> ## Documentation Index
> Fetch the complete documentation index at: https://docs.waffo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Status

> Activate or deactivate a one-time product for checkout visibility

Activate or deactivate a product. Active products are purchasable; inactive products are hidden from checkout.

```
POST /v1/actions/onetime-product/update-status
```

**Authentication:** API Key

## Request Body

| Field    | Type   | Required | Description                             |
| -------- | ------ | -------- | --------------------------------------- |
| `id`     | string | Yes      | Product ID (Short ID format `PROD_xxx`) |
| `status` | string | Yes      | `active` or `inactive`                  |

## Example Request

<CodeGroup>
  ```typescript SDK theme={"system"}
  import { ProductVersionStatus } from "@waffo/pancake-ts";

  const { product } = await client.onetimeProducts.updateStatus({
    id: "PROD_3kF9mNpQrStUvWxYz1A2bC",
    status: ProductVersionStatus.Inactive,
  });
  ```

  ```typescript TypeScript (fetch) theme={"system"}
  // Uses callApi() helper from authentication.mdx
  const result = await callApi("POST", "/v1/actions/onetime-product/update-status", {
    id: "PROD_3kF9mNpQrStUvWxYz1A2bC",
    status: "inactive",
  });
  console.log(result.data.product.status); // => "inactive"
  ```

  ```java Java theme={"system"}
  // Uses callApi() helper from authentication.mdx
  String body = """
      {"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}""";

  String response = callApi("POST", "/v1/actions/onetime-product/update-status", body);
  System.out.println(response);
  ```

  ```python Python theme={"system"}
  # Uses call_api() helper from authentication.mdx
  result = call_api("POST", "/v1/actions/onetime-product/update-status", {
      "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
      "status": "inactive",
  })
  print(result["data"]["product"]["status"])  # => "inactive"
  ```

  ```go Go theme={"system"}
  // Uses callAPI() helper from authentication.mdx
  body := map[string]interface{}{
      "id":     "PROD_3kF9mNpQrStUvWxYz1A2bC",
      "status": "inactive",
  }
  result, err := callAPI("POST", "/v1/actions/onetime-product/update-status", body)
  if err != nil {
      log.Fatal(err)
  }
  fmt.Println(string(result))
  ```

  ```rust Rust theme={"system"}
  // Uses call_api() helper from authentication.mdx
  let body = serde_json::json!({
      "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
      "status": "inactive"
  });
  let result = call_api("POST", "/v1/actions/onetime-product/update-status", &body).await?;
  println!("{}", result);
  ```

  ```c C theme={"system"}
  /* Uses call_api() helper from authentication.mdx */
  const char *body = "{\"id\":\"PROD_3kF9mNpQrStUvWxYz1A2bC\",\"status\":\"inactive\"}";
  char *response = call_api("POST", "/v1/actions/onetime-product/update-status", body);
  printf("%s\n", response);
  free(response);
  ```

  ```cpp C++ theme={"system"}
  // Uses callApi() helper from authentication.mdx
  std::string body = R"({"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"})";
  std::string response = callApi("POST", "/v1/actions/onetime-product/update-status", body);
  std::cout << response << std::endl;
  ```

  ```bash cURL theme={"system"}
  MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
  TIMESTAMP=$(date +%s)
  BODY='{"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}'
  BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 -w 0)
  CANONICAL_REQUEST="POST
  /v1/actions/onetime-product/update-status
  $TIMESTAMP
  $BODY_HASH"

  SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 -w 0)

  curl -X POST "https://api.waffo.ai/v1/actions/onetime-product/update-status" \
    -H "Content-Type: application/json" \
    -H "X-Merchant-Id: $MERCHANT_ID" \
    -H "X-Timestamp: $TIMESTAMP" \
    -H "X-Signature: $SIGNATURE" \
    -d "$BODY"
  ```

  ```bash wget theme={"system"}
  MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
  TIMESTAMP=$(date +%s)
  BODY='{"id":"PROD_3kF9mNpQrStUvWxYz1A2bC","status":"inactive"}'
  BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 -w 0)
  CANONICAL_REQUEST="POST
  /v1/actions/onetime-product/update-status
  $TIMESTAMP
  $BODY_HASH"

  SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 -w 0)

  wget -qO- "https://api.waffo.ai/v1/actions/onetime-product/update-status" \
    --header="Content-Type: application/json" \
    --header="X-Merchant-Id: $MERCHANT_ID" \
    --header="X-Timestamp: $TIMESTAMP" \
    --header="X-Signature: $SIGNATURE" \
    --post-data="$BODY"
  ```
</CodeGroup>

## Success Response (200)

```json theme={"system"}
{
  "data": {
    "product": {
      "id": "PROD_3kF9mNpQrStUvWxYz1A2bC",
      "storeId": "STO_2aUyqjCzEIiEcYMKj7TZtw",
      "name": "Premium Template Pack",
      "description": "50 premium design templates for your next project.",
      "prices": {
        "USD": { "amount": "49.00", "taxCategory": "digital_goods" },
        "EUR": { "amount": "45.00", "taxCategory": "digital_goods" }
      },
      "media": [
        { "type": "image", "url": "https://example.com/templates-preview.png", "alt": "Template preview" }
      ],
      "successUrl": "https://example.com/thank-you",
      "metadata": { "category": "design", "fileCount": "50" },
      "status": "inactive",
      "createdAt": "2026-01-15T10:30:00.000Z",
      "updatedAt": "2026-01-15T13:00:00.000Z"
    }
  }
}
```

## Response Fields

Same as [Create Product response](/api-reference/endpoints/onetime-products/create-product#response-fields).

<Note>
  Setting a product to `inactive` hides it from checkout but does **not** affect existing orders. Customers who already purchased the product retain access.
</Note>

## Errors

> **Retry policy:** Never retry 4xx — fix the request and resubmit. Retry 5xx with exponential backoff (start 5s, max 3 attempts).

| Status | `errors[0].message`                                          | What it means                                                                                                         | Recommended handling                                                                                                                 |
| ------ | ------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| 400    | `Missing required field: id`                                 | `id` not provided                                                                                                     | Fix the body, resubmit                                                                                                               |
| 400    | `Invalid ID format`                                          | The provided Short ID could not be decoded                                                                            | Fix the `id` format, resubmit                                                                                                        |
| 400    | `Invalid or missing status (must be 'active' or 'inactive')` | `status` is not `active` or `inactive`                                                                                | Use `active` or `inactive`, resubmit                                                                                                 |
| 400    | `Product X has no version in environment Y`                  | The product has no version in the targeted environment (e.g. attempting to update status of `prod` before publishing) | Publish the product to the target environment first via [Publish Product](/api-reference/endpoints/onetime-products/publish-product) |
| 404    | `Product not found`                                          | Product does not exist or is not accessible                                                                           | Verify the `id` belongs to your merchant account                                                                                     |
| 500    | `Internal server error`                                      | Unexpected server-side failure                                                                                        | Retry with exponential backoff (start 5s, max 3 attempts)                                                                            |