cURL

# Set a unique key once per new action; persist it and reuse it for every retry.
: "${REFLECTIONS_KEY:?Set REFLECTIONS_KEY before running this example}"
: "${REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY:?Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example}"

curl --fail-with-body --max-time 30 -X POST 'https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign' \
  -H "Authorization: Bearer $REFLECTIONS_KEY" \
  -H "Reflections-Version: 2026-10-15" \
  -H "Idempotency-Key: $REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  --data-raw '{
  "accept": true
}'

import { env, exit } from "node:process";

// Set a unique key once per new action; persist it and reuse it for every retry.
const apiKey = env.REFLECTIONS_KEY;
if (!apiKey) throw new Error("Set REFLECTIONS_KEY before running this example");
const idempotencyKey = env.REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY;
if (!idempotencyKey) throw new Error("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example");

const response = await fetch("https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${apiKey}`,
    "Reflections-Version": "2026-10-15",
    "Idempotency-Key": idempotencyKey,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "accept": true
  }),
  signal: AbortSignal.timeout(30_000),
});
const responseBody = await response.text();
if (!response.ok) {
  console.error(`HTTP ${response.status}: ${responseBody}`);
  exit(1);
}
console.log(responseBody);

import json
import os
from urllib.error import HTTPError
from urllib.request import Request, urlopen

# Set a unique key once per new action; persist it and reuse it for every retry.
apiKey = os.environ["REFLECTIONS_KEY"]
if not apiKey:
    raise ValueError("Set REFLECTIONS_KEY before running this example")
idempotencyKey = os.environ["REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY"]
if not idempotencyKey:
    raise ValueError("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example")

headers = {
    "Authorization": f"Bearer {apiKey}",
    "Reflections-Version": "2026-10-15",
    "Idempotency-Key": idempotencyKey,
    "Content-Type": "application/json",
}
data = json.dumps({"accept": True}).encode("utf-8")
request = Request("https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign",
                  method="POST", headers=headers, data=data)
try:
    with urlopen(request, timeout=30) as response:
        print(response.read().decode("utf-8"))
except HTTPError as error:
    error_body = error.read().decode("utf-8")
    raise RuntimeError(f"HTTP {error.code}: {error_body}") from error

package main

import (
    "fmt"
    "io"
    "net/http"
    "os"
    "strings"
    "time"
)

func main() {
    // Set a unique key once per new action; persist it and reuse it for every retry.
    apiKey := os.Getenv("REFLECTIONS_KEY")
    if apiKey == "" {
        panic("Set REFLECTIONS_KEY before running this example")
    }
    idempotencyKey := os.Getenv("REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY")
    if idempotencyKey == "" {
        panic("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example")
    }

    body := strings.NewReader(`{
      "accept": true
    }`)
    request, err := http.NewRequest("POST", "https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign", body)
    if err != nil {
        panic(err)
    }
    request.Header.Set("Authorization", "Bearer " + apiKey)
    request.Header.Set("Reflections-Version", "2026-10-15")
    request.Header.Set("Idempotency-Key", idempotencyKey)
    request.Header.Set("Content-Type", "application/json")
    client := &http.Client{Timeout: 30 * time.Second}
    response, err := client.Do(request)
    if err != nil {
        panic(err)
    }
    defer response.Body.Close()
    responseBody, err := io.ReadAll(response.Body)
    if err != nil {
        panic(err)
    }
    if response.StatusCode < 200 || response.StatusCode >= 300 {
        panic(fmt.Sprintf("HTTP %d: %s", response.StatusCode, responseBody))
    }
    fmt.Print(string(responseBody))
}

{
  "id": "lrq_pdgtby01k8ejkffqkpdwdv9w7b",
  "object": "license_request",
  "livemode": false,
  "kind": "new",
  "status": "signed",
  "talent": "tal_7q9s1v3w5y7a9c1e3g5h7k9m1n",
  "licensee": "acct_2q8v1m3n7p4r6s9t0wxyhk5zba",
  "license": "lic_qx46g3vknbm1jsx6ac526rwkfb",
  "license_revision": "lrv_zy4xrqfs85ek8j1yt63x8c061v",
  "check": "chk_9r1s3t5v7w9x1y3z5a7b9c1d3e",
  "requested_scope": {
    "facet_types": [
      "likeness"
    ],
    "modalities": [
      "image"
    ],
    "kinds": [
      "depiction"
    ],
    "purposes": [
      "advertising"
    ],
    "commercial": true,
    "channels": [
      "social",
      "web"
    ],
    "territories": [
      "US"
    ],
    "starts_at": "2026-11-01T00:00:00Z",
    "ends_at": "2027-01-31T23:59:59Z",
    "final_deliverables": 20
  },
  "offer": {
    "type": "flat",
    "flat": {
      "amount": 1500000,
      "currency": "usd"
    },
    "schedule": "on_acceptance"
  },
  "note": "Winter trail campaign, three months, social and our site.",
  "decision_note": null,
  "signed_at": "2026-10-16T14:07:30Z",
  "declined_at": null,
  "withdrawn_at": null,
  "metadata": {},
  "created_at": "2026-10-16T14:05:12Z"
}

