Confirm a draft sales order or invoice into the OPEN state

curl --request POST \
  --url https://api.arcuserp.com/v1/orders/{id}/confirm \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "acknowledge_delinquency": true,
  "acknowledge_reason": "Customer confirmed ACH payment of overdue invoices en route; GM approved.",
  "override_credit_hold": true,
  "override_reason": "GM John approved by phone; card on file pre-charged for full balance.",
  "send_email": true
}
'

import requests

url = "https://api.arcuserp.com/v1/orders/{id}/confirm"

payload = {
    "acknowledge_delinquency": True,
    "acknowledge_reason": "Customer confirmed ACH payment of overdue invoices en route; GM approved.",
    "override_credit_hold": True,
    "override_reason": "GM John approved by phone; card on file pre-charged for full balance.",
    "send_email": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    acknowledge_delinquency: true,
    acknowledge_reason: 'Customer confirmed ACH payment of overdue invoices en route; GM approved.',
    override_credit_hold: true,
    override_reason: 'GM John approved by phone; card on file pre-charged for full balance.',
    send_email: true
  })
};

fetch('https://api.arcuserp.com/v1/orders/{id}/confirm', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.arcuserp.com/v1/orders/{id}/confirm",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'acknowledge_delinquency' => true,
    'acknowledge_reason' => 'Customer confirmed ACH payment of overdue invoices en route; GM approved.',
    'override_credit_hold' => true,
    'override_reason' => 'GM John approved by phone; card on file pre-charged for full balance.',
    'send_email' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.arcuserp.com/v1/orders/{id}/confirm"

	payload := strings.NewReader("{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.arcuserp.com/v1/orders/{id}/confirm")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.arcuserp.com/v1/orders/{id}/confirm")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}"

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "object": "order",
  "entity_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "order_number": "<string>",
  "account_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "location_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "po_number": "<string>",
  "order_date": "2023-11-07T05:31:56Z",
  "due_date": "2023-11-07T05:31:56Z",
  "subtotal": 123,
  "discount_total": 123,
  "shipping_total": 123,
  "tax_total": 123,
  "fee_total": 123,
  "order_total": 123,
  "list_price_total": 123,
  "pricing_savings": 123,
  "amount_paid": 123,
  "balance_due": 123,
  "tax_exempt": true,
  "notes": "<string>",
  "internal_notes": "<string>",
  "invoice_number": "<string>",
  "is_on_hold": true,
  "hold_type": "<string>",
  "ship_complete": true,
  "source_platform": "<string>",
  "external_order_id": "<string>",
  "external_order_number": "<string>",
  "metadata": {},
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z"
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "permission_denied",
  "code": "permission_denied",
  "type": "permission_error",
  "permission_key": "accounts.acknowledge_delinquency",
  "hint": "Acknowledging a delinquent account requires the 'accounts.acknowledge_delinquency' permission. Ask an Owner, Admin, Manager, or Accountant."
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "Order placed on hold",
  "hold": true,
  "hold_type": "credit_limit",
  "reason": "Order exceeds credit limit. Outstanding: $4,200.00 . Limit: $5,000.00 . This order: $850.00",
  "override_permission_key": "accounts.override_credit_hold",
  "override_hint": "A user with accounts.override_credit_hold may push this through by retrying with body.override_credit_hold=true and body.override_reason (min 10 chars)."
}

{
  "error": "delinquency_acknowledge_requires_reason",
  "code": "delinquency_acknowledge_requires_reason",
  "type": "validation_error",
  "hint": "Provide a reason >= 10 characters explaining the acknowledgement.",
  "overdue_count": 3,
  "overdue_amount": 4750,
  "max_days_overdue": 47,
  "acknowledge_permission_key": "accounts.acknowledge_delinquency",
  "acknowledge_hint": "A user with accounts.acknowledge_delinquency may push through by retrying with acknowledge_delinquency=true and acknowledge_reason (min 10 chars).",
  "hold_type": "credit_limit",
  "original_reason": "Order exceeds credit limit. Outstanding: $4,200.00 . Limit: $5,000.00 . This order: $850.00",
  "convert_endpoint": "/orders/0c2a8a8e-8a8a-4a8a-8a8a-8a8a8a8a8a8a/convert"
}

Orders

Confirm a draft sales order or invoice into the OPEN state

Transitions a draft sales order or draft invoice into the OPEN state, runs the approval-threshold + credit-hold + delinquency gates, and triggers inventory allocation for every line item. The order must have at least one line item and a valid shipping address. Confirmation generates an order-confirmed activity log entry and optionally sends a confirmation email when send_email: true is passed.

