Run conformance verification against the store's own endpoints

Runs the conformance suite — profile reachable, signature roundtrip, negotiation handshake, catalog lookup — against the store’s own serving-plane endpoints and applies the result to the activation state machine. No external party is involved, which is what makes verified reachable without any surface enrollment.

A run that finds failures is a successful request reporting them, not an error.

POST/stores/{store_id}/activation/verify

Authorization

AuthorizationBearer token (JWT) · headerrequired

JWT issued by the external IdP via the OAuth 2.0 authorization-code flow (Kinde in production; a simulator in test). The client obtains it and sends it as a Bearer token on every authenticated call. Sarvex's services verify it — issuer, audience, signature (IdP JWKS), expiry — and read identity and tenant from its claims. Sarvex does not issue or revoke these tokens. merchant_id/store_id are read from the verified claims (and the merchant→store mapping), never from the URL. The operator scope is required for /operator/*. Operators acting on a specific merchant pass the X-Operate-As header, which is recorded in the audit log.

Path parameters

store_idstringrequired

A store the caller's merchant owns. Authorized server-side against the principal; not a free-form tenant selector.

Responses

200

Verification report and the state the store ended in.

passedbooleanrequired

ucp_stateucp_staterequired

The store's own UCP activation lifecycle (internal/planes/control/activation). No value here references an agent surface — active means the store's endpoints are live and monitored, not that any distribution partner has approved it.

Allowed:draftconnector_linkedprofile_publishedverifiedactivesuspended

checksverification_check[]required

Show properties

Array of verification_check

check_idstringrequired

passedbooleanrequired

detailstring

ran_atstring<date-time>required

404

Resource not found within the caller's tenant.

errorobjectrequired

Show properties

codestringrequired

messagestringrequired

detailsobject | null

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer token (JWT)Remember on this deviceInclude my values in samples

Parameters

store_idpath*A store the caller's merchant owns. Authorized server-side against the principal; not a free-form tenant selector.

Request

curl -X POST "https://api.sarvex.example.com/v1/stores/string/activation/verify" \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch("https://api.sarvex.example.com/v1/stores/string/activation/verify", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN"
  }
});

import requests

response = requests.post(
    "https://api.sarvex.example.com/v1/stores/string/activation/verify",
    headers={
        "Authorization": "Bearer YOUR_TOKEN"
    },
)

Response

{
  "passed": true,
  "ucp_state": "draft",
  "checks": [
    {
      "check_id": "string",
      "passed": true,
      "detail": "string"
    }
  ],
  "ran_at": "2019-08-24T14:15:22Z"
}

{
  "error": {
    "code": "string",
    "message": "string",
    "details": {}
  }
}