Approve a mandate with a wallet

curl --request POST \
  --url https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "optionId": "opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "signedPayloads": [
    {
      "payloadId": "payload_af2937b0-9846-4fe7-bfe9-ccc22d935114",
      "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
    }
  ]
}
'

import requests

url = "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet"

payload = {
    "optionId": "opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "signedPayloads": [
        {
            "payloadId": "payload_af2937b0-9846-4fe7-bfe9-ccc22d935114",
            "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    optionId: 'opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890',
    signedPayloads: [
      {
        payloadId: 'payload_af2937b0-9846-4fe7-bfe9-ccc22d935114',
        signature: '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
      }
    ]
  })
};

fetch('https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'optionId' => 'opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890',
    'signedPayloads' => [
        [
                'payloadId' => 'payload_af2937b0-9846-4fe7-bfe9-ccc22d935114',
                'signature' => '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet"

	payload := strings.NewReader("{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "approvalId": "approval_5f0e9d8c-7b6a-4321-fedc-ba0987654321",
  "status": "pending",
  "source": {
    "address": "0xAbC1234567890aBcDeF1234567890AbCdEf123456",
    "network": "base",
    "asset": "usdc"
  },
  "createdAt": "2025-06-15T12:04:00.000Z",
  "updatedAt": "2025-06-15T12:04:00.000Z"
}

Mandates

Approve a mandate with a wallet

Customer-initiated. Approves a mandate on a wallet source using the customer’s signed payloads from Get wallet approval options. The customer signs the payloads themselves, so this call is unauthenticated. The mandate must be in created or approval_failed status, not expired, and have no approval or revocation in flight.

Returns a pending approval and moves the mandate to approval_pending. On success the mandate’s source is set and status becomes approval_succeeded; it can then be used by Authorize a payment session with a mandate. On failure status becomes approval_failed and a new approval can be submitted. Follow progress with Get a mandate approval or the acceptance.mandate.approval_* webhooks.

POST

mandates

{mandateId}

approvals

wallet

Approve a mandate with a wallet

curl --request POST \
  --url https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "optionId": "opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "signedPayloads": [
    {
      "payloadId": "payload_af2937b0-9846-4fe7-bfe9-ccc22d935114",
      "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
    }
  ]
}
'

import requests

url = "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet"

payload = {
    "optionId": "opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "signedPayloads": [
        {
            "payloadId": "payload_af2937b0-9846-4fe7-bfe9-ccc22d935114",
            "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
        }
    ]
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    optionId: 'opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890',
    signedPayloads: [
      {
        payloadId: 'payload_af2937b0-9846-4fe7-bfe9-ccc22d935114',
        signature: '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
      }
    ]
  })
};

fetch('https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'optionId' => 'opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890',
    'signedPayloads' => [
        [
                'payloadId' => 'payload_af2937b0-9846-4fe7-bfe9-ccc22d935114',
                'signature' => '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet"

	payload := strings.NewReader("{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/approvals/wallet")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"optionId\": \"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_af2937b0-9846-4fe7-bfe9-ccc22d935114\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "approvalId": "approval_5f0e9d8c-7b6a-4321-fedc-ba0987654321",
  "status": "pending",
  "source": {
    "address": "0xAbC1234567890aBcDeF1234567890AbCdEf123456",
    "network": "base",
    "asset": "usdc"
  },
  "createdAt": "2025-06-15T12:04:00.000Z",
  "updatedAt": "2025-06-15T12:04:00.000Z"
}

Headers

X-Idempotency-Key

string

An optional string request header for making requests safely retryable. When included, duplicate requests with the same key will return identical responses. Refer to our Idempotency docs for more information on using idempotency keys.

Required string length: 1 - 128

Path Parameters

mandateId

string

required

The unique identifier of the mandate to approve. The ID of the mandate, a UUID prefixed by mandate_.

Pattern: ^mandate_[a-f0-9\-]{36}$

Example:

"mandate_82c879c1-84e1-44ed-a8c2-1ac239cf09ad"

Body

application/json

A request to approve a mandate on a wallet source. Submit the optionId the customer chose from Get wallet approval options along with the signed payloads. This creates a pending approval; the mandate becomes approval_succeeded once the approval succeeds.

optionId

string

required

The identifier of the chosen option. Must match an optionId from the Get wallet approval options response.

Example:

"opt_a1b2c3d4-e5f6-7890-abcd-ef1234567890"

signedPayloads

object[]

required

The processed payloads from the customer, corresponding to the payloads in the selected option.

Show child attributes

Example:

[
  {
    "payloadId": "payload_af2937b0-9846-4fe7-bfe9-ccc22d935114",
    "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
  }
]

metadata

object

Optional metadata as key-value pairs. Use this to store additional structured information on a resource, such as customer IDs, order references, or any application-specific data. Up to 10 key/value pairs may be provided. Keys and values are both strings. Keys must be ≤ 40 characters; values must be ≤ 500 characters.

Show child attributes

Example:

{
  "customer_id": "cust_12345",
  "order_reference": "order-67890"
}

Response

Successfully created mandate wallet approval.

An attempt to attach a funding source to a mandate and make it usable. A successful approval sets the mandate's source and moves the mandate to approval_succeeded; a failed one moves the mandate to approval_failed and can be retried by submitting a new approval. A mandate holds at most one active source, so at most one approval ever succeeds. The network transactions that grant the spending allowance are on onchainTransactions.

approvalId

string

required

The unique identifier of the approval.

Pattern: ^approval_[a-f0-9\-]{36}$

Example:

"approval_5f0e9d8c-7b6a-4321-fedc-ba0987654321"

status

enum<string>

required

The current status of the approval attempt.

Available options:

pending,

succeeded,

failed

Example:

"succeeded"

createdAt

string<date-time>

required

The UTC ISO 8601 timestamp at which the approval was created.

Example:

"2025-06-15T12:04:00.000Z"

updatedAt

string<date-time>

required

The UTC ISO 8601 timestamp at which the approval was last updated.

Example:

"2025-06-15T12:05:00.000Z"

source

Mandate Source Wallet · object

The funding source this approval binds to the mandate. Present once the source has been determined from the customer's submission.

Show child attributes

Example:

{
  "address": "0xAbC1234567890aBcDeF1234567890AbCdEf123456",
  "network": "base",
  "asset": "usdc"
}

onchainTransactions

object[]

Network transactions that grant the spending allowance on-chain. Empty until the approval has been submitted to the network.

Show child attributes

Example:

[
  {
    "transactionHash": "0xabc123def456789012345678901234567890abcdef1234567890abcdef123456",
    "network": "base"
  }
]

error

object

Details of why the approval failed. Only present when status is failed.

Show child attributes

Example:

{
  "code": "invalid_signature",
  "message": "The submitted signature was invalid.",
  "occurredAt": "2025-06-15T12:04:00.000Z"
}

metadata

object

Show child attributes

Example:

{
  "customer_id": "cust_12345",
  "order_reference": "order-67890"
}

CDP API

REST API

Approve a mandate with a wallet

Headers

Path Parameters

Body

Response