{
  "type": "https://docs.reflections.ai/errors/parameter_invalid",
  "title": "A parameter is invalid",
  "status": 400,
  "code": "parameter_invalid",
  "param": "use.territories[1]",
  "detail": "\"UK\" is not an ISO 3166-1 alpha-2 code. Use \"GB\".",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/invalid_api_key",
  "title": "The API key is not valid",
  "status": 401,
  "code": "invalid_api_key",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/account_not_connected",
  "title": "The licensee has not connected your platform",
  "status": 403,
  "code": "account_not_connected",
  "detail": "acct_2q8v1m3n7p4r6s9t0wxyhk5zba has no active connection with your account.",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/resource_not_found",
  "title": "No such object",
  "status": 404,
  "code": "resource_not_found",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/idempotency_key_in_use",
  "title": "A request with this key is still running",
  "status": 409,
  "code": "idempotency_key_in_use",
  "detail": "Retry with the same key after a short wait.",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/idempotency_key_reused",
  "title": "This key was used for a different request",
  "status": 422,
  "code": "idempotency_key_reused",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/rate_limited",
  "title": "Too many requests",
  "status": 429,
  "code": "rate_limited",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "<string>",
  "title": "<string>",
  "status": 123,
  "code": "invalid_request",
  "request_id": "<string>",
  "detail": "<string>",
  "param": "<string>",
  "doc_url": "<string>"
}

{
  "type": "<string>",
  "title": "<string>",
  "status": 123,
  "code": "invalid_request",
  "request_id": "<string>",
  "detail": "<string>",
  "param": "<string>",
  "doc_url": "<string>"
}

Test helpers

Sign a license request

Planned contract — unavailable in test and live modes. This operation is a protocol reference, not a callable endpoint. Start with the working sandbox quickstart.

Test mode only. Signs a license request to a sandbox talent as the talent would. A request of kind new issues a license in pending_acceptance; a request of kind change signs a new revision into the license’s pending_revision. Pass accept: true to accept either in the same call, as the licensee would.

Needs an unrestricted key.

POST

test_helpers

license_requests

{request_id}

sign

cURL

# Set a unique key once per new action; persist it and reuse it for every retry.
: "${REFLECTIONS_KEY:?Set REFLECTIONS_KEY before running this example}"
: "${REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY:?Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example}"

curl --fail-with-body --max-time 30 -X POST 'https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign' \
  -H "Authorization: Bearer $REFLECTIONS_KEY" \
  -H "Reflections-Version: 2026-10-15" \
  -H "Idempotency-Key: $REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  --data-raw '{
  "accept": true
}'

import { env, exit } from "node:process";

// Set a unique key once per new action; persist it and reuse it for every retry.
const apiKey = env.REFLECTIONS_KEY;
if (!apiKey) throw new Error("Set REFLECTIONS_KEY before running this example");
const idempotencyKey = env.REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY;
if (!idempotencyKey) throw new Error("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example");

const response = await fetch("https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${apiKey}`,
    "Reflections-Version": "2026-10-15",
    "Idempotency-Key": idempotencyKey,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "accept": true
  }),
  signal: AbortSignal.timeout(30_000),
});
const responseBody = await response.text();
if (!response.ok) {
  console.error(`HTTP ${response.status}: ${responseBody}`);
  exit(1);
}
console.log(responseBody);

import json
import os
from urllib.error import HTTPError
from urllib.request import Request, urlopen

