Commerce

Read actual company fallback settings and recorded outages

GET
/v1/protocol/commerce/connected/business-central/{connectionId}/safety-settings

Default off; requires COMMERCE_MCP_OAUTH_CONNECTED_ENABLED, the exact fresh nine-scope v3 consent, current Microsoft purchase and membership, and signed supported-source eligibility. It never upgrades a legacy v1 or v2 grant. Also requires COMMERCE_MCP_BUSINESS_CENTRAL_NATIVE_ENABLED and a separately verified current company connection/native read grant within the purchaser tenant extracted by Accounts. No caller-supplied tenant, economics or source URL is accepted. Eight-second deadline and fixed bounded source reads apply. Requires erp:read. Reads enabled status and provider-observed can_configure; enabled remains read-only.

Authorization

CommerceAccountsOAuth
AuthorizationBearer <token>

Opaque Accounts-issued Commerce OAuth access credential with resource-bound current purchase. Legacy base3, signed v2 ERP/history and fresh signed v3 nine-scope connected grants retain distinct route profiles. Refresh credentials never authenticate. Per-operation connection, current role, proof, quota and confirmation checks remain mandatory.

In: header

Path Parameters

connectionId*string
Formatuuid

Query Parameters

org_id*string
Formatuuid

Response Body

application/json

curl -X GET "https://example.com/v1/protocol/commerce/connected/business-central/497f6eca-6276-4993-bfeb-53cbbbba6f08/safety-settings?org_id=497f6eca-6276-4993-bfeb-53cbbbba6f08"
{  "version": "commerce-native-bc-safety-v1",  "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b",  "connection_id": "d3547de1-d1f2-4344-b4c2-17169b7526f9",  "connection_revision": -9007199254740991,  "status": {    "version": "decionis.business_central.guard.status.v1",    "connection_id": "d3547de1-d1f2-4344-b4c2-17169b7526f9",    "settings_id": "f248c86b-9d56-484c-9c53-12164c6189d6",    "etag": "string",    "observed_at": "2019-08-24T14:15:22Z",    "enabled": true,    "fallback_mode": "FAIL_OPEN",    "default_fallback_mode": "FAIL_OPEN",    "configured": true,    "can_configure": true,    "preflight_readiness": {      "version": "bc_native_preflight_readiness_v1",      "profile_configured": true,      "missing": [        "evidence_profile"      ],      "document_evidence_required": true    },    "consecutive_failures": -9007199254740991,    "circuit_open_until": "2019-08-24T14:15:22Z",    "last_configuration_operation_id": "51d4710e-b550-4e2d-af7c-a3c8f397272c",    "timeout_ms": 150,    "intercepts": [      "sales_release",      "sales_post"    ],    "outage_scope": "fail_open_availability_only"  },  "outages": {    "version": "decionis.business_central.guard.outages.v1",    "connection_id": "d3547de1-d1f2-4344-b4c2-17169b7526f9",    "observed_at": "2019-08-24T14:15:22Z",    "scope": "fail_open_availability_only",    "records": [      {        "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",        "created_at": "2019-08-24T14:15:22Z",        "failure_type": "HTTP_5XX",        "attempts": -9007199254740991,        "processed": true      }    ],    "coverage": {      "limit": 50,      "complete": true,      "truncated": true    }  },  "execution_available": false}

Record the confirmed current order's full SHADOW policy result POST

Default off; requires COMMERCE_MCP_OAUTH_CONNECTED_ENABLED, the exact fresh nine-scope v3 consent, current Microsoft purchase and membership, and signed supported-source eligibility. It never upgrades a legacy v1 or v2 grant. Also requires COMMERCE_MCP_BUSINESS_CENTRAL_NATIVE_ENABLED and a separately verified current company connection/native read grant within the purchaser tenant extracted by Accounts. No caller-supplied tenant, economics or source URL is accepted. Eight-second deadline and fixed bounded source reads apply. Requires erp:read and erp:validate, explicit confirmation, snapshot digest, policy digest and matching idempotency header. Re-reads the exact source and executes the canonical sixteen-check Commerce SHADOW workflow with one durable evaluation reservation. Missing landed cost, inventory, promotion or other required facts produce HOLD. The original PROCEED/HOLD/BLOCK/ESCALATE verdict, signed dossier and policy identity remain visible. No callback or integration is dispatched. Commerce may separately request native margin and agent-budget authorization only after unchanged PROCEED.

Apply an explicitly confirmed company fallback-mode change PATCH

Default off; requires COMMERCE_MCP_OAUTH_CONNECTED_ENABLED, the exact fresh nine-scope v3 consent, current Microsoft purchase and membership, and signed supported-source eligibility. It never upgrades a legacy v1 or v2 grant. Also requires COMMERCE_MCP_BUSINESS_CENTRAL_NATIVE_ENABLED and a separately verified current company connection/native read grant within the purchaser tenant extracted by Accounts. No caller-supplied tenant, economics or source URL is accepted. Eight-second deadline and fixed bounded source reads apply. Requires erp:configure, current Accounts owner/admin, a separately verified native configure grant and provider-observed write permission. Only FAIL_OPEN/FAIL_CLOSED changes are supported. Exact old/new mode, settings ID, connection revision, nonwildcard ETag and idempotency must match the reviewed request. Adapter-proven non-writes are terminal NOT_APPLIED; uncertain outcomes stay reserved and never retry a PATCH. A read can reconcile only the same applied operation UUID. This settings change performs no financial ERP action.