Auto-load (Auto-recharge)

Auto-load automatically tops up a user's wallet by charging their saved card off-session whenever the balance drops below a threshold — so metered features never stall on an empty wallet.

GET  https://api.misar.io/io/wallet/autoload
PUT  https://api.misar.io/io/wallet/autoload

How it works

1. Save a card. The first manual top-up runs Checkout with setup_future_usage: off_session, so the buyer's card is attached to a Stripe Customer and saved. The webhook stores the customer + card on the wallet.
2. Enable auto-load. PUT /io/wallet/autoload with enabled: true, a threshold (credits) and an amountDollars (dollars to charge). Enabling requires a saved card.
3. Trigger. When a deduct drops the balance below the threshold, the wallet atomically claims the charge (under the wallet row lock, with a 5-minute cooldown so concurrent deducts can't double-charge) and creates an off-session PaymentIntent on the saved card. Credits are granted through the same idempotent top_up_wallet path as a manual top-up (keyed on the PaymentIntent id).
4. Recover from failure. A declined charge is recorded; after 3 consecutive failures auto-load disables itself and the user is emailed to update their card.

Authentication

SSO bearer (own config) or service key (+ user_id).

Authorization: Bearer <sso_access_token>
# — or —
x-wallet-service-key: <WALLET_SERVICE_KEY>   # with ?user_id=<uuid> / body.user_id

GET — read the configuration

curl "https://api.misar.io/io/wallet/autoload" \
  -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "enabled": true,
  "threshold": 10,
  "amountDollars": 50,
  "hasPaymentMethod": true,
  "cardBrand": "visa",
  "cardLast4": "4242",
  "failureCount": 0,
  "lastError": null,
  "lastSuccessAt": "2026-07-27T09:14:22.000Z"
}

PUT — update the configuration

curl -X PUT "https://api.misar.io/io/wallet/autoload" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "enabled": true, "threshold": 10, "amountDollars": 50 }'

Returns the updated config (same shape as GET).

Emails

Every auto-load money event emails the user (via the central api.misar.io/mail/v1/send from no-reply@trans.misar.io):