Re-prove a strong credential
Confirms a sensitive action by password (and a code, if two-factor is on). A passkey instead re-asserts through /api/auth/passkey/verify-authentication. Either one starts a short grace window during which a gated action proceeds without being asked again.
apiKeyAuthorizationBearer <token>An API key from the Developers page. rhq_test_ keys reach the sandbox, rhq_live_ keys the live side.
application/json- body
password*string1 <= lengthcode?string1 <= lengthbackupCode?string1 <= lengthSuccess
application/json- response
Success
ok*truetrueexpiresAt*stringcurl -X POST "https://example.com/v1/step-up" \ -H "Content-Type: application/json" \ -d '{ "password": "string" }'{ "ok": true, "expiresAt": "string"}Apply a tax rules preset POST
A one-click starting point for the tax rules engine (issue #341), built from your home country and home state or region (`PATCH /account/billing`); set those first. Replaces the whole rule list. A starting point, not tax advice: check it with whoever handles your tax before relying on it.
Get the balance GET
What you can spend now, and what is reserved for orders in progress.