curl --request POST \
  --url https://api.example.com/spi/v1/balance-locks \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-Idempotency: <x-idempotency>' \
  --data '
{
  "request_ref": "med-2026-000123-hold-1",
  "external_ref": "med-2026-000123",
  "origin_system": "med-infraction",
  "end_to_end_id": "E12345678202610271032k7Qm2Xp9Ld4",
  "amount": "150.75",
  "asset": "BRL"
}
'

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/spi/v1/balance-locks"

	payload := strings.NewReader("{\n  \"request_ref\": \"med-2026-000123-hold-1\",\n  \"external_ref\": \"med-2026-000123\",\n  \"origin_system\": \"med-infraction\",\n  \"end_to_end_id\": \"E12345678202610271032k7Qm2Xp9Ld4\",\n  \"amount\": \"150.75\",\n  \"asset\": \"BRL\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Idempotency", "<x-idempotency>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {
  method: 'POST',
  headers: {
    'X-Idempotency': '<x-idempotency>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    request_ref: 'med-2026-000123-hold-1',
    external_ref: 'med-2026-000123',
    origin_system: 'med-infraction',
    end_to_end_id: 'E12345678202610271032k7Qm2Xp9Ld4',
    amount: '150.75',
    asset: 'BRL'
  })
};

fetch('https://api.example.com/spi/v1/balance-locks', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.example.com/spi/v1/balance-locks"

payload = {
    "request_ref": "med-2026-000123-hold-1",
    "external_ref": "med-2026-000123",
    "origin_system": "med-infraction",
    "end_to_end_id": "E12345678202610271032k7Qm2Xp9Ld4",
    "amount": "150.75",
    "asset": "BRL"
}
headers = {
    "X-Idempotency": "<x-idempotency>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "lock_id": "01a17cf3-128e-7c41-9b2e-5d7a3f8c1e60",
  "midaz_tx_id": "01a17cf3-133d-7a52-8e19-0c4b6d2f7a91",
  "status": "PENDING",
  "requested_amount": "150.75",
  "effective_amount": "100.26",
  "created_at": "2026-10-27T10:41:07Z"
}

{
  "code": "PIX-0030",
  "title": "Idempotency Key Required",
  "message": "The X-Idempotency header is required for this operation and must be within the accepted length."
}

{
  "type": "https://errors.lerian.studio/v1/PIX-0012",
  "title": "Conflict",
  "status": 409,
  "detail": "The entity already exists or conflicts with an existing resource.",
  "code": "PIX-0012"
}

{
  "code": "PIX-0031",
  "title": "Idempotency Key Conflict",
  "message": "The X-Idempotency header is held by a request still running or whose receipt could not be stored, or was already used with a different request."
}

{
  "code": "PIX-0016",
  "title": "Unsupported Media Type",
  "message": "The request body must be sent with Content-Type: application/json."
}

{
  "type": "https://errors.lerian.studio/v1/PIX-0013",
  "title": "Unprocessable Entity",
  "status": 422,
  "detail": "The operation could not be processed due to a business rule violation.",
  "code": "PIX-0013"
}

{
  "code": "PIX-0000",
  "title": "Internal Server Error",
  "message": "The server encountered an unexpected error. Please try again later."
}

{
  "type": "https://errors.lerian.studio/v1/PIX-0652",
  "title": "Bad Gateway",
  "status": 502,
  "detail": "The server could not complete the request. Please try again later.",
  "code": "PIX-0652"
}

{
  "code": "<string>",
  "detail": "Property foo is required but is missing.",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "https://example.com/errors/example",
  "upstream": {
    "code": "E4001",
    "message": "account not found at provider"
  }
}