Quotes cannot be confirmed. A document with document_type='quote' returns HTTP 422 with code: 'quote_must_convert_before_confirm'. The canonical quote-to-sales-order doorway is POST /orders/{id}/convert; after conversion, call /confirm on the resulting sales order. This mirrors NetSuite Estimate, Acumatica Sales Quote, Odoo Quotation, and QuickBooks Estimate behavior (quotes do not commit inventory).

Credit hold override (NEW-GAP-CS-CREDIT-HOLD-OVERRIDE-WITH-PERMISSION-AND-AUDIT, 2026-05-16). When an account is on credit hold (manual flag or credit-limit exceeded), confirmOrder normally returns HTTP 409 with error: 'Order placed on hold' and places the order in is_on_hold = true. An operator with the accounts.override_credit_hold permission can push the order through the gate by passing override_credit_hold: true AND override_reason (minimum 10 chars after trim) in the request body. The override is audit-logged via three channels: (1) activity_log.action = 'order_credit_hold_overridden', (2) order_timeline entry, and (3) order.credit_hold_overridden realtime broadcast. The order also records orders.credit_hold_override_at / _by / _reason / _type for reporting. Industry: NetSuite “Override Credit Hold” right, Acumatica SO.OverrideHold, Brightpearl override-credit-limit prompt.

Delinquency acknowledgement (NEW-GAP-DELINQUENCY-ACKNOWLEDGE-FE-MODAL-AND-OPENAPI, 2026-05-18). When an account has overdue invoices (but is not on hard credit hold), confirmOrder returns HTTP 422 requires_delinquency_acknowledgment with overdue_count, overdue_amount, and max_days_overdue. An operator with the accounts.acknowledge_delinquency permission can push through by retrying with acknowledge_delinquency: true AND acknowledge_reason (min 10 chars after trim). The acknowledgement is audit-logged via three channels: (1) activity_log.action = 'order_delinquency_acknowledged', (2) order_timeline entry, and (3) order.delinquency_acknowledged realtime broadcast. The order records orders.delinquency_acknowledged_at / _by / _reason for the controller report surface. Industry: NetSuite Customer Has Past Due Invoices override, Acumatica Past Due workflow override Modal, Brightpearl override-credit-limit prompt with reason field.

Requires orders:write scope. Override path additionally requires the accounts.override_credit_hold permission. Delinquency path requires the accounts.acknowledge_delinquency permission (returns HTTP 403 permission_denied if the API key holder lacks either).

POST

orders

{id}

confirm

Confirm a draft sales order or invoice into the OPEN state

curl --request POST \
  --url https://api.arcuserp.com/v1/orders/{id}/confirm \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "acknowledge_delinquency": true,
  "acknowledge_reason": "Customer confirmed ACH payment of overdue invoices en route; GM approved.",
  "override_credit_hold": true,
  "override_reason": "GM John approved by phone; card on file pre-charged for full balance.",
  "send_email": true
}
'

import requests

url = "https://api.arcuserp.com/v1/orders/{id}/confirm"

payload = {
    "acknowledge_delinquency": True,
    "acknowledge_reason": "Customer confirmed ACH payment of overdue invoices en route; GM approved.",
    "override_credit_hold": True,
    "override_reason": "GM John approved by phone; card on file pre-charged for full balance.",
    "send_email": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    acknowledge_delinquency: true,
    acknowledge_reason: 'Customer confirmed ACH payment of overdue invoices en route; GM approved.',
    override_credit_hold: true,
    override_reason: 'GM John approved by phone; card on file pre-charged for full balance.',
    send_email: true
  })
};

