POST /v1/actions/store-notification-recipient/remove-recipient
Request Body
| Field | Type | Required | Description |
|---|---|---|---|
storeId | string | Yes | Store ID (Short ID format STO_xxx) |
recipientId | string | Yes | UUID of a stored recipient. Anything that is not a UUID returns 400 |
Example Request
curl -X POST https://api.waffo.com/v1/actions/store-notification-recipient/remove-recipient \
-H "Content-Type: application/json" \
-H "X-Merchant-Id: $WAFFO_MERCHANT_ID" \
-H "X-Signature: ..." \
-d '{
"storeId": "STO_2aUyqjCzEIiEcYMKj7TZtw",
"recipientId": "11111111-2222-3333-4444-555555555555"
}'
const response = await fetch(
"https://api.waffo.com/v1/actions/store-notification-recipient/remove-recipient",
{
method: "POST",
headers: {
"Content-Type": "application/json",
"X-Merchant-Id": process.env.WAFFO_MERCHANT_ID,
"X-Signature": signature,
},
body: JSON.stringify({
storeId: "STO_2aUyqjCzEIiEcYMKj7TZtw",
recipientId: "11111111-2222-3333-4444-555555555555",
}),
},
);
const { data } = await response.json();
Success Response (200)
{
"data": {
"recipientId": "11111111-2222-3333-4444-555555555555",
"removed": true
}
}
Removing the last recipient returns 200 — there is no “keep at least one” guard. The store then sends no merchant notifications at all: there is no fallback address and nothing is synthesized to take its place.
The row seeded at store creation (
isPrimary: true) is removable like any other — that flag is provenance only and carries no privilege. Add an address back to resume delivery. Consumer-facing transactional email is a separate pipeline and keeps working.Response Fields
| Field | Type | Description |
|---|---|---|
recipientId | string | UUID of the removed recipient |
removed | boolean | Always true; a miss returns 404 rather than removed: false |
Errors
Retry policy: Never retry 4xx — fix the request and resubmit. Retry 5xx with exponential backoff (start 5s, max 3 attempts).
| Status | errors[0].message | What it means | Recommended handling |
|---|---|---|---|
| 400 | Missing required field: recipientId | recipientId was not provided | Fix the request body, resubmit |
| 400 | Invalid recipient id format: expected UUID, got "..." | recipientId is not a UUID | Pass the id returned by add-recipient or GraphQL verbatim |
| 401 | Missing merchantId in request context | API Key authentication did not resolve a merchant | Verify API Key headers and signature |
| 403 | Not authorized to manage notification recipients for this store | Merchant is not owner or admin of the store | Verify the merchant’s role on this store |
| 404 | Notification recipient not found | No recipient with that id on that store — it was never added, or a concurrent write already removed it | Re-read the list |
| 409 | Notification recipients changed concurrently, please retry | A concurrent write changed the list between read and write | Re-read the list and retry |
| 500 | Internal server error | Unexpected server-side failure | Retry with exponential backoff (start 5s, max 3 attempts) |