POSThttps://app.evoriqa.com/api/v1/reseller/clients/{workspaceId}/credits

Allocate or reclaim pooled credits

A **positive** `amount` allocates credits from the org pool to the client (floored at 1000); a **negative** `amount` reclaims still-unspent pool-sourced credit from the client back to the pool (no floor). `0` is rejected. An idempotency key is MANDATORY — as the standard `Idempotency-Key` header or an `idempotencyKey` body field; a request without one, or one outside `[A-Za-z0-9_-]`, returns 422. Replaying the same key is a no-op that returns the current figures instead of moving credit twice. An allocation against an empty pool returns 402. A reclaim above the client's reclaimable ceiling returns 422 naming the exact maximum, and a reclaim when nothing is reclaimable returns 422 ("Nothing to reclaim — the client has no unspent allocation."). Both actions require an active reseller plan — a lapsed plan returns 403. Reseller endpoints additionally require the key to live on the organization owner's own (primary) workspace — any other workspace returns 403.

Requires scope reseller:write

Access is gated — enable it before your first call

The API is off by default. A request succeeds only when all three switches are on: the platform master switch (off by default), your organisation’s API toggle, and your plan or client entitlement. Any one off returns 403 API access is not enabled for this workspace.

Parameters

Name	In	Type	Required	Default	Description
workspaceId	path	string uuid	Required	—	The client workspace's id.
Idempotency-Key	header	string 8–128 chars, matches `^[A-Za-z0-9_-]+$`	Optional	—	The idempotency key. Either this header or the `idempotencyKey` body field is required.

Request body

Content type: application/json

Field	Type	Required	Description
amount	integer -100000000–100000000	Required	Positive allocates from the pool (at least 1000); negative reclaims that many credits back to the pool (no floor); 0 is rejected.
idempotencyKey	string 8–128 chars, matches `^[A-Za-z0-9_-]+$`	Optional	Alternative to the `Idempotency-Key` header.

Request

curl

curl -X POST "https://app.evoriqa.com/api/v1/reseller/clients/{workspaceId}/credits" \
  -H "x-api-key: $EVORIQA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "amount": 10000, "idempotencyKey": "alloc-2026-08-client-co-1" }'

Node.js

const res = await fetch("https://app.evoriqa.com/api/v1/reseller/clients/{workspaceId}/credits", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.EVORIQA_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "amount": 10000,
    "idempotencyKey": "alloc-2026-08-client-co-1"
  }),
});

const responseBody = await res.json();

Python

import os
import requests

res = requests.post(
    "https://app.evoriqa.com/api/v1/reseller/clients/{workspaceId}/credits",
    headers={"Authorization": f"Bearer {os.environ['EVORIQA_API_KEY']}"},
    json={
      "amount": 10000,
      "idempotencyKey": "alloc-2026-08-client-co-1"
    },
)

body = res.json()

Response

200 OK

{
  "success": true,
  "data": {
    "workspaceId": "d4c3b2a1-0f9e-4d8c-8b7a-6f5e4d3c2b1a",
    "balance": 60000
  }
}