Skip to main content
This page is the resolution target of the RFC 9457 type URI on every confirm_token_invalid problem body: https://docs.get-exo.com/errors/confirm_token_invalid. HTTP status: 422 Unprocessable Content.

Why it happens

A destructive confirm requires the token from a recent dry run of the same scope. Tokens are short-lived and single use. This is deliberately not replayable by Idempotency-Key: a repeated destructive act must be a repeated deliberate act.

How to fix it

  • Run the dry run again and use the fresh confirmToken before its expiresAt.
  • Send the token exactly as returned. It is opaque.