Expedia Group OrderPurchaseScreen API is one of 15 APIs that Expedia Group publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include OrderPurchaseScreen. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.
This API exposes
1 operation
across 1 path,
and defines 41 schemas.
It is described by OpenAPI 3.2.0, at version v2.
Requests are made against a single base URL, https://api.sandbox.expediagroup.com/fraud-prevention/v2.
1 operations1 paths41 schemas1 POST
Metadata
The identity and technical contract details declared by the specification.
Expedia Group OrderPurchaseScreen API declares
2 security schemes
for authenticating requests.
It supports OAuth 2.0 (orderPurchaseScreenAuth) using the clientCredentials flow, exposing 1 scope.
It supports OAuth 2.0 (orderPurchaseUpdateAuth) using the clientCredentials flow, exposing 1 scope.
Paths & Operations 1
Across 1 path, the API surfaces 1 operation — 1 POST. Each is listed below with its method, path, parameters, and response codes.
OrderPurchaseScreen 1
POST
/order/purchase/screen
Expedia Group Run fraud screening for one transaction
screenbody→ 200401403404429500502503
Schemas 41
The contract defines 41 schemas that model the data the API accepts and returns. The most detailed are Payment (11 properties), Telephone (9 properties), Traveler (8 properties), CustomerAccount (7 properties). Each schema is shown below with its type and property counts.
PaymentStatus
string
The status of the payment operation.
Address
object
7 properties
InternalServerError
Indicates that the API encountered an unexpected condition that prevented it from fulfilling the request. Sometimes used as a generic catch-allerror type when…
Name
object
Group of attributes intended to hold information about a customer or traveler's name for the order.
5 properties2 required
UnauthorizedError
Indicates that the token sent in the 'Authorization' header is either invalid or missing. Please check the value in the token field along with the token expira…
OrderPurchaseScreenResponse
object
2 properties
PaymentReason
string
The reason of payment. Possible values: - FULL - If the amount is paid i full for the order - DEPOSIT - The initial payment. Amount to be paid up front. - SCHE…
BadGatewayError
Indicates that the server received an invalid response from the upstream server. Causes could be incorrectly configured target server at gateway, EOF exception…
Authorize
Authorize operation on the payment. An authorize operation represents placing the funds on hold with the specified form of payment.
Error
object
The object used to describe an error, containing both human-readable and machine-readable information.
2 properties2 required
PaymentThreeDSCriteria
object
Payment ThreeDS criteria attributes.
2 properties
TravelProduct
object
The type field value is used as a discriminator, with the following mapping: CRUISE: Cruise AIR: Air CAR: Car INSURANCE: Insurance HOTEL: Hotel RAIL: Rail ACTI…
6 properties4 required
RetryableOrderPurchaseScreenFailure
Indicates that the API is either down for maintenance or overloaded and cannot fulfill the request at the current time. This is a temporary error and retrying…
Operations
object
All operations related to a payment throughout its lifespan. An operation represents an event external to Fraud Prevention Service that specifies to perform a…
5 properties
NotFoundError
Indicates that the API cannot find the resource that is either being requested or against which the operation is being performed. Please check the request agai…
TravelProductType
string
Type of product.
Verify
A verify operation represents the intent to verify the payment associated with this transaction.
Traveler
object
8 properties2 required
PaymentOperation
object
3 properties
SiteInfo
object
2 properties2 required
PaymentOutcome
object
3 properties
Capture
Capture operation on the payment. A capture operation represents a notification received usually from a 3rd party payment processor to indicate that the funds…
OrderPurchaseScreenRequest
object
1 property1 required
AuthorizeReversal
Authorize Reversal operation on the payment. An authorize reversal operation represents a notification received usually from a 3rd party payment processor to i…
TooManyRequestsError
Indicates that the API cannot fulfill the request because server resources have been exhausted. Perhaps the client has sent too many requests in a given amount…
TransactionDetails
object
6 properties5 required
TelephonePlatformType
string
Classification of the phone platform.
GatewayTimeoutError
Indicates that the API gateway has issues completing the request on time. Request can be retried if it is idempotent, If the issue persists, please reach out t…
TelephoneType
string
Classification of the phone (e.g. Home, Mobile).
VerificationType
string
The type of the verification used to verify the instrument. If the Card Verfication Value was provided to verify the credit card used for the transaction, type…
PaymentMethod
string
The payment method used at the time of purchase for the transaction. Supported method's are: CREDITCARD, PAYPAL, POINTS, GIFTCARD, INTERNETBANKPAYMENT, DIRECTD…
Payment
object
The method field value is used as a discriminator, with the following mapping: CREDITCARD: CreditCard PAYPAL: PayPal POINTS: Points GIFTCARD: GiftCard INTERNET…
11 properties5 required
Amount
object
2 properties2 required
Refund
Refund operation on the payment. A refund operation represents the intent to refund a previous charge.
DeviceDetails
object
3 properties1 required
FraudDecision
string
CustomerAccount
object
7 properties3 required
ForbiddenError
Indicates that the API cannot fulfill the request because while the client is correctly authenticated, the client doesn't have the permission to execute the sp…
BadRequestError
Indicates that a bad request occurred. Typically it is an invalid parameter.
OrderPurchaseTransaction
object
4 properties4 required
Telephone
object
Group of attributes intended to hold information about phone number associated with the transaction. A user can have one to many phone numbers (home, work, mob…
9 properties3 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Expedia Group OrderPurchaseScreen API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
