Create bank transfer cancellation operation

Prerequisite: the parent operation must exist and admit cancellation — read its state via getOperation (GET /v1/str/operations/); the path segment structurally ties the cancellation to its parent. The handler resolves the original by operationId, gates lifecycle (SPB-3006 if status forbids), and delegates to the STR0011 cancellation path.

POST /v1/str/operations/bank-transfers/{operationId}/cancellations

Create bank transfer cancellation operation

cURL

curl --request POST \
  --url https://spb.sandbox.lerian.net/v1/str/operations/bank-transfers/{operationId}/cancellations \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "senderIspb": "<string>",
  "metadata": {},
  "reason": "<string>"
}
'

201

{
  "acceptedAt": "2023-11-07T05:31:56Z",
  "capabilityId": "<string>",
  "correlationId": "<string>",
  "isReplay": true,
  "operationFamily": "<string>",
  "operationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "status": "<string>",
  "protocolMetadata": {
    "controlNumber": "<string>",
    "nuOp": "<string>"
  }
}

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Headers

Authorization · string

Bearer JWT token.

X-Idempotency · string

Idempotency key (canonical).

X-Idempotency-Key · string

Idempotency key (legacy alias).

X-TTL · string

Idempotency key TTL in seconds.

Path Parameters

operationId · string · required

Original bank-transfer operation UUID.

Body

application/json

senderIspb · string · required

ISPB of the participant requesting the cancellation, the 8-digit BACEN institution identifier.

Example:

"12345678"

metadata · object

Opaque client-side metadata forwarded verbatim to the legacy submit DTO; not persisted on the cancellation intent.

Show child attributes

reason · string

Optional free-text reason for the cancellation.

Example:

"Client requested cancellation"

Response

201

application/json

Created

acceptedAt · string<date-time> · required

UTC RFC 3339 timestamp at which the command was accepted.

Example:

"2026-05-06T18:30:00Z"

capabilityId · string · required

STR capability identifier resolved for the accepted operation (e.g. STR0004).

Example:

"STR0004"

correlationId · string · required

Request correlation identifier for tracing the accept across logs and traces.

Example:

"req-7c8b3a2e-9f1d-4a55-9b8e-1e1234567890"

isReplay · boolean · required

True when this response replays a prior idempotent accept rather than creating a new operation.

Example:

false

operationFamily · string · required

Operation family the accepted command belongs to (e.g. bankTransfer).

Example:

"bankTransfer"

operationId · string<uuid> · required

Server-assigned operation aggregate UUID used for subsequent status, return, and cancellation calls.

Example:

"7c8b3a2e-9f1d-4a55-9b8e-1e1234567890"

status · string · required

Current control-plane lifecycle status of the operation; ACCEPTED on initial accept.

Example:

"ACCEPTED"

protocolMetadata · object

Optional SAFE protocol correlation fields; present once the operation is mapped to STR wire identifiers.

Show child attributes