fetch('https://api.arcuserp.com/v1/orders/{id}/confirm', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.arcuserp.com/v1/orders/{id}/confirm",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'acknowledge_delinquency' => true,
    'acknowledge_reason' => 'Customer confirmed ACH payment of overdue invoices en route; GM approved.',
    'override_credit_hold' => true,
    'override_reason' => 'GM John approved by phone; card on file pre-charged for full balance.',
    'send_email' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.arcuserp.com/v1/orders/{id}/confirm"

	payload := strings.NewReader("{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.arcuserp.com/v1/orders/{id}/confirm")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.arcuserp.com/v1/orders/{id}/confirm")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"acknowledge_delinquency\": true,\n  \"acknowledge_reason\": \"Customer confirmed ACH payment of overdue invoices en route; GM approved.\",\n  \"override_credit_hold\": true,\n  \"override_reason\": \"GM John approved by phone; card on file pre-charged for full balance.\",\n  \"send_email\": true\n}"

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "object": "order",
  "entity_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "order_number": "<string>",
  "account_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "location_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "po_number": "<string>",
  "order_date": "2023-11-07T05:31:56Z",
  "due_date": "2023-11-07T05:31:56Z",
  "subtotal": 123,
  "discount_total": 123,
  "shipping_total": 123,
  "tax_total": 123,
  "fee_total": 123,
  "order_total": 123,
  "list_price_total": 123,
  "pricing_savings": 123,
  "amount_paid": 123,
  "balance_due": 123,
  "tax_exempt": true,
  "notes": "<string>",
  "internal_notes": "<string>",
  "invoice_number": "<string>",
  "is_on_hold": true,
  "hold_type": "<string>",
  "ship_complete": true,
  "source_platform": "<string>",
  "external_order_id": "<string>",
  "external_order_number": "<string>",
  "metadata": {},
  "created_at": "2023-11-07T05:31:56Z",
  "updated_at": "2023-11-07T05:31:56Z"
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "permission_denied",
  "code": "permission_denied",
  "type": "permission_error",
  "permission_key": "accounts.acknowledge_delinquency",
  "hint": "Acknowledging a delinquent account requires the 'accounts.acknowledge_delinquency' permission. Ask an Owner, Admin, Manager, or Accountant."
}

{
  "error": "not_found",
  "code": "not_found",
  "type": "not_found",
  "hint": "The requested order does not exist or does not belong to this entity.",
  "param": "expand[0]",
  "required": "accounts:read",
  "request_id": "req_abc123"
}

{
  "error": "Order placed on hold",
  "hold": true,
  "hold_type": "credit_limit",
  "reason": "Order exceeds credit limit. Outstanding: $4,200.00 . Limit: $5,000.00 . This order: $850.00",
  "override_permission_key": "accounts.override_credit_hold",
  "override_hint": "A user with accounts.override_credit_hold may push this through by retrying with body.override_credit_hold=true and body.override_reason (min 10 chars)."
}

{
  "error": "delinquency_acknowledge_requires_reason",
  "code": "delinquency_acknowledge_requires_reason",
  "type": "validation_error",
  "hint": "Provide a reason >= 10 characters explaining the acknowledgement.",
  "overdue_count": 3,
  "overdue_amount": 4750,
  "max_days_overdue": 47,
  "acknowledge_permission_key": "accounts.acknowledge_delinquency",
  "acknowledge_hint": "A user with accounts.acknowledge_delinquency may push through by retrying with acknowledge_delinquency=true and acknowledge_reason (min 10 chars).",
  "hold_type": "credit_limit",
  "original_reason": "Order exceeds credit limit. Outstanding: $4,200.00 . Limit: $5,000.00 . This order: $850.00",
  "convert_endpoint": "/orders/0c2a8a8e-8a8a-4a8a-8a8a-8a8a8a8a8a8a/convert"
}

Authorizations

Authorization

string

header

required

API key issued per entity via Settings > Developers > API Keys. Each key carries scopes (e.g. orders:read, products:write). Bearer token format: Authorization: Bearer ark_live_ent_Test keys use ark_test_ent_. Both are issued per entity via Settings > Developers > API Keys.

Headers

Idempotency-Key

string

Client-generated unique key for idempotent POST/PATCH/DELETE operations. Alias for the Idempotency parameter. Max 255 chars. On retry with the same key, the original response is returned without re-executing the operation. Keys expire after 24 hours.

