Error
A valid request URL is required to generate request examples{
"data": [
{
"id": "po_demo_1",
"version": 2,
"kind": "purchase",
"name": "US egress 04",
"quote_id": "pq_demo_1",
"proxy_id": null,
"fulfilment_state": "awaiting_payment",
"attention": "none",
"payment_state": "unknown",
"refund_state": "none",
"delivery_mode": "hold",
"target_device_id": null,
"duration_seconds": 2592000,
"price": {
"currency": "USD",
"subtotal_amount_minor": 1200,
"tax_status": "included",
"tax_amount_minor": 0,
"total_amount_minor": 1200,
"price_reference": "price_demo_fixed",
"tax_behavior": "inclusive",
"configured_price_amount_minor": 1200
},
"sales_policy_version": "policy_demo_1",
"created_at": "2026-10-01T00:00:00Z",
"updated_at": "2026-10-01T00:00:00Z",
"fulfilment_deadline": "2026-10-01T00:15:00Z",
"renewal_decision_deadline": null,
"delivery_mode_changed_at": null,
"ready_at": null,
"decision_at": null,
"decision_reason": null,
"previous_customer_end": null,
"service_window": null,
"checkout": null,
"refund": {
"state": "none",
"amount": null,
"requested_at": null,
"submitted_at": null,
"succeeded_at": null,
"next_update_at": null
},
"progress": {
"original_promised_ready_at": "2026-10-01T00:10:00Z",
"latest_estimated_ready_at": null,
"next_update_at": "2026-10-01T00:03:00Z",
"message": "We are confirming the payment result. Do not pay again.",
"action_required": null
},
"resource_versions": {},
"device_versions": {},
"allowed_actions": [
{
"action": "checkout",
"allowed": false,
"reason_code": "payment_unknown",
"message": "The original payment result must be confirmed."
},
{
"action": "cancel",
"allowed": true,
"reason_code": null,
"message": null
}
],
"support_url": null,
"settled_payment": null
}
],
"page": {
"next_cursor": null,
"limit": 25,
"snapshot_at": "2026-10-01T00:00:00Z"
},
"snapshot": {
"freshness": "fresh",
"observed_at": "2026-10-01T00:00:00Z",
"served_at": "2026-10-01T00:00:00Z",
"message": null
},
"request_id": "req_demo_1"
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "rate_limited",
"message": "<string>"
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}Managed Proxy
List your Proxy orders
Requires a first-party interactive organization session with devices:read. Financial commands require an administrator and the configured checkout step-up policy. Network commands also require devices:act, current device authority and explicit consent. New purchase/connection commands require current admission. No credentials are returned. A deployment without the durable composition returns capability_unavailable (422). Renewal, order target/delivery edits, operation resume and event feeds are not available. Preserve command identity after an uncertain reply and read the original order or operation.
Hosted deployments only. A local checkout does not mount this route, so calling it there is a 404.
GET
/
v1
/
proxy-orders
Error
A valid request URL is required to generate request examples{
"data": [
{
"id": "po_demo_1",
"version": 2,
"kind": "purchase",
"name": "US egress 04",
"quote_id": "pq_demo_1",
"proxy_id": null,
"fulfilment_state": "awaiting_payment",
"attention": "none",
"payment_state": "unknown",
"refund_state": "none",
"delivery_mode": "hold",
"target_device_id": null,
"duration_seconds": 2592000,
"price": {
"currency": "USD",
"subtotal_amount_minor": 1200,
"tax_status": "included",
"tax_amount_minor": 0,
"total_amount_minor": 1200,
"price_reference": "price_demo_fixed",
"tax_behavior": "inclusive",
"configured_price_amount_minor": 1200
},
"sales_policy_version": "policy_demo_1",
"created_at": "2026-10-01T00:00:00Z",
"updated_at": "2026-10-01T00:00:00Z",
"fulfilment_deadline": "2026-10-01T00:15:00Z",
"renewal_decision_deadline": null,
"delivery_mode_changed_at": null,
"ready_at": null,
"decision_at": null,
"decision_reason": null,
"previous_customer_end": null,
"service_window": null,
"checkout": null,
"refund": {
"state": "none",
"amount": null,
"requested_at": null,
"submitted_at": null,
"succeeded_at": null,
"next_update_at": null
},
"progress": {
"original_promised_ready_at": "2026-10-01T00:10:00Z",
"latest_estimated_ready_at": null,
"next_update_at": "2026-10-01T00:03:00Z",
"message": "We are confirming the payment result. Do not pay again.",
"action_required": null
},
"resource_versions": {},
"device_versions": {},
"allowed_actions": [
{
"action": "checkout",
"allowed": false,
"reason_code": "payment_unknown",
"message": "The original payment result must be confirmed."
},
{
"action": "cancel",
"allowed": true,
"reason_code": null,
"message": null
}
],
"support_url": null,
"settled_payment": null
}
],
"page": {
"next_cursor": null,
"limit": 25,
"snapshot_at": "2026-10-01T00:00:00Z"
},
"snapshot": {
"freshness": "fresh",
"observed_at": "2026-10-01T00:00:00Z",
"served_at": "2026-10-01T00:00:00Z",
"message": null
},
"request_id": "req_demo_1"
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}{
"error": {
"code": "rate_limited",
"message": "<string>"
}
}{
"error": {
"code": "version_conflict",
"message": "The device or resource changed. Refresh its status before confirming again.",
"request_id": "req_demo_2",
"details": {
"retryable": false,
"recovery_action": "refresh_and_confirm",
"resource_versions": {
"px_demo_1": 8
},
"device_versions": {
"dev_demo_a": 13,
"dev_demo_b": 4
}
}
}
}Authorizations
The control surface credential. Send Authorization: Bearer <token>.
Two kinds of token are accepted and they are told apart by shape, not by a separate header. A token beginning pbk_ is an org scoped API key, whose public half and secret half are generated together and of which only a hash of the secret is ever stored; anything else is treated as an OAuth 2.1 access token and verified against the authorization server's keys.
Both resolve to the same context: an org, a principal and a set of scopes. Nothing downstream branches on which channel you used, with one deliberate exception, key management, which requires a signed-in person so that a key can never mint another key.
Scopes are enforced when MCP tools are REGISTERED rather than when they are called, so a tool your credential cannot use is absent from tools/list rather than refused mid gesture.
Query Parameters
Maximum rows, 1 to 100.
Required range:
1 <= x <= 100Opaque cursor from this collection and organization.
Maximum string length:
1024