. Limits are tuned per deployment, so read the allowance from the response headers rather than assuming a fixed ceiling. Any other refusal carries the standard error envelope as `application/json`, and its `error.code` names the cause.

Body: RemoteServiceErrorResponse RemoteServiceErrorResponse Each item has these fields.

Field Type Description

error required

RemoteServiceErrorInfo RemoteServiceErrorInfo

Values: Values combine: send one or more member names separated by a comma and a space, or the integer sum of their values. Responses carry the names.

This response has no documented body fields.

Errors

A failed request returns the platform error envelope. The error reference lists every value error.code can carry and shows the four response shapes.

Codes declared by Surcharging

The API reference isn't available right now

No such operation

This reference may be out of date

Surcharging: Activates surcharging without waiting out the mandatory notice period.

Example request

Parameters

Request body

Responses

200 OK

403 Forbidden

401 Unauthorized

400 Bad Request

404 Not Found

501 Not Implemented

500 Internal Server Error

Errors

Authentication