Quick start

Submit a consumer loan application from your own backend to the AC production endpoint. Use only real customer data with proper consent and an approved go-live arrangement.

1. Obtain credentials

AC provides a unique client ID and API key. Keep both in a secure server-side secret store. An API key for one client or environment must not be reused for another.

2. Prepare the request

POST /post HTTP/1.1
Host: api.authorisedcompliance.com
Content-Type: application/xml
X-AC-Client-ID: YOUR_CLIENT_ID
x-api-key: YOUR_API_KEY

The body must be a flat XML application containing supported fields. This is an illustrative mapping, not a ready-to-submit production customer application:

<application>
  <affiliate_app_id>YOUR_UNIQUE_APPLICATION_REFERENCE</affiliate_app_id>
  <loan_amount>5000</loan_amount>
  <loan_purpose>8</loan_purpose>
  <loan_term>48</loan_term>
  <first_name>FIRST_NAME</first_name>
  <last_name>LAST_NAME</last_name>
  <dob>YYYY-MM-DD</dob>
  <postcode>POSTCODE</postcode>
  <gross_annual_income>ANNUAL_INCOME_IN_GBP</gross_annual_income>
  <!-- Include all other required application fields from the field guide -->
</application>

AC injects the downstream campaign configuration and mode. Do not send campaign_code or mode fields: the relay rejects them.

3. Read the XML response

After an HTTP 200, inspect <result> in the XML, not the HTTP status alone.

• <result>10</result>: accepted for processing; expect an AC results_url and poll it.
• An offer or decline may already be final in the initial response; handle it without assuming polling is required.
• A business-level rejection may still arrive over HTTP 200.

See Response codes and Retrieve results.

4. Poll only when the response supplies a URL

For a response containing a results_url, send a GET request to that exact HTTPS URL using the same client credentials. The gateway's results token is short lived and bound to the submitting client.

5. Complete integration acceptance tests

Before submitting applications, confirm credential access, request validation and handling of both immediate and polling responses.