# Set a unique key once per new action; persist it and reuse it for every retry.
apiKey = os.environ["REFLECTIONS_KEY"]
if not apiKey:
    raise ValueError("Set REFLECTIONS_KEY before running this example")
idempotencyKey = os.environ["REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY"]
if not idempotencyKey:
    raise ValueError("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example")

headers = {
    "Authorization": f"Bearer {apiKey}",
    "Reflections-Version": "2026-10-15",
    "Idempotency-Key": idempotencyKey,
    "Content-Type": "application/json",
}
data = json.dumps({"accept": True}).encode("utf-8")
request = Request("https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign",
                  method="POST", headers=headers, data=data)
try:
    with urlopen(request, timeout=30) as response:
        print(response.read().decode("utf-8"))
except HTTPError as error:
    error_body = error.read().decode("utf-8")
    raise RuntimeError(f"HTTP {error.code}: {error_body}") from error

package main

import (
    "fmt"
    "io"
    "net/http"
    "os"
    "strings"
    "time"
)

func main() {
    // Set a unique key once per new action; persist it and reuse it for every retry.
    apiKey := os.Getenv("REFLECTIONS_KEY")
    if apiKey == "" {
        panic("Set REFLECTIONS_KEY before running this example")
    }
    idempotencyKey := os.Getenv("REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY")
    if idempotencyKey == "" {
        panic("Set REFLECTIONS_SIGN_TEST_LICENSE_REQUEST_IDEMPOTENCY_KEY before running this example")
    }

    body := strings.NewReader(`{
      "accept": true
    }`)
    request, err := http.NewRequest("POST", "https://app.reflections.ai/v1/test_helpers/license_requests/lrq_py3xqfvbjjcdhvf33y6c2w26jm/sign", body)
    if err != nil {
        panic(err)
    }
    request.Header.Set("Authorization", "Bearer " + apiKey)
    request.Header.Set("Reflections-Version", "2026-10-15")
    request.Header.Set("Idempotency-Key", idempotencyKey)
    request.Header.Set("Content-Type", "application/json")
    client := &http.Client{Timeout: 30 * time.Second}
    response, err := client.Do(request)
    if err != nil {
        panic(err)
    }
    defer response.Body.Close()
    responseBody, err := io.ReadAll(response.Body)
    if err != nil {
        panic(err)
    }
    if response.StatusCode < 200 || response.StatusCode >= 300 {
        panic(fmt.Sprintf("HTTP %d: %s", response.StatusCode, responseBody))
    }
    fmt.Print(string(responseBody))
}

{
  "id": "lrq_pdgtby01k8ejkffqkpdwdv9w7b",
  "object": "license_request",
  "livemode": false,
  "kind": "new",
  "status": "signed",
  "talent": "tal_7q9s1v3w5y7a9c1e3g5h7k9m1n",
  "licensee": "acct_2q8v1m3n7p4r6s9t0wxyhk5zba",
  "license": "lic_qx46g3vknbm1jsx6ac526rwkfb",
  "license_revision": "lrv_zy4xrqfs85ek8j1yt63x8c061v",
  "check": "chk_9r1s3t5v7w9x1y3z5a7b9c1d3e",
  "requested_scope": {
    "facet_types": [
      "likeness"
    ],
    "modalities": [
      "image"
    ],
    "kinds": [
      "depiction"
    ],
    "purposes": [
      "advertising"
    ],
    "commercial": true,
    "channels": [
      "social",
      "web"
    ],
    "territories": [
      "US"
    ],
    "starts_at": "2026-11-01T00:00:00Z",
    "ends_at": "2027-01-31T23:59:59Z",
    "final_deliverables": 20
  },
  "offer": {
    "type": "flat",
    "flat": {
      "amount": 1500000,
      "currency": "usd"
    },
    "schedule": "on_acceptance"
  },
  "note": "Winter trail campaign, three months, social and our site.",
  "decision_note": null,
  "signed_at": "2026-10-16T14:07:30Z",
  "declined_at": null,
  "withdrawn_at": null,
  "metadata": {},
  "created_at": "2026-10-16T14:05:12Z"
}

{
  "type": "https://docs.reflections.ai/errors/parameter_invalid",
  "title": "A parameter is invalid",
  "status": 400,
  "code": "parameter_invalid",
  "param": "use.territories[1]",
  "detail": "\"UK\" is not an ISO 3166-1 alpha-2 code. Use \"GB\".",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/invalid_api_key",
  "title": "The API key is not valid",
  "status": 401,
  "code": "invalid_api_key",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/account_not_connected",
  "title": "The licensee has not connected your platform",
  "status": 403,
  "code": "account_not_connected",
  "detail": "acct_2q8v1m3n7p4r6s9t0wxyhk5zba has no active connection with your account.",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/resource_not_found",
  "title": "No such object",
  "status": 404,
  "code": "resource_not_found",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/idempotency_key_in_use",
  "title": "A request with this key is still running",
  "status": 409,
  "code": "idempotency_key_in_use",
  "detail": "Retry with the same key after a short wait.",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/idempotency_key_reused",
  "title": "This key was used for a different request",
  "status": 422,
  "code": "idempotency_key_reused",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "https://docs.reflections.ai/errors/rate_limited",
  "title": "Too many requests",
  "status": 429,
  "code": "rate_limited",
  "request_id": "req_8f2k4m6p8r0t2v4x6z8b0d2f4h"
}

