Balance purchase; real debit
/account/api/v1/orders/createThis operation may change a record, balance or service configuration. Read its scope and notes first. After an uncertain result, query the same operation rather than starting another.
Authorization
| Authorization | Bearer YOUR_ARNPROXY_API_KEY |
|---|---|
| Required permission | purchases |
| Accept | application/json |
| Content-Type | application/json |
| Idempotency-Key | 16–100 letters, digits, _ or -. Persist and reuse the same value for the same operation. |
Parameters
| Name | Type | Description |
|---|---|---|
Idempotency-Key | string | 16–100 letters/digits/_/-. Keep the same value for the operation/status; do not reuse with a different body. |
product_id | integer | Product ID from products; 1–2147483647. |
lines | object[] | 1–20 distinct location lines for one product. No duplicate location_id; at most 100000 proxies in total. |
lines[].location_id | integer | Location ID from the selected product catalog. |
lines[].time_id | integer | Period ID offered for that location. |
lines[].quantity | integer | 1–100000, also subject to product.minimum_quantity. |
lines[].purpose_id | integer | Send 201 for the current customer purpose workflow. |
lines[].subpurpose_id | integer | Active child purpose under 201; use -1 for Other. |
lines[].other_purpose | string | Required with subpurpose_id=-1: 1–30 UTF-8 characters; otherwise ignored. |
currency | string | TRY or USD from the same quote; must match the account currency. |
expected_total_minor | integer | total_minor from the same quote, as an integer; never decimal money or a string. 1–999999999999. |
terms | boolean | Must be the JSON boolean true for explicit approval, not the string "true". |
promo_code | string | Optional promo, up to 100 bytes. Keep it identical between quote and purchase/renewal. Default: "" |
auth | object | Delivery authentication; defaults to {"mode":"username_password"}. Does not grant primary-credential management. |
auth.mode | string | Required when auth is supplied: username_password or ip. Do not specify a username/password here. |
auth.ip | string | IPv4 required only for auth.mode=ip; omit for username_password. |
Request body
Replace YOUR_/FROM_ placeholders with values from the relevant catalog, quote or scope. Examples leave consent false; only approve a real operation intentionally.
{
"product_id": "FROM_PRODUCTS",
"lines": [
{
"location_id": "FROM_CATALOG",
"time_id": "FROM_CATALOG",
"quantity": 1,
"purpose_id": 201,
"subpurpose_id": "FROM_CATALOG_CHILDREN"
}
],
"currency": "FROM_QUOTE",
"expected_total_minor": "FROM_QUOTE_TOTAL_MINOR",
"promo_code": "",
"terms": false
}Additional usage examples
IDs and prices are illustrative; use real values from the catalog and the same quote. JSON IDs and expected_total_minor must be numbers. Examples deliberately keep terms=false; submit terms=true only after explicit customer approval for the real paid operation.
One product type, two countries
Use up to 20 distinct location_id values under one product_id. Each country creates a separate order record; the linked checkout is handled as one invoice. Quantity discounts are calculated independently per country.
{
"product_id": 5,
"lines": [
{
"location_id": 10,
"time_id": 101,
"quantity": 1,
"purpose_id": 201,
"subpurpose_id": 202
},
{
"location_id": 11,
"time_id": 102,
"quantity": 1,
"purpose_id": 201,
"subpurpose_id": 202
}
],
"currency": "TRY",
"expected_total_minor": 2000,
"promo_code": "",
"terms": false
}The “Other” purpose
For Other, send subpurpose_id=-1 and other_purpose containing 1–30 characters. Other selections do not require other_purpose. purpose_id remains 201.
