# MerchantFlowConfig

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

The merchant's transaction-flow configuration. Today it carries the transaction screening
block, which holds the built-in fraud rules evaluated before the transaction reaches a
processor.

## Fields
- `id` (string(uuid)): Identifier of the flow configuration. Assigned by the platform. (nullable)
- `name` (string): Display name of the flow configuration. Optional and not used for matching. (nullable)
- `screening` ([FraudScreeningConfig](https://devportal.signapay-sbx.winkpg.io/docs/api/models/FraudScreeningConfig.md)): Transaction screening configuration for this merchant. Null or absent leaves every screening rule unconfigured, which screens nothing.
  Fields:
  - `contributors` ([FraudContributors](https://devportal.signapay-sbx.winkpg.io/docs/api/models/FraudContributors.md)): The screening rules evaluated for this merchant. Null or absent leaves every rule unconfigured.
  - `reviewHoldDeadlineMinutes` (integer(int32)): How long, in minutes, a transaction held by one of this merchant's screening rules waits for a reviewer before its deadline passes. Applies to every rule whose action is `HoldForReview`; a hold requested by an external screening provider follows that provider's own setting instead. Null applies the platform default of 4320 minutes (three days). Accepted range 15 to 43200 (30 days). (nullable, min 15, max 43200)
  - `reviewHoldExpiryAction` ([ReviewHoldExpiryAction](https://devportal.signapay-sbx.winkpg.io/docs/api/models/ReviewHoldExpiryAction.md)): What happens to a transaction held by one of this merchant's screening rules when nobody approves or declines it before the deadline. `Decline` declines it, as a reviewer rejection would. `ApproveAndContinue` releases it to authorization and records that the deadline, not a reviewer, approved it. Null applies `Decline`. (nullable)
    Values:
    - `Decline`: Decline the held transaction when the deadline passes, exactly as a reviewer rejection would. The default.
    - `ApproveAndContinue`: Release the held transaction to authorization when the deadline passes, recording that it was approved by expiry rather than by a reviewer.
  - `cardTestingBackstopOverride` ([CardTestingBackstopOverride](https://devportal.signapay-sbx.winkpg.io/docs/api/models/CardTestingBackstopOverride.md)): Lowers the platform card-testing protection for this merchant. `Observe` keeps detection and alerting but never refuses or stops one of this merchant's transactions; `Off` turns the protection off for this merchant. Null follows the platform setting. The override can only lower the protection, never raise it. Changing it requires a dedicated administrator permission. (nullable)
    Values:
    - `Off`: Count nothing for this merchant: no window, no detection, no enforcement.
    - `Observe`: Count and detect for this merchant, and alert on an attack, but never refuse or stop one of its transactions, even when the platform enforces.

## See also

- [All documentation](https://devportal.signapay-sbx.winkpg.io/llms.txt): the machine-readable index of every public page on this site.