Cancel an RMA (authorized/expected -> cancelled)
Authorization: requires returns:write API-key scope AND the per-user
returns.cancel permission (NEW key introduced by SoD parity sweep 2026-05-16;
SoD-split sister to purchasing.cancel). Defaults: owner/admin/manager/
accountant=TRUE; staff/warehouse/sales/auditor/viewer=FALSE.
Cancels an RMA in draft or authorized status. Sets status = cancelled and
releases any inventory holds. Returns 409 if the return has already been received
or closed. Idempotent: calling cancel on an already-cancelled return returns 200.
Requires returns:write scope.
Authorizations
API key issued per entity via Settings > Developers > API Keys.
Each key carries scopes (e.g. orders:read, products:write).
Bearer token format: Authorization: Bearer ark_live_ent_Test keys use ark_test_ent_. Both are issued per entity
via Settings > Developers > API Keys.
Headers
Client-generated unique key for idempotent POST/PATCH/DELETE operations. Alias for the Idempotency parameter. Max 255 chars. On retry with the same key, the original response is returned without re-executing the operation. Keys expire after 24 hours.
255Path Parameters
Body
Response
RMA cancelled

