Update Status - Waffo Pancake

Activate or deactivate a product. Active products are purchasable; inactive products are hidden from checkout.

POST /v1/actions/onetime-product/update-status

Authentication: API Key

Request Body

Field	Type	Required	Description
`id`	string	Yes	Product ID (Short ID format `PROD_xxx`)
`status`	string	Yes	`active` or `inactive`

Example Request

import { ProductVersionStatus } from "@waffo/pancake-ts";

const { product } = await client.onetimeProducts.updateStatus({
  id: "PROD_3kF9mNpQrStUvWxYz1A2bC",
  status: ProductVersionStatus.Inactive,
});

// Uses callApi() helper from authentication.mdx
const result = await callApi("POST", "/v1/actions/onetime-product/update-status", {
  id: "PROD_3kF9mNpQrStUvWxYz1A2bC",
  status: "inactive",
});
console.log(result.data.product.status); // => "inactive"

// Uses callApi() helper from authentication.mdx
String body = """
    {"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}""";

String response = callApi("POST", "/v1/actions/onetime-product/update-status", body);
System.out.println(response);

# Uses call_api() helper from authentication.mdx
result = call_api("POST", "/v1/actions/onetime-product/update-status", {
    "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
    "status": "inactive",
})
print(result["data"]["product"]["status"])  # => "inactive"

// Uses callAPI() helper from authentication.mdx
body := map[string]interface{}{
    "id":     "PROD_3kF9mNpQrStUvWxYz1A2bC",
    "status": "inactive",
}
result, err := callAPI("POST", "/v1/actions/onetime-product/update-status", body)
if err != nil {
    log.Fatal(err)
}
fmt.Println(string(result))

// Uses call_api() helper from authentication.mdx
let body = serde_json::json!({
    "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
    "status": "inactive"
});
let result = call_api("POST", "/v1/actions/onetime-product/update-status", &body).await?;
println!("{}", result);

/* Uses call_api() helper from authentication.mdx */
const char *body = "{\"id\":\"PROD_3kF9mNpQrStUvWxYz1A2bC\",\"status\":\"inactive\"}";
char *response = call_api("POST", "/v1/actions/onetime-product/update-status", body);
printf("%s\n", response);
free(response);

// Uses callApi() helper from authentication.mdx
std::string body = R"({"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"})";
std::string response = callApi("POST", "/v1/actions/onetime-product/update-status", body);
std::cout << response << std::endl;

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/onetime-product/update-status
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

curl -X POST "https://api.waffo.ai/v1/actions/onetime-product/update-status" \
  -H "Content-Type: application/json" \
  -H "X-Merchant-Id: $MERCHANT_ID" \
  -H "X-Timestamp: $TIMESTAMP" \
  -H "X-Signature: $SIGNATURE" \
  -d "$BODY"

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/onetime-product/update-status
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

wget -qO- "https://api.waffo.ai/v1/actions/onetime-product/update-status" \
  --header="Content-Type: application/json" \
  --header="X-Merchant-Id: $MERCHANT_ID" \
  --header="X-Timestamp: $TIMESTAMP" \
  --header="X-Signature: $SIGNATURE" \
  --post-data="$BODY"

Success Response (200)

{
  "data": {
    "product": {
      "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
      "storeId": "STO_2aUyqjCzEIiEcYMKj7TZtw",
      "name": "Premium Template Pack",
      "description": "50 premium design templates for your next project.",
      "prices": {
        "USD": { "amount": "49.00", "taxCategory": "digital_goods" },
        "EUR": { "amount": "45.00", "taxCategory": "digital_goods" }
      },
      "media": [
        { "type": "image", "url": "https://example.com/templates-preview.png", "alt": "Template preview" }
      ],
      "successUrl": "https://example.com/thank-you",
      "metadata": { "category": "design", "fileCount": "50" },
      "status": "inactive",
      "createdAt": "2026-01-15T10:30:00.000Z",
      "updatedAt": "2026-01-15T13:00:00.000Z"
    }
  }
}

Response Fields

Same as Create Product response.

Setting a product to inactive hides it from checkout but does not affect existing orders. Customers who already purchased the product retain access.

Errors

Retry policy: Never retry 4xx — fix the request and resubmit. Retry 5xx with exponential backoff (start 5s, max 3 attempts).

Status	`errors[0].message`	What it means	Recommended handling
400	`Missing required field: id`	`id` not provided	Fix the body, resubmit
400	`Invalid ID format`	The provided Short ID could not be decoded	Fix the `id` format, resubmit
400	`Invalid or missing status (must be 'active' or 'inactive')`	`status` is not `active` or `inactive`	Use `active` or `inactive`, resubmit
400	`Product X has no version in environment Y`	The product has no version in the targeted environment (e.g. attempting to update status of `prod` before publishing)	Publish the product to the target environment first via Publish Product
404	`Product not found`	Product does not exist or is not accessible	Verify the `id` belongs to your merchant account
500	`Internal server error`	Unexpected server-side failure	Retry with exponential backoff (start 5s, max 3 attempts)

⌘I