{
"product_id": 5,
"lines": [
{
"location_id": 10,
"time_id": 101,
"quantity": 1,
"purpose_id": 201,
"subpurpose_id": -1,
"other_purpose": "Custom purpose"
}
],
"currency": "TRY",
"expected_total_minor": 1000,
"promo_code": "",
"terms": false
}Request example
printf 'Authorization: Bearer %s\n' "$ARNPROXY_API_KEY" |
curl --silent --show-error --header @- \
--header 'Accept: application/json' \
--connect-timeout 10 --max-time 30 \
--header 'Idempotency-Key: YOUR_SAVED_OPERATION_KEY' \
--request POST --header 'Content-Type: application/json' \
--data-binary @request.json \
'https://www.arnproxy.com/account/api/v1/orders/create'Examples are not executed on this page. Keep the API key in a server-side environment variable; do not put real keys in URLs or browser code. Prepare request.json for POST examples.
{"curl":"printf \u0027Authorization: Bearer %s\\n\u0027 \u0022$ARNPROXY_API_KEY\u0022 |\n curl --silent --show-error --header @- \\\n --header \u0027Accept: application\/json\u0027 \\\n --connect-timeout 10 --max-time 30 \\\n --header \u0027Idempotency-Key: YOUR_SAVED_OPERATION_KEY\u0027 \\\n --request POST --header \u0027Content-Type: application\/json\u0027 \\\n --data-binary @request.json \\\n \u0027https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0027","python":"import os, requests\n\nheaders = {\u0022Authorization\u0022: \u0022Bearer \u0022 + os.environ[\u0022ARNPROXY_API_KEY\u0022]}\nheaders[\u0022Idempotency-Key\u0022] = \u0022YOUR_SAVED_OPERATION_KEY\u0022\nimport json\nwith open(\u0022request.json\u0022, encoding=\u0022utf-8\u0022) as f:\n payload = json.load(f)\nresponse = requests.post(\n \u0022https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0022,\n headers=headers, json=payload,\n timeout=(10, 30), allow_redirects=False\n)\nprint(response.status_code, response.text)\n# No automatic write retry.","javascript":"const headers = { Authorization: `Bearer ${process.env.ARNPROXY_API_KEY}` };\nheaders[\u0027Idempotency-Key\u0027] = \u0027YOUR_SAVED_OPERATION_KEY\u0027;\nconst { readFile } = await import(\u0027node:fs\/promises\u0027);\nheaders[\u0027Content-Type\u0027] = \u0027application\/json\u0027;\nconst body = await readFile(\u0027request.json\u0027, \u0027utf8\u0027);\nconst response = await fetch(\u0022https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0022, {\n method: \u0027POST\u0027, headers, redirect: \u0027error\u0027,\n signal: AbortSignal.timeout(30000), body\n});\nconsole.log(response.status, await response.text());\n\/\/ A write timeout is ambiguous; query its saved operation.","php":"\u003C?php\n$headers = [\u0027Accept: application\/json\u0027,\n \u0027Authorization: Bearer \u0027.getenv(\u0027ARNPROXY_API_KEY\u0027)];\n$headers[] = \u0027Idempotency-Key: YOUR_SAVED_OPERATION_KEY\u0027;\n$headers[] = \u0027Content-Type: application\/json\u0027;\n$ch = curl_init(\u0027https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0027);\ncurl_setopt_array($ch, [\n CURLOPT_RETURNTRANSFER =\u003E true,\n CURLOPT_HTTPHEADER =\u003E $headers,\n CURLOPT_FOLLOWLOCATION =\u003E false,\n CURLOPT_SSL_VERIFYPEER =\u003E true, CURLOPT_SSL_VERIFYHOST =\u003E 2,\n CURLOPT_CONNECTTIMEOUT =\u003E 10, CURLOPT_TIMEOUT =\u003E 30,\n CURLOPT_POST =\u003E true,\n CURLOPT_POSTFIELDS =\u003E file_get_contents(\u0027request.json\u0027),\n]);\n$result = curl_exec($ch);\nif ($result === false) {\n \/\/ Do not repeat a write; use the original operation key.\n throw new RuntimeException(\u0027Transport result unknown\u0027);\n}\necho curl_getinfo($ch, CURLINFO_HTTP_CODE).PHP_EOL.