Inbound AS2 endpoint: receives an EDI document over AS2 and returns a
synchronous MDN receipt. Unauthenticated by transport design — AS2 partners are identified by their AS2-From/AS2-To headers (and, once the Security seam lands,…
POST
synchronous MDN receipt.
Unauthenticated by transport design — AS2 partners are identified by their
AS2-From/AS2-To headers (and, once the Security seam lands, by their
S/MIME signature), not by our bearer token. Per AS2 semantics the MDN is
returned with HTTP 200 even when the EDI is rejected; the disposition
inside the MDN carries the accept/reject verdict. Only transport-level
failures produce a non-200.