Get one authorization request

Returns one authorization request, in ANY state: pending, accepted, rejected, cancelled by the receiving PSP or expired. It is the companion of the pending-request listing above, which a request LEAVES the moment it is decided (Guia v1.2 §3.2) — this operation is what an integrator calls afterwards to learn the outcome.

The representation is the SAME AuthorizationRequestItem the listing publishes, including the recurrence terms under recurrence (the CURRENT snapshot this institution holds for the recurrence).

A request belonging to a different account than X-Account-Id names is answered 404, exactly as one that does not exist: the account is a predicate on the lookup, so this end never learns the request exists elsewhere and cannot confirm it.

GET /payer/authorization-requests/{authorization_request_id}

Get one authorization request

cURL

curl --request GET \
  --url https://api.example.com/pixauto/v1/payer/authorization-requests/{authorization_request_id} \
  --header 'Authorization: Bearer <token>' \
  --header 'X-Account-Id: <x-account-id>'

200

accepted

{ "authorizationRequestId": "SC12345678202608276bca619e690", "decidedAt": "2026-08-27T19:20:00Z", "expiresAt": "2026-09-26T19:18:38Z", "receivedAt": "2026-08-27T19:18:38Z", "recurrenceId": "RR12345678202608276bca619e690", "status": "ACCEPTED", "journey": "JOURNEY_1", "recurrence": { "amount": { "amount": "89.90", "currency": "BRL" }, "contractDescription": "Mensalidade do plano de academia", "endDate": "2027-08-10", "periodicity": "MONTHLY", "receiver": { "name": "Academia Corpo em Movimento Ltda", "taxId": { "type": "CNPJ", "value": "11222333000181" } }, "retryPolicy": "ACCEPT_3R_7D", "snapshotVersion": 1, "startDate": "2026-09-10" } }

Autorizações

Authorization · string · header · obrigatório

JWT bearer token issued by the identity provider.

Cabeçalhos

X-Account-Id · string<uuid> · obrigatório

Non-zero UUID of the payer account selected by the calling PSP. The PSP must authorize its end user for that account before calling this API. A resource outside the selected account returns 404; a read with no records returns an empty page. See the API overview for the complete trust boundary.

Pattern: ^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$

Parâmetros de caminho

authorization_request_id · string · obrigatório

Payer-side request identifier, in ANY state — pending or already decided. It is the counterparty idSolicRec on journey 1 and a local identifier on QR journeys. Fixed 29-character shape (Manual de Padrões §2.2.1); one that does not parse into a well-formed identifier is refused with 422 (PIX-0810). A request or mandate under a different X-Account-Id is answered 404, not 403, so the caller cannot confirm that a resource exists elsewhere.

Required string length: 29

Pattern: ^SC[0-9A-Z]{8}[0-9]{8}[a-zA-Z0-9]{11}$

Exemplo:

"SC12345678202608276bca619e690"

Resposta

200

application/json

The authorization request, in any state.

authorizationRequestId · string · obrigatório

Payer-side request identifier. It is the counterparty idSolicRec on journey 1 and a local identifier on QR journeys; always pass this exact value to the decision route.

Exemplo:

"SC12345678202608276bca619e690"

expiresAt · string<date-time> · obrigatório

Decision deadline. At most 30 days from creation (Guia v1.2 §3.2).

Exemplo:

"2026-09-26T19:18:38Z"

receivedAt · string<date-time> · obrigatório

When this end received the request.

Exemplo:

"2026-08-27T19:18:38Z"

recurrenceId · string · obrigatório

BACEN idRec of the recurrence the request covers.

Exemplo:

"RR12345678202608276bca619e690"

status · string · obrigatório

Status the request currently holds -- pending on the listing surface, any lifecycle status on the individual GET. A pending request reads RECEIVED: it is the status this end records when a request reaches it, and the only pending status it writes.

Exemplo:

"RECEIVED"

recurrence · object · obrigatório

Terms of the recurrence the request covers: the receiver, periodicity, dates, amount shape and retry policy the payer is deciding on. The CURRENT snapshot this institution holds for the recurrence (see snapshotVersion).

Show child attributes

decidedAt · string<date-time>

When the payer decided. Absent while the request is still pending.

Exemplo:

"2026-08-27T19:20:00Z"

journey · string

Authorization journey that produced the request: JOURNEY_1 for a request the receiving PSP sent through the messaging callback (pain.009), JOURNEY_2 to JOURNEY_4 for one created from a scanned QR Code.

Exemplo:

"JOURNEY_2"

rejectionReason · enum<string>

Motive the payer gave when refusing the recurrence. Present only when status is REJECTED.

Opções disponíveis: NotRecognizedByDebtor, RejectedByDebtor

Exemplo:

"NotRecognizedByDebtor"