$result;\ncurl_close($ch);","go":"package main\n\nimport (\n \u0022fmt\u0022\n \u0022io\u0022\n \u0022net\/http\u0022\n \u0022os\u0022\n \u0022time\u0022\n)\n\nfunc main() {\n client := \u0026http.Client{Timeout: 30*time.Second,\n CheckRedirect: func(req *http.Request, via []*http.Request) error {\n return http.ErrUseLastResponse\n }}\n var body io.Reader\n file, err := os.Open(\u0022request.json\u0022); if err != nil { panic(err) }\n defer file.Close(); body = file\n req, err := http.NewRequest(\u0022POST\u0022, \u0022https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0022, body)\n if err != nil { panic(err) }\n req.Header.Set(\u0022Authorization\u0022, \u0022Bearer \u0022+os.Getenv(\u0022ARNPROXY_API_KEY\u0022))\n req.Header.Set(\u0022Idempotency-Key\u0022, \u0022YOUR_SAVED_OPERATION_KEY\u0022)\n req.Header.Set(\u0022Content-Type\u0022, \u0022application\/json\u0022)\n res, err := client.Do(req); if err != nil { panic(err) }\n defer res.Body.Close()\n data, err := io.ReadAll(res.Body); if err != nil { panic(err) }\n fmt.Println(res.StatusCode, string(data))\n}","csharp":"using System;\nusing System.IO;\nusing System.Net.Http;\nusing System.Net.Http.Headers;\nusing System.Text;\n\nusing var handler = new HttpClientHandler { AllowAutoRedirect = false };\nusing var client = new HttpClient(handler) { Timeout = TimeSpan.FromSeconds(30) };\nusing var request = new HttpRequestMessage(HttpMethod.Post,\n \u0022https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0022);\nrequest.Headers.Authorization = new AuthenticationHeaderValue(\n \u0022Bearer\u0022, Environment.GetEnvironmentVariable(\u0022ARNPROXY_API_KEY\u0022));\nrequest.Headers.Add(\u0022Idempotency-Key\u0022, \u0022YOUR_SAVED_OPERATION_KEY\u0022);\nrequest.Content = new StringContent(\n await File.ReadAllTextAsync(\u0022request.json\u0022), Encoding.UTF8, \u0022application\/json\u0022);\nusing var response = await client.SendAsync(request);\nConsole.WriteLine((int)response.StatusCode);\nConsole.WriteLine(await response.Content.ReadAsStringAsync());\n\/\/ Never automatically retry an ambiguous write.","java":"import java.net.URI;\nimport java.net.http.*;\nimport java.nio.charset.StandardCharsets;\nimport java.nio.file.*;\n\n\/\/ Inside your application method:\nvar client = HttpClient.newHttpClient();\nvar request = HttpRequest.newBuilder(URI.create(\u0022https:\/\/www.arnproxy.com\/account\/api\/v1\/orders\/create\u0022))\n .header(\u0022Authorization\u0022, \u0022Bearer \u0022 + System.getenv(\u0022ARNPROXY_API_KEY\u0022))\n .header(\u0022Accept\u0022, \u0022application\/json\u0022)\n .header(\u0022Idempotency-Key\u0022, System.getenv(\u0022ARNPROXY_OPERATION_KEY\u0022))\n .header(\u0022Content-Type\u0022, \u0022application\/json\u0022)\n .POST(HttpRequest.BodyPublishers.ofString(\n Files.readString(Path.of(\u0022request.json\u0022), StandardCharsets.UTF_8)))\n .build();\nvar response = client.send(request, HttpResponse.BodyHandlers.ofString());\nSystem.out.println(response.statusCode());"}Responses
{
"ok": true,
"data": {
"state": "accepted",
"delivery_state_at_acceptance": "queued",
"currency": "TRY",
"total": "10.00",
"total_minor": 1000,
"checkout_group_id": null,
"orders": [
{
"id": 10001,
"number": "1000010001",
"location_id": 10,
"time_id": 101,
"quantity": 1,
"total": "10.00"
}
],
"accepted_at": "2030-01-01T12:00:00+00:00",
"automatic_renewal": false,
"replayed": false
},
"meta": {
"request_id": "000000000000000000000001",
"phase": "public_v1",
"source": "arnproxy_records"
}
}Response fields and types
| Name | Type | Description |
|---|---|---|
ok | boolean | Success envelope flag; on false inspect error.code. |
data | object | Operation-specific result; examples are illustrative and synthetic. |
data.state | string | Record/operation state. accepted is not delivery; completed is not a connection test. |
