# Submit attestations

`POST /accounts/{accountID}/bank-accounts/{bankAccountID}/attestations`

API version: `v2026.10.00`. Send `X-Moov-Version: v2026.10.00` to get the behavior described here.

> AI agents: search and read all Moov docs with the docs MCP server at https://docs.moov.io/mcp (no API key). Setup: https://docs.moov.io/guides/developer-tools/mcp-ai/docs-mcp/index.md

Submit a new authorization attestation for a bank account in an `errored` status due to an R29 ACH return (`Corporate Customer Advises Not Authorized`).

  After obtaining new authorization from the receiver, submit an attestation with the date the authorization was obtained and a brief description of how the authorization was obtained. If the attestation is accepted, the bank account transitions from `errored` to `verified`.

  Constraints

  - The bank account's current errored status must be the result of an R29 return.
  - `attestedAt` must be on or after the date of the bank account's most recent R29 return and cannot be a future date.
  - Only one attestation may be submitted for a bank account. Use the [Get attestation eligibility](https://docs.moov.io/api/sources/bank-accounts/attestation-eligibility/) endpoint to confirm eligibility before submitting an attestation.

  This endpoint is available only to allowlisted partners. Contact Moov Support for more information.

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `X-Moov-Version` | header | string |  | Set this header to v2026.10.00 to use the API described in this specification. When omitted, the server defaults to v2024.01.00, the earliest supported version, which may not match the behavior documented here. An unrecognized well-formed version uses the latest supported version that is not newer than the requested version, when one exists. For example, `v2026.08.00` uses `v2026.07.00`. A malformed value, such as `2022`, returns a `404` response. Values: `v2026.10.00`. |
| `accountID` | path | string | Yes |  |
| `bankAccountID` | path | string | Yes |  |

## Request body

Content type: `application/json`

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `attestedAt` | string (date) | Yes | Date on which new authorization was obtained from the receiver, formatted as YYYY-MM-DD. |
| `description` | string | Yes | Freeform text description describing how the authorization was obtained. |

## Response 200

The request completed successfully.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `attestationID` | string | Yes | ID of the created attestation. |
| `bankAccountID` | string | Yes | ID of the bank account the attestation belongs to. |
| `accountID` | string | Yes | ID of the Moov account the bank account is linked to. |
| `createdOn` | string (date-time) | Yes | Timestamp at which the attestation was created. |
| `attestedAt` | string (date) | Yes | Date on which new authorization was obtained from the receiver, formatted as YYYY-MM-DD. |
| `description` | string | Yes | Freeform text description describing how the authorization was obtained. |

## Errors

| Status | Meaning |
| --- | --- |
| 400 | The server could not understand the request due to invalid syntax. |
| 401 | The request contained missing or expired authentication. |
| 403 | The user is not authorized to make the request. |
| 404 | The requested resource was not found. |
| 409 | The request conflicted with the current state of the target resource. |
| 422 | The request was well-formed, but the contents failed validation. Check the request for missing or invalid fields. |
| 429 | Request was refused due to rate limiting. |
| 500 | The request failed due to an unexpected error. |
| 504 | The request failed because a downstream service failed to respond. |

## Examples

### cURL

```bash
curl -X POST "https://api.moov.io/accounts/{accountID}/bank-accounts/{bankAccountID}/attestations" \
  -H "Authorization: Bearer {token}" \
  -H "X-Moov-Version: v2026.10.00" \
  -d '{
  "attestedAt": "2026-05-15",
  "description": "string"
}'
```

### Typescript (SDK)

```typescript
import { Moov } from "@moovio/sdk";

const moov = new Moov({
  security: {
    username: "",
    password: "",
  },
});

async function run() {
  const result = await moov.bankAccounts.createAttestation({
    accountID: "<id>",
    bankAccountID: "<id>",
    createBankAccountAttestation: {
      attestedAt: new Date("2026-05-15"),
      description: "each duh famously athwart",
    },
  });

  console.log(result);
}

run();
```

Full reference with SDK examples in every language: https://docs.moov.io/api/v2026.10.00/sources/bank-accounts/submit-attestation/