1
Pre-authorise
POST /preauth with the same card fields as a charge (or a card_token), plus currency, amount and reference.pre_authid — it’s the handle for the next step. This response has no link field.2
Capture
POST /charge with pre_authid, amount, currency and a reference. The amount can be less than the hold.charge object, exactly as for Charging via the API, and a webhook follows.3
Or reverse
POST /reverse with the pre-authorisation’s reference releases the hold.Pre-authorisation is card-only. Holds are released by the card issuer after a period if neither captured nor reversed; the exact window depends on the issuer, so reverse explicitly when you know you won’t capture.

