> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.crisscross.money/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.crisscross.money/_mcp/server. # Accept a quote POST https://api.crisscross.money/v1/toc/quotes/{quoteId}/accept Content-Type: application/json Accepts a quote and locks in the exchange rate. The quote must still be active (not yet expired), and each quote can only be accepted once. Reference: https://docs.crisscross.money/api-reference/toc-api/quotes/accept-quote ## Authentication - `Authorization` header (bearer token, required) — Token obtained via the login flow. ## Request ### Path parameters - `quoteId` (string, required) ### Body (application/json) This endpoint expects a TocAcceptQuoteRequest. - `beneficiaryAccountId` (string, required) — Prefixed UUID of the TOC beneficiary account to credit. - `bopCategoryId` (string, required) — Prefixed UUID of the BOP category for SARB reporting. - `icn` (string, required) — Investment Certificate Number or Mandate Reference Number. - `tdn` (string, optional) — Tax Directive Number (optional). ## Response ### 201 Order created successfully. - `orderId` (string, required) - `quoteId` (string, required) - `status` (enum, required) - Allowed values: `under_review`, `processing`, `completed` - `sellCurrency` (string, required) - `buyCurrency` (string, required) - `sellAmount` (string, required) - `buyAmount` (string, required) - `rate` (string, required) - `fee` (string, required) - `totalSellAmount` (string, required) — Total ZAR debit. `sellAmount + fee`. - `beneficiaryAccountId` (string, required) - `bopCategoryId` (string, required) - `icn` (string, required) - `createdAt` (datetime, required) - `updatedAt` (datetime, required) - `tdn` (string, optional, nullable) ## Errors ### 400 Bad Request Error Bad request — validation or malformed request. - `error` (ErrorEnvelopeError, required) ### 401 Unauthorized Error Unauthorized — missing or invalid token. - `error` (ErrorEnvelopeError, required) ### 404 Not Found Error Quote not found. - `error` (ErrorEnvelopeError, required) ### 409 Conflict Error The quote cannot be accepted. Possible error codes: `QUOTE_EXPIRED` — the quote's validity window has passed; `QUOTE_ALREADY_ACCEPTED` — the quote has already been accepted. - `error` (ErrorEnvelopeError, required) ### 422 Unprocessable Entity Error Validation failure. Possible error codes: `BENEFICIARY_NOT_FOUND`, `CURRENCY_MISMATCH`, `BOP_CATEGORY_NOT_FOUND`, `INSUFFICIENT_BALANCE`. - `error` (ErrorEnvelopeError, required) ## Types ### ErrorEnvelopeError - `code` (string, required) — Stable machine-readable identifier. Branch on this, not `message`. Common values: `INVALID_REQUEST`, `UNAUTHENTICATED`, `FORBIDDEN`, `RATE_NOT_AVAILABLE`, `RATE_NOT_FOUND`, `CURRENCY_NOT_SUPPORTED`, `CURRENCY_NOT_PROVISIONED`, `QUOTE_NOT_FOUND`, `QUOTE_EXPIRED`, `QUOTE_NOT_EXECUTABLE`, `ORDER_NOT_FOUND`, `DEPOSIT_NOT_FOUND`, `BENEFICIARY_NOT_FOUND`, `BENEFICIARY_NOT_ACTIVE`, `CURRENCY_MISMATCH`, `INSUFFICIENT_BALANCE`, `AMOUNT_OUT_OF_RANGE`, `WITHDRAWAL_NOT_FOUND`, `WITHDRAWAL_NOT_CANCELLABLE`, `IDEMPOTENCY_CONFLICT`, `INVALID_CURSOR`. - `message` (string, required) — Human-readable description. Do not parse. - `details` (map from string to any, optional) — Structured context about the error. Shape varies per code. ## Examples **Request** ```json { "beneficiaryAccountId": "acc_550e8400-e29b-41d4-a716-446655440000", "bopCategoryId": "bop_550e8400-e29b-41d4-a716-446655440000", "icn": "INV123456" } ``` **Response** ```json { "orderId": "ord_550e8400-e29b-41d4-a716-446655440000", "quoteId": "qut_550e8400-e29b-41d4-a716-446655440000", "status": "processing", "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00", "buyAmount": "5400.00", "rate": "0.054", "fee": "850.00", "totalSellAmount": "100850.00", "beneficiaryAccountId": "acc_550e8400-e29b-41d4-a716-446655440000", "bopCategoryId": "bop_550e8400-e29b-41d4-a716-446655440000", "icn": "INV123456", "createdAt": "2026-05-18T14:15:55Z", "updatedAt": "2026-05-18T14:15:55Z", "tdn": null } ``` **SDK Code** ```python Quotes_acceptQuote_example import requests url = "https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept" payload = { "beneficiaryAccountId": "acc_550e8400-e29b-41d4-a716-446655440000", "bopCategoryId": "bop_550e8400-e29b-41d4-a716-446655440000", "icn": "INV123456" } headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.post(url, json=payload, headers=headers) print(response.json()) ``` ```javascript Quotes_acceptQuote_example const url = 'https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept'; const options = { method: 'POST', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{"beneficiaryAccountId":"acc_550e8400-e29b-41d4-a716-446655440000","bopCategoryId":"bop_550e8400-e29b-41d4-a716-446655440000","icn":"INV123456"}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Quotes_acceptQuote_example package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept" payload := strings.NewReader("{\n \"beneficiaryAccountId\": \"acc_550e8400-e29b-41d4-a716-446655440000\",\n \"bopCategoryId\": \"bop_550e8400-e29b-41d4-a716-446655440000\",\n \"icn\": \"INV123456\"\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Quotes_acceptQuote_example require 'uri' require 'net/http' url = URI("https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"beneficiaryAccountId\": \"acc_550e8400-e29b-41d4-a716-446655440000\",\n \"bopCategoryId\": \"bop_550e8400-e29b-41d4-a716-446655440000\",\n \"icn\": \"INV123456\"\n}" response = http.request(request) puts response.read_body ``` ```java Quotes_acceptQuote_example import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"beneficiaryAccountId\": \"acc_550e8400-e29b-41d4-a716-446655440000\",\n \"bopCategoryId\": \"bop_550e8400-e29b-41d4-a716-446655440000\",\n \"icn\": \"INV123456\"\n}") .asString(); ``` ```php Quotes_acceptQuote_example request('POST', 'https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept', [ 'body' => '{ "beneficiaryAccountId": "acc_550e8400-e29b-41d4-a716-446655440000", "bopCategoryId": "bop_550e8400-e29b-41d4-a716-446655440000", "icn": "INV123456" }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp Quotes_acceptQuote_example using RestSharp; var client = new RestClient("https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept"); var request = new RestRequest(Method.POST); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"beneficiaryAccountId\": \"acc_550e8400-e29b-41d4-a716-446655440000\",\n \"bopCategoryId\": \"bop_550e8400-e29b-41d4-a716-446655440000\",\n \"icn\": \"INV123456\"\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift Quotes_acceptQuote_example import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [ "beneficiaryAccountId": "acc_550e8400-e29b-41d4-a716-446655440000", "bopCategoryId": "bop_550e8400-e29b-41d4-a716-446655440000", "icn": "INV123456" ] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.crisscross.money/v1/toc/quotes/qut_550e8400-e29b-41d4-a716-446655440000/accept")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```