POST to the mandate by id, takes no body (dashboard callers pass dashboard_user_id), and returns the updated mandate.
POST /v1/mandates/{id}/pause · /resume · /cancel — control-plane operations.
Endpoints
Path parameters
string
required
The mandate id.
Response
Returns the updated mandate object (see List Mandates).Notes
- Legal transitions only: pause from
active, resume frompaused, cancel fromactiveorpaused. Any other transition returns409 MANDATE_INVALID_TRANSITION. cancelis terminal and local to Prava — it revokes the authorization so no further charges can be minted. Past charges are unaffected.- Only the mandate’s owner can act on it — a mismatched caller gets
403 MANDATE_FORBIDDEN. - The same actions are available to owners in the dashboard at pay.prava.space and to agents via
prava mandate cancel/ the MCP tools.