Preview

Complete credential reference

POST
/credential-owners/{ownerAccountID}/credential-references/{credentialReferenceID}/complete

Complete a pending reference with the client ID issued by the receiver and its token endpoint configuration. You can set audience or resource, but not both. A revoked reference cannot be completed.

Returns 204 when completed, 400 when the request is invalid, 401 when your credentials are missing or invalid, 403 when the authenticated caller is not the owner account, 404 when the owner or reference is not found, and 409 when the reference is revoked or the owner account is both an FI and an integrator.

Auth: API key or bearer token. Requires the moov-money-config.write scope on the owner account.

Request
cURL
curl -X POST https://api.moov.money/credential-owners/{ownerAccountID}/credential-references/{credentialReferenceID}/complete \
  -u "$MOOV_API_KEY_ID:$MOOV_API_KEY_SECRET" \
  -H "X-Moov-Version: v2026.10.00"
Responses
204 400 401 403 404 409
The request completed successfully, no content.
Malformed request: the body or headers failed validation.
Response body application/problem+json
RFC 9457 Problem Details error body, served as application/problem+json. From v2026.10.00, every error response that has a body uses this schema.

type

string required
URI that tells you which problem occurred. Branch on this value; it never changes. Moov problem types look like https://api.moov.money/errors#<code> (for example invalid-request, idempotency-key-reused, or idempotency-request-in-progress). Treat the value as an opaque constant and do not fetch it. about:blank means the HTTP status code says everything there is to know.

title

string required
Short human-readable name of the problem type. Fixed per type; defaults to the HTTP status text.

status

integer<int32> required
The HTTP status code of this response.

detail

string
Human-readable explanation of this specific occurrence.

instance

string
URI reference that identifies this specific occurrence.

errors

array<object>
The request-body fields that failed validation. Present on validation errors only.
Show child attributes

errors[]

pointer

string required
RFC 6901 JSON Pointer to the field, using the public JSON field names. If the field is missing, the pointer shows where it belongs.

detail

string required
What is wrong with the field.
Authentication missing, invalid, or insufficient.
Authentication present but the action is forbidden for this principal/claim.
The requested resource was not found.
The request conflicts with the current state of the target resource.
Response body application/problem+json
RFC 9457 Problem Details error body, served as application/problem+json. From v2026.10.00, every error response that has a body uses this schema.

type

string required
URI that tells you which problem occurred. Branch on this value; it never changes. Moov problem types look like https://api.moov.money/errors#<code> (for example invalid-request, idempotency-key-reused, or idempotency-request-in-progress). Treat the value as an opaque constant and do not fetch it. about:blank means the HTTP status code says everything there is to know.

title

string required
Short human-readable name of the problem type. Fixed per type; defaults to the HTTP status text.

status

integer<int32> required
The HTTP status code of this response.

detail

string
Human-readable explanation of this specific occurrence.

instance

string
URI reference that identifies this specific occurrence.

errors

array<object>
The request-body fields that failed validation. Present on validation errors only.
Show child attributes

errors[]

pointer

string required
RFC 6901 JSON Pointer to the field, using the public JSON field names. If the field is missing, the pointer shows where it belongs.

detail

string required
What is wrong with the field.

Headers

X-Moov-Version

string
Set this header to the API version being targeted (e.g. v2026.10.00). When omitted, the server applies its default version.

Path parameters

ownerAccountID

string required
Moov account ID.

credentialReferenceID

string required
Identifier assigned to a credential reference.

Request

application/json
Complete a pending credential reference with the receiver-issued client configuration.

clientID

string required
Client ID issued by the receiver after you register the jwksURL.

tokenURL

string<uri> required
Token endpoint URL approved for your owner account.

scopes

array<string>
Scopes to request when Moov Money obtains a token.

audience

string
Audience for the token request. Do not set this together with resource.

resource

string
Resource indicator for the token request. Do not set this together with audience.