Regenerate a Verification
Invalidates the prior link and inquiry and opens a fresh attempt for the same subject
(reason regenerated). Use when a link may have been forwarded or exposed — the old flow
is dead the moment this returns. Responds 201 with the new attempt and its secret-once
hosted_link.
Authorizations
Per-request DPoP proof JWT (RFC 9449). MUST accompany the Authorization: DPoP <access_token> header on every protected operation. The proof is signed by the merchant's private DPoP key and carries htm, htu, iat, jti, and ath claims.
Headers
Unique key identifying this operation. Sending the same key twice returns the original response instead of creating a duplicate. Keys are retained for 24 hours.
255Path Parameters
Verification attempt ID.
^vrf_[a-zA-Z0-9]+$Response
Fresh attempt opened; prior link invalidated.
One verification attempt. hosted_link is secret-once: present only on the response
that minted it (create / resend / regenerate / re-verify) and never on a read.