Retrieve a confirmation

See what a confirmation code stands for and how far it has got: pending, executing, completed, failed, expired or cancelled.

GET

/confirmations/{code}LIVE

No scope of its ownConnected apps only

Connected apps only

Confirmations belong to the app that staged them. A partner credential never has one, and gets CONFIRMATION_NOT_FOUND.

Path parameter

REQUIRED

codestring

The cnf_ code a connected app’s write returned. URL-encode it as a single path segment.

Response fields

200 OK

Fields returned in data. Reading a pending code past its expiry marks it expired.

confirmation.actionstring

bid.place, bid.update, bid.cancel, bid.renew, bid.buy, offer.list, offer.update, offer.remove, offer.sell, inbond_address.add or inbond_address.remove.

confirmation.statusstring

pending, executing, completed, failed, expired or cancelled.

confirmation.previewobject

The preview the customer was shown when it was staged.

confirmation.expires_atdatetime | null

RFC 3339 UTC.

confirmation.resultobject · completed only

What the instruction did: the same payload confirming it returned.

confirmation.errorobject · failed only

code and message of the refusal.

Errors

A code that is unknown or was staged by another app, customer or market returns CONFIRMATION_NOT_FOUND / 404. Missing or invalid credentials return AUTH_INVALID_CREDENTIALS / 401. View all error codes →

UP NEXT Confirm an instruction

REQUEST EXAMPLE Choose your language

confirmation.php

<?php

$baseUrl = 'https://us.cruworldwine.com/api/v1';
$code = 'cnf_5DT4rt0U-KyEjnQUzHPTGKw86dNTZ8uZud_zQFdTa-k';

$curl = curl_init($baseUrl . '/confirmations/' . rawurlencode($code));
curl_setopt_array($curl, [
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('CRU_ACCESS_TOKEN'),
        'Accept: application/json',
    ],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_FOLLOWLOCATION => false,
    CURLOPT_TIMEOUT => 30,
]);

$payload = json_decode(curl_exec($curl), true);
if (($payload['status'] ?? null) !== 'OK') {
    throw new RuntimeException($payload['errors'][0]['code'] ?? 'Unexpected response');
}
print_r($payload['data']);

RESPONSE EXAMPLE application/json

{
  "status": "OK",
  "message": "Instruction retrieved successfully",
  "meta": {
    "version": "1.0",
    "timestamp": "2026-10-19T10:10:55Z",
    "request_id": "6b183f2425c81699f1f3d3e5"
  },
  "data": {
    "confirmation": {
      "action": "bid.place",
      "status": "pending",
      "preview": {
        "summary": "Bid GBP 1,650.50 per unit for 1 x Lafite Rothschild 2024 (6x75cl) - GBP 1,650.50 in total, live for 90 days. If a seller fills it, you pay the way any matched bid on Cru is paid: from your account credit first, then on invoice terms or by your saved card.",
        "lwin18": "101187220240600750",
        "wine_name": "Lafite Rothschild 2024 (6x75cl)",
        "quantity": 1,
        "price": 1650.5,
        "total": 1650.5,
        "currency": "GBP",
        "expires_on": "2027-01-17",
        "local_only": false,
        "auto_transfer": false,
        "client_ref": "PO-2026-0193",
        "allowance_remaining": 48349.5
      },
      "expires_at": "2026-10-19T10:25:55Z"
    }
  }
}

Prices are decimal amounts in the market’s currency.
30780.5 GBP = £30,780.50. Learn more ↗

Not testable here. Confirmations need a connected app’s token; the console sends partner credentials.

Documented from the API as built on 15 October 2026.

Retrieve a confirmation

Path parameter

Response fields

Errors

API credentials

Request API access