Developers
V1Scan linksLock

Booth scanner: sign this device out of the link

POST
/v1/scan-links/lock

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/scan-links/lock"
{  "locked": true}

Booth scanner: what this link is and whether this device is unlocked POST

Header x-medbuk-scan-link carries the link token (never a URL) and x-medbuk-scan-device the optional device secret. Only the merchant web app's signed connection may call it.

Booth scanner: redeem a member voucher POST

Uses the same validation and redemption code as signed-in booth staff (stock, uses per member, collect-by, duplicate protection) plus a wrong-merchant and wrong-outlet check. Returns only the offer title, its validity and a status: never a member name, contact, health data or points. Limited per unlocked device, so a shared venue IP cannot lock anyone out.