Void an authorization
Voids (cancels) an authorization before it is captured, releasing the held
funds. Creates a void transaction linked via parent_transaction_id and
returns it with 200; read the void outcome from data.status. Pass an
Idempotency-Key header to make retries safe. Returns 404 when the
authorization is not found — including authorizations that were not created
through this API — 409 on an in-flight duplicate key or while another
request for the same authorization is running, and 422 when the
authorization cannot be voided: it is not a successful authorization, or
it was already captured or voided. On success, API-key-authenticated requests
emit a payment.voided webhook.
curl --request POST \
--url https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{}'import requests
url = "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void"
payload = {}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({})
};
fetch('https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void"
payload := strings.NewReader("{}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{}"
response = http.request(request)
puts response.read_body{
"data": {
"id": "fpi_01k5dmb4r6yzvoid",
"gateway_id": "stripe-usd",
"payment_method_id": "0192a3f4-6b1c-7d2e-8f40-5a6b7c8d9e01",
"card_network": "visa",
"parent_transaction_id": "fpi_01k5dm7w3q8hscranton",
"action": "void",
"status": "success",
"amount_cents": 5499,
"currency_code": "USD",
"payment_source": "CreditCard",
"gateway_transaction_id": "pi_3SBx7L2eZvKYlo2C1dM4sQ9f",
"reference_token": "order_48213",
"description": null,
"processing_fee_cents": 0,
"platform_fee_cents": 0,
"credited_amount_cents": 0,
"retain_on_success": false,
"metadata": {},
"created_at": "2026-09-16T11:12:45Z",
"updated_at": "2026-09-16T11:12:45Z"
},
"meta": {
"request_id": "0192a3f4-95a6-72b3-b4d5-3a4b5c6d7e89",
"timestamp": "2026-09-16T11:12:45Z"
}
}{
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"status": "<string>"
}{
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}Authorizations
Merchant API key (fp_live_* for live, fp_test_* for sandbox) or an
admin-tier JWT (company admin or root admin). Non-admin JWTs are
rejected with 403; live API keys additionally require the merchant's
API access to be enabled.
A company admin, company token or partner token also needs the role
grant for the action, or gets 403: gateways.view, .create,
.update or .delete (or the matching apm.* grant) for gateway
configuration, transactions.update for purchase, authorize, verify,
capture, void and credit, and transactions.view to read transactions.
API keys, root admins and droplet tokens are not checked against roles.
Headers
Optional client-generated key (UUID recommended) used to deduplicate retries: a stored response replays for up to 24 hours. A request whose outcome is unknown holds its key until support resolves it, and every retry under it answers 409 until then. Once support confirms that the request moved money, the key stays held for 24 hours; once support confirms that it did not, the key can be used again.
The key is bound to the exact request that first used it: the
method, path and query string, Content-Type, body bytes, and
whether a live or sandbox key sent it. Keep the serialized request
and resend it unchanged, byte for byte, to retry; the retry replays
the first response with X-Idempotent-Replayed: true. Any other
request under the key answers 422 and does not run, so a key
cannot be reused across operations, resources or amounts. Use a
new key only for a new request. A client that cannot reproduce the
original request must confirm the outcome by reading the
transaction, not retry under a new key, which could move the money
a second time.
Every authenticated caller is guarded: API keys, JWTs, and company, partner, public and droplet tokens. A retry must use the same kind of credential as the request it retries, because an API key and any other credential never share a key.
A concurrent retry while the first request is still in flight
returns 409. The cache stores whatever the first execution
returned, including error responses such as 404 or 422. Keys
longer than 255 characters are rejected with an unhandled 500.
A key must not end with :lock, which is reserved; such a key
answers 422 and the request does not run. A response already
cached under such a key, from before the suffix was reserved,
still replays on a retry of its request.
255Path Parameters
Transaction slug (authorization to void)
Body
Show child attributes
Show child attributes
curl --request POST \
--url https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{}'import requests
url = "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void"
payload = {}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({})
};
fetch('https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void"
payload := strings.NewReader("{}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/payment/v2026-04/transactions/{id}/void")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{}"
response = http.request(request)
puts response.read_body{
"data": {
"id": "fpi_01k5dmb4r6yzvoid",
"gateway_id": "stripe-usd",
"payment_method_id": "0192a3f4-6b1c-7d2e-8f40-5a6b7c8d9e01",
"card_network": "visa",
"parent_transaction_id": "fpi_01k5dm7w3q8hscranton",
"action": "void",
"status": "success",
"amount_cents": 5499,
"currency_code": "USD",
"payment_source": "CreditCard",
"gateway_transaction_id": "pi_3SBx7L2eZvKYlo2C1dM4sQ9f",
"reference_token": "order_48213",
"description": null,
"processing_fee_cents": 0,
"platform_fee_cents": 0,
"credited_amount_cents": 0,
"retain_on_success": false,
"metadata": {},
"created_at": "2026-09-16T11:12:45Z",
"updated_at": "2026-09-16T11:12:45Z"
},
"meta": {
"request_id": "0192a3f4-95a6-72b3-b4d5-3a4b5c6d7e89",
"timestamp": "2026-09-16T11:12:45Z"
}
}{
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"status": "<string>"
}{
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}{
"status": "error",
"message": "<string>",
"meta": {
"request_id": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"errors": "<string>"
}