Skip to main content

List punchout authentication refusals

GET 
/punchout/auth-refusals

Per-day counters of inbound cXML requests refused before authentication succeeded: an unknown or revoked shared secret, a secret presented at another tenant's path, a deactivated connection, a buyer identity that does not match, a document that would not parse, and the endpoint's own rate limit. These requests produce no punchout document, because no tenant is trusted at the point they are refused, so this is the only record of them. It carries no source address, no presented secret and no request body.

Request​

Responses​

OK