# Mandate routes: revoke, spend

URL: /code/api/mandate/verbs-revoke · Id: `page:code/api/mandate/verbs-revoke`

> The Mandate Verbs revoke, spend as api.sb routes, with inputs, result, refusals and an example.

Reference for [Mandate](/business/nouns/mandate), one group of [Mandate routes](/code/api/mandate).

### Mandate.revoke
Revoke ends a Mandate at once, so new Actions under it are refused and running ones finish. [Verb page](/business/nouns/mandate/revoke?interface=api).

```text
POST /{namespace}/mandates/{mandate}/revoke
```

Path: `mandate`. Emits [`Mandate.revoked`](/business/events/Mandate.revoked).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `mandate` | [Mandate](/business/nouns/mandate) | Yes | The Mandate to end. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `mandate` | [Mandate](/business/nouns/mandate) | Yes | The revoked Mandate. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |
| The record is not in a state that allows this Verb, so the call is refused. | [`refused`](/code/api/errors/refused) | Read the record, run the Verb that moves it to an allowed state, then retry. | None. |

**Example**

```bash
curl -X POST https://api.sb/leaseline.app/mandates/mandate_mKKPrmFQYD/revoke \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "mandate": {
    "$id": "https://api.sb/leaseline.app/mandates/mandate_mKKPrmFQYD",
    "$type": "Mandate",
    "expiresAt": "2026-10-22T12:00:00Z",
    "status": "revoked"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Mandate.revoke",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```

### Mandate.spend
Spend pays an outside party for a Startup with a single-use card, within a Mandate and its Limit. [Verb page](/business/nouns/mandate/spend?interface=api).

```text
POST /{namespace}/mandates/{mandate}/spend
```

Path: `mandate`. Body, as JSON: the other inputs. Emits [`Mandate.spent`](/business/events/Mandate.spent).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `mandate` | [Mandate](/business/nouns/mandate) | Yes | The Mandate that covers the purchase. |
| `amount` | `money` | Yes | The amount to spend. |
| `payee` | `string` | Yes | Who is paid. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `transaction` | [Transaction](/business/nouns/transaction) | Yes | The card Transaction. |
| `mandate` | [Mandate](/business/nouns/mandate) | Yes | The Mandate with its remaining Limit. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The operation is part of an Offer the caller has not accepted or paid for. | [`payment-required`](/code/api/errors/payment-required) | Accept the Offer named in the response, then retry the call. | [Offer.accept](/business/nouns/offer/accept) |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X POST https://api.sb/leaseline.app/mandates/mandate_mKKPrmFQYD/spend \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"amount":{"amount":29,"currency":"USD"},"payee":"Example payee"}'
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "transaction": {
    "$id": "https://api.sb/leaseline.app/transactions/txn_XoxtZe3CQI",
    "$type": "Transaction",
    "kind": "charge",
    "amount": {
      "amount": 29,
      "currency": "USD"
    }
  },
  "mandate": {
    "$id": "https://api.sb/leaseline.app/mandates/mandate_mKKPrmFQYD",
    "$type": "Mandate",
    "expiresAt": "2026-10-22T12:00:00Z",
    "status": "active"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Mandate.spend",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```