Change where commercial data may live

PUT 
/api/commerce/settings

acknowledge is REQUIRED to switch storage on and ignored when switching it off. It is not ceremony: the panel shows what changes, and the flag is how the server knows somebody saw that rather than flipping the row through the API. Turning it OFF never needs permission — a tenant retreating to the safer position should not meet a hurdle.

address_form_expires_in_days is capped at Meta's own ceiling of 7. A longer number would be a promise Meta does not keep: the form simply stops being answerable, and the customer meets a dead form rather than an expired one they could ask to have resent.

Request

Responses

200

The saved settings.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

422

The request failed validation.