Update Status - Waffo Pancake

Activate or deactivate a subscription product.

POST /v1/actions/subscription-product/update-status

Authentication: API Key

Request Body

Field	Type	Required	Description
`id`	string	Yes	Product ID (`PROD_xxx` format)
`status`	string	Yes	`active` or `inactive`

Example Request

import { ProductVersionStatus } from "@waffo/pancake-ts";

await client.subscriptionProducts.updateStatus({
  id: "PROD_3F7H2J5L8N1Q4S6U",
  status: ProductVersionStatus.Inactive,
});

// Uses callApi() helper from authentication.mdx
const result = await callApi("POST", "/v1/actions/subscription-product/update-status", {
  id: "PROD_3F7H2J5L8N1Q4S6U",
  status: "inactive",
});
console.log(result.data);

// Uses callApi() helper from authentication.mdx
String body = """
    {"id":"PROD_3F7H2J5L8N1Q4S6U","status":"inactive"}""";

String response = callApi("POST", "/v1/actions/subscription-product/update-status", body);
System.out.println(response);

# Uses call_api() helper from authentication.mdx
result = call_api("POST", "/v1/actions/subscription-product/update-status", {
    "id": "PROD_3F7H2J5L8N1Q4S6U",
    "status": "inactive",
})
print(result["data"])

// Uses callAPI() helper from authentication.mdx
body := map[string]interface{}{
    "id":     "PROD_3F7H2J5L8N1Q4S6U",
    "status": "inactive",
}
result, err := callAPI("POST", "/v1/actions/subscription-product/update-status", body)
if err != nil {
    log.Fatal(err)
}
fmt.Println(string(result))

// Uses call_api() helper from authentication.mdx
let body = serde_json::json!({
    "id": "PROD_3F7H2J5L8N1Q4S6U",
    "status": "inactive"
});
let result = call_api("POST", "/v1/actions/subscription-product/update-status", &body).await?;
println!("{}", result);

/* Uses call_api() helper from authentication.mdx */
const char *body = "{\"id\":\"PROD_3F7H2J5L8N1Q4S6U\",\"status\":\"inactive\"}";
char *response = call_api("POST", "/v1/actions/subscription-product/update-status", body);
printf("%s\n", response);
free(response);

// Uses callApi() helper from authentication.mdx
std::string body = R"({"id":"PROD_3F7H2J5L8N1Q4S6U","status":"inactive"})";
std::string response = callApi("POST", "/v1/actions/subscription-product/update-status", body);
std::cout << response << std::endl;

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3F7H2J5L8N1Q4S6U","status":"inactive"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/subscription-product/update-status
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

curl -X POST "https://api.waffo.ai/v1/actions/subscription-product/update-status" \
  -H "Content-Type: application/json" \
  -H "X-Merchant-Id: $MERCHANT_ID" \
  -H "X-Timestamp: $TIMESTAMP" \
  -H "X-Signature: $SIGNATURE" \
  -d "$BODY"

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3F7H2J5L8N1Q4S6U","status":"inactive"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/subscription-product/update-status
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

wget -qO- "https://api.waffo.ai/v1/actions/subscription-product/update-status" \
  --header="Content-Type: application/json" \
  --header="X-Merchant-Id: $MERCHANT_ID" \
  --header="X-Timestamp: $TIMESTAMP" \
  --header="X-Signature: $SIGNATURE" \
  --post-data="$BODY"

Success Response (200)

{
  "data": {
    "product": {
      "id": "PROD_3F7H2J5L8N1Q4S6U",
      "storeId": "STO_2D5F8G3H1K4M6N9P",
      "name": "Pro Plan",
      "description": "Full access to all Pro features.",
      "billingPeriod": "monthly",
      "prices": {
        "USD": { "amount": "29.00", "taxCategory": "saas" },
        "EUR": { "amount": "27.00", "taxCategory": "saas" }
      },
      "media": [],
      "successUrl": "https://example.com/welcome",
      "metadata": { "trialDays": 14 },
      "status": "inactive",
      "createdAt": "2026-03-30T10:30:00.000Z",
      "updatedAt": "2026-03-30T13:00:00.000Z"
    }
  }
}

Response Fields

Same as Create Subscription Product response.

Deactivating a subscription product prevents new signups but does not cancel existing active subscriptions. Subscribers continue their current billing cycle unaffected.

Errors

Retry policy: Never retry 4xx — fix the request and resubmit. Retry 5xx with exponential backoff (start 5s, max 3 attempts).

Status	`errors[0].message`	What it means	Recommended handling
400	`Missing header: x-context-merchant-id`	The merchant context header was not forwarded	Fix your SDK configuration
400	`Missing or invalid header: x-context-environment`	Environment header is missing or not `test` / `prod`	Set `X-Environment` to `test` or `prod`
400	`Missing required field: id`	Request body did not include `id`	Add `id`, resubmit
400	`Expected format: PROD_xxx, got "X"`	`id` is not a valid Short ID	Use a `PROD_` prefixed Short ID
400	`Invalid or missing status (must be 'active' or 'inactive')`	`status` is missing or not one of the two allowed values	Use `active` or `inactive`
400	Message contains `has no version`	The target environment (`test` or `prod`) has no version yet	Create a version in this environment first (publish from test, or create in test)
401	`Unauthorized`	Authentication failed	Verify API key, timestamp, and signature
404	`Product not found` / `Current version not found`	Product ID does not exist (or current version missing)	Verify the product ID
500	`Internal server error`	Transient downstream failure	Retry with exponential backoff (start 5s, max 3 attempts)

⌘I