Charge the saved card to top up prepaid balance

Charges the org's default saved card off-session. The balance credit is applied by the payment_intent.succeeded webhook (the authoritative money signal), not this response: poll the balance after success.

Command line

The orl CLI wraps this endpoint:

orl billing deposit create --amount-cents <amount-cents>

Authorization

apiKey

AuthorizationBearer <token>

OpenRelay API key. Send it as Authorization: Bearer or_… (legacy vl_… keys still work).

In: header

Path Parameters

orgId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

amountCents*integer

Amount to charge the saved card, in cents (bounds $10-$500).

idempotencyKey?string

Client-generated id for this logical deposit; reused verbatim on retry so a network/client retry can't double-charge. Optional: the server generates one if absent (then retries won't dedupe).

deviceFingerprint?string

Optional Fingerprint visitor id (see DeviceSignals). Recorded and clustered; never gates the deposit.

Lengthlength <= 128

deviceEventId?string

Optional Fingerprint event id (see DeviceSignals).

Lengthlength <= 128

captchaScore?number

Optional reCAPTCHA v3 score, 0 to 1 (see DeviceSignals). Recorded on the org and copied onto the dispute-evidence record; it never gates the deposit.

Range0 <= value <= 1

captchaBand?string

Optional score band, pass|step_up|step_up_strict (see DeviceSignals). The band's step-up was already satisfied at the dashboard before this request was sent.

Lengthlength <= 32

captchaAction?string

Optional reCAPTCHA action the score was measured for (see DeviceSignals).

Lengthlength <= 64

Response Body

`application/json`

curl -X POST "https://example.com/v1/orgs/string/billing/deposit" \  -H "Content-Type: application/json" \  -d '{    "amountCents": 5000,    "idempotencyKey": "dep-2026-07-02-a1b2c3"  }'

{  "paymentIntentId": "string",  "status": "string",  "clientSecret": "string"}

Charge the saved card to top up prepaid balance

Command line

Authorization

Path Parameters

Request Body

Response Body

200application/json

400application/json

401application/json

403application/json

503application/json

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`