docs(sca): document Strong Customer Authentication for EU customers

[jklein24]

Summary

A full, EU-scoped Strong Customer Authentication guide in the Mintlify docs. Stacks on #600 and documents the SCA surface added in #558/#600. What began as a single per-transaction snippet is now a dedicated guide section covering the whole SCA surface the API exposes, mirroring the structure of the reference docs it wraps (Striga's SCA docs).

What's added

A new "Strong Customer Authentication" group under the Get started tab (docs.json), with six pages under platform-overview/sca/:

• overview — region scoping (EU / EUR / USDC), a "what SCA covers" table, factors + dynamic linking, a Mermaid flow diagram of the authorize loop, and lifetimes/limits + error tables.
• per-transaction-authorization — reuses the existing snippets/sca/strong-customer-authentication.mdx as the single source (the three money-movement flow pages still import the same snippet, so they're unchanged): PENDING_AUTHORIZATION + scaChallenge, the status-driven authorize loop, inline vs. after-the-fact proof, resend, realtime-funding quotes, sandbox 123456.
• factor-enrollment — TOTP + passkey enrollment (start/confirm), factor list/delete.
• login-and-sessions — SCA login + the session it grants, plus account-security (record-event) signals and the lockout ladder.
• trusted-beneficiaries — trust and untrust as start → confirm (keyed by externalAccountId).
• two-factor-reset — liveness-gated start → poll → complete.

Review addressed

Incorporated the review on the guide:

• Bounded the 2FA-reset poll loop (stop at expiresAt / client timeout; restart if the window closes before liveness passes).
• Clarified the failed-login counter is cumulative and cleared only by RESET_PASSWORD_COMPLETED, not by a successful login.
• Untrust is now documented as start → confirm — backed by the new startBeneficiaryUntrust endpoint added to feat(sca): SCA management surface — enrollment, login/session, beneficiary trust, 2FA reset #600 (previously SMS/passkey had no way to obtain the untrust challenge).
• Fixed MD031/MD040 markdownlint violations on the new fenced code blocks.

Prose pass: em-dashes and AI-tell phrasing removed across the pages and the shared snippet.

Validation

• markdownlint-cli2 passes clean on all SCA pages.
• mint broken-links adds zero new broken links (pre-existing ones are unrelated and untouched).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
grid-flow-builder	Ignored	Preview	Jul 16, 2026 8:04pm
grid-wallet-demo	Ignored	Preview	Jul 16, 2026 8:04pm

[jklein24]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• docs(sca): document Strong Customer Authentication for EU customers #683 👈 (View in Graphite)
• feat(sca): SCA management surface — enrollment, login/session, beneficiary trust, 2FA reset #600
• feat(sca): add Strong Customer Authentication surface #558
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[jklein24]

@greptile review

[greptile-apps]

Greptile Summary

⚔️ SCA OR FACE THE VOID ⚔️ \m/ (ಠ益ಠ) \m/

This PR documents Strong Customer Authentication for EU money movement. The main changes are:

• Adds a reusable SCA guide covering factors, authorization loops, resend flows, and trusted beneficiaries.
• Includes the guide in three relevant payment and conversion pages.
• Guards realtime-funding instructions until SCA authorization completes.
• Documents separate resend endpoints for transactions and quotes.

Confidence Score: 5/5

This looks safe to merge.

• The realtime-funding example no longer reads withheld payment instructions.
• The resend guide now includes the quote-scoped endpoint.
• The shared snippet imports follow existing MDX conventions.
• No blocking issues remain in the changed code.

Important Files Changed

Filename	Overview
mintlify/snippets/sca/strong-customer-authentication.mdx	Adds the reusable EU SCA guide and documents both quote- and transaction-scoped authorization flows.
mintlify/ramps/conversion-flows/fiat-crypto-conversion.mdx	Adds the SCA guide and prevents access to withheld payment instructions while authorization is pending.
mintlify/payouts-and-b2b/payment-flow/send-payment.mdx	Adds the shared SCA section to the payment flow.
mintlify/global-p2p/sending-receiving-payments/sending-payments.mdx	Adds the shared SCA section to the global P2P payment flow.

_{Reviews (3): Last reviewed commit: "docs(sca): guard the fiat-to-crypto paym..." | Re-trigger Greptile}

[jklein24]

@greptile review

[jklein24]

@greptile review

[jklein24]

Request changes