{
  "type": "<string>",
  "title": "<string>",
  "status": 123,
  "code": "invalid_request",
  "request_id": "<string>",
  "detail": "<string>",
  "param": "<string>",
  "doc_url": "<string>"
}

{
  "type": "<string>",
  "title": "<string>",
  "status": 123,
  "code": "invalid_request",
  "request_id": "<string>",
  "detail": "<string>",
  "param": "<string>",
  "doc_url": "<string>"
}

Authorizations

Authorization

string

header

required

Your secret key, rk_test_… or rk_live_…, sent as Authorization: Bearer <key>. Keep it on your server. Restricted keys carry only the scopes you give them.

Headers

Reflections-Version

string

The dated API version. Defaults to the version your account is pinned to.

Example:

"2026-10-15"

Reflections-Account

string

Act for a connected licensee. The value is the licensee's account ID. Requires an active connection between that account and yours.

Pattern: ^acct_[0-9a-hjkmnp-tv-z]{26}$

Idempotency-Key

string

A unique key for this operation, up to 255 characters. In test mode, POST keys are scoped to your account and mode and bind the endpoint and body for 24 hours. A different endpoint or body with the same key is refused.

Initial live check and generation creation require a nonempty key. Each operation has a separate account-scoped namespace; retain the same API key, body and idempotency key for retries within 24 hours of creation. A pending check returns 202 with status: "checking". Completed checks replay their sealed response; successful generation POSTs replay the original accepted 202, so use GET for current state. Live verification is a read-only query that returns a fresh verification ID on each call, without exact response caching.

The broader delegated-account contract also scopes keys to Reflections-Account; delegated requests and the other planned live POST operations remain unsupported.

Maximum string length: 255

Path Parameters

request_id

string

required

The license request's ID.

Pattern: ^lrq_[0-9a-hjkmnp-tv-z]{26}$

Body

application/json

boolean

default:false

Also accept the license as the licensee, so it is active at once.

decline

boolean

default:false

Decline the request instead.

Response

The license request, with the license it became.

string

required

Unique identifier for the request, lrq_….

Pattern: ^lrq_[0-9a-hjkmnp-tv-z]{26}$

object

string

required

Always license_request.

Allowed value: "license_request"

livemode

boolean

required

true for a live-mode request, false for a test-mode one.

kind

enum<string>

required

new for a new license, or change for a new revision of license.

Available options:

new,

change

status

enum<string>

required

Where the request stands. Only a sent request can be withdrawn or declined.

Available options:

sent,

signed,

declined,

withdrawn

talent

string

required

The talent the request asks.

Pattern: ^tal_[0-9a-hjkmnp-tv-z]{26}$

licensee

string

required

The account that would hold the license: the sender, or the connected licensee a platform sent it for.

Pattern: ^acct_[0-9a-hjkmnp-tv-z]{26}$

requested_scope

object

required

The terms asked for, as sent.

Show child attributes

created_at

string<date-time>

required

When the request was sent.

license

string | null

For change, the license to change. When signed, the license it became.

Pattern: ^lic_[0-9a-hjkmnp-tv-z]{26}$

license_revision

string | null

The revision the talent's side signed. It may differ from what you asked.

Pattern: ^lrv_[0-9a-hjkmnp-tv-z]{26}$

check

string | null

The denied check that prompted the request. null if none was named.

Pattern: ^chk_[0-9a-hjkmnp-tv-z]{26}$

offer

object | null

The compensation offered. null if the request made no offer.

Show child attributes

note

string | null

The note to the talent, as written. null if none was sent.

decision_note

string | null

The talent's note when they declined or signed.

signed_at

string<date-time> | null

When the talent's side signed a license or revision from the request. null unless signed.

declined_at

string<date-time> | null

When the talent's side declined the request. null unless declined.

withdrawn_at

string<date-time> | null

When the licensee withdrew the request. null unless withdrawn.

metadata

object

The key-value pairs sent with the request.

Show child attributes

Overview

Account

Talent

Facets

Resolutions

Licenses

License requests

Connections

Files

Checks

Generations

Sessions

Receipts

Verifications

Revocations

Usage records

Statements

Mandates

Escalations

License drafts

Webhook endpoints

Events

Discovery

OAuth

Test helpers

Webhooks

Real-time

Formats

MCP

Sign a license request

Authorizations

Headers

Path Parameters

Body

Response