data.delivery_state_at_acceptance | string | Operation-specific delivery state at acceptance value; preserve its demonstrated type and consult the behavior notes. |
data.currency | string | Account transaction currency: TRY or USD. |
data.total | string | Money amount; preserve the returned string/integer representation for precision. |
data.total_minor | integer | Integer minor units: 1000 means 10.00 TRY/USD. |
data.checkout_group_id | integer|null | Operation-specific checkout group id value; preserve its demonstrated type and consult the behavior notes. |
data.orders | array | Operation-specific orders value; preserve its demonstrated type and consult the behavior notes. |
data.orders[] | object | Operation-specific orders value; preserve its demonstrated type and consult the behavior notes. |
data.orders[].id | integer | Relevant ARNPROXY record ID; use it instead of the upstream internal ID. |
data.orders[].number | string | Display order number; not interchangeable with fields requesting an id. |
data.orders[].location_id | integer | Local catalog location or product-type ID. |
data.orders[].time_id | integer | Local period/GB-plan record ID, not a day or GB count. |
data.orders[].quantity | integer | Selected or ordered proxy quantity. |
data.orders[].total | string | Money amount; preserve the returned string/integer representation for precision. |
data.accepted_at | string | Timestamp in the API’s returned representation; example dates are synthetic. |
data.automatic_renewal | boolean | Operation-specific automatic renewal value; preserve its demonstrated type and consult the behavior notes. |
data.replayed | boolean | Saved result for the same operation was returned, not proof of a new debit/action. |
meta | object | Request correlation and data-source metadata. |
meta.request_id | string | This HTTP request’s correlation ID, not an operation key or order ID. |
meta.phase | string | Operation-specific phase value; preserve its demonstrated type and consult the behavior notes. |
meta.source | string | Data source; local records and a live provider lookup are different evidence. |
Error response
{
"ok": false,
"error": { "code": "INVALID_API_KEY" },
"meta": { "request_id": "000000000000000000000001" }
}Authentication and validation may reject a request before execution. Consult the error reference and retain request_id when contacting support. Never send keys or passwords. Errors & limits →
Behavior & important notes
- Take identifiers from products/catalog. Quote lines contain only location_id, time_id and quantity. Purchase lines additionally require purpose_id=201 and the selected subpurpose_id.
- Multiple countries create separate orders and one multi-line invoice. Discounts are country-specific. accepted is not delivered; follow order_delivery and order_proxies.
- A timeout/5xx is not proof that a write failed. Use the original Idempotency-Key with its status resource. Do not retry under a new key; GET does not resend the change.
- Do not ask customers to make two selections for a standard order. Find id=201 in catalog.purposes and display only its children. In purchase, purpose_id is the fixed integer 201 and subpurpose_id is the selected child ID. The hierarchical catalog shape remains for compatibility with existing integrations.
- For Other, send subpurpose_id=-1 and other_purpose containing 1–30 characters. Other selections do not require other_purpose. purpose_id remains 201.
- Use up to 20 distinct location_id values under one product_id. Each country creates a separate order record; the linked checkout is handled as one invoice. Quantity discounts are calculated independently per country.