Maximum string length: 255

Path Parameters

string<uuid>

required

Body

application/json

acknowledge_delinquency

boolean

Set to true to bypass the delinquency soft-warning (account has overdue invoices but is not on manual / credit-limit hold). Must be paired with acknowledge_reason (min 10 chars after trim). Requires accounts.acknowledge_delinquency permission (HTTP 403 if denied). Industry: NetSuite Customer Past-Due Override, Acumatica Past Due workflow override, Brightpearl override-credit-limit prompt.

acknowledge_reason

string

Operator-typed reason for proceeding despite delinquency. Required when acknowledge_delinquency: true. Minimum 10 characters after trim. Stored in orders.delinquency_acknowledged_reason and emitted in the order_timeline + activity_log row so AR teams can review via the controller audit report surface. Returns HTTP 422 delinquency_acknowledge_requires_reason if omitted or too short.

Minimum string length: 10

Example:

"Customer confirmed ACH payment of overdue invoices en route; GM approved."

override_credit_hold

boolean

Set to true to push an on-hold order through the credit gate WITHOUT placing it on hold. Requires accounts.override_credit_hold permission AND a paired override_reason (min 10 chars after trim). Audit-logged via activity_log + order_timeline + realtime broadcast.

override_reason

string

Operator-typed reason for the credit-hold override. Required when override_credit_hold: true. Stored in orders.credit_hold_override_reason + audit log metadata.

Minimum string length: 10

Example:

"GM John approved by phone; card on file pre-charged for full balance."

send_email

boolean

Send the order confirmation email on success.

Response

Confirmed order

An Arcus ERP order document. One table holds quotes, sales_orders, invoices, returns, and purchase_orders -- always filter by document_type. entity_id is always from the API key (Layer 1 isolation).

string<uuid>

object

enum<string>

Available options:

order

entity_id

string<uuid>

read-only

order_number

string

read-only

document_type

enum<string>

Available options:

quote,

sales_order,

invoice,

return,

purchase_order

order_status

enum<string>

Available options:

draft,

confirmed,

partially_fulfilled,

fulfilled,

cancelled,

voided,

awaiting_ach_clearance,

on_hold

payment_status

enum<string>

Available options:

unpaid,

partially_paid,

paid,

overpaid,

refunded,

partially_refunded,

voided

fulfillment_status

enum<string>

Available options:

unfulfilled,

partially_fulfilled,

fulfilled

account_id

string<uuid> | null

location_id

string<uuid> | null

po_number

string | null

order_date

string<date-time> | null

due_date

string<date-time> | null

subtotal

number

discount_total

number

shipping_total

number

tax_total

number

fee_total

number

order_total

number

list_price_total

number

read-only

Derived (display-only): SUM(list_price * qty) over non-kit lines. The gross baseline of the gross-to-net bridge (List price minus pricing_savings equals subtotal). Never part of order_total.

pricing_savings

number

read-only

Derived (display-only): SUM(pricing_rule_adjustment * qty) over non-kit lines (positive magnitude). Per-unit pricing-rule savings already baked into subtotal via sell_rate (ASC 606 transaction price); shown as an informational List-to-Subtotal bridge, never subtracted from order_total.

amount_paid

number

read-only

SSOT: utils/ar-helpers.mjs::updateARBalance. Do not write directly.

balance_due

number

read-only

tax_exempt

boolean

delivery_option

enum<string>

Available options:

ship,

pick_up,

local_delivery

notes

string | null

internal_notes

string | null

invoice_number

string | null

read-only

invoice_type

enum<string> | null

Available options:

order,

manual,

proforma,

correction

is_on_hold

boolean

read-only

hold_type

string | null

read-only

ship_complete

boolean

source_platform

string | null

external_order_id

string | null

external_order_number

string | null

metadata

object | null

created_at

string<date-time>

read-only

updated_at

string<date-time>

read-only

Update order fields (14-field allowlist + migration-gated is_historical_import; totals/status/entity_id reject 400)Preview the multi-warehouse sourcing plan for an order (no reservation)