Compliance restrictions

Returns the platform's per-capability regional restriction facts: capability, deniedCountries (ISO 3166-1 alpha-2 list) and defaultDecision (allow or deny for countries not listed). The list is generated from the platform compliance policy in real time and only exposes decisions, never internal rationale.

Related endpoints

• GET /cash/v1/content/compliance/restrictions/{capability} — one capability.
• GET /cash/v1/content/compliance/matrix — the full capability × country matrix (capabilities, defaults, countries[].decisions) that drives the website's Restricted Regions page; cached for 60 s.
• GET /cash/v1/compliance/access — whether website access is allowed for the requester's IP (per-IP, uncached).

Merchant requests that hit a denied capability receive 451 CASH_COMPLIANCE_REGION_RESTRICTED.

{
  "ok": true,
  "code": 200,
  "message": "OK",
  "data": [
    {
      "capability": "exchange.crypto",
      "deniedCountries": [
        "KP",
        "IR"
      ],
      "defaultDecision": "allow"
    },
    {
      "capability": "card.issuing",
      "deniedCountries": [],
      "defaultDecision": "deny"
    }
  ]
}

curl -X GET 'https://api.moin.cash/cash/v1/content/compliance/restrictions'