Manage holder authorization for MPTs that require issuer approval.
When an MPT is created with lsfMPTRequireAuth, holders cannot receive tokens until the issuer explicitly authorizes them. This enables controlled distribution and compliance workflows.
Authorization is a two-step process:
- Holder opt-in — The holder submits
MPTokenAuthorizeto express interest in the MPT. - Issuer approval — The issuer submits
MPTokenAuthorizewith the holder's address to grant permission.
If lsfMPTRequireAuth is not set, holders can receive tokens after their own opt-in without issuer approval.
- You are the issuer of the MPT
- The MPT has
lsfMPTRequireAuthenabled - The holder has already submitted their opt-in
MPTokenAuthorize
To authorize a holder:
Go to Accounts and open the issuer account.
Click Create order and select Ledger-specific operations.
In Ledger, select the XRP Ledger network.
In Operation, select Authorize holder.
In Holder, select the holder's account.
Select the token:
- Listed asset — Select the token from the list.
- Unlisted asset — Enter the token's issuance ID.

Select a Fee Strategy, then click Submit for approval and sign the operation with the app. The signing window shows the operation as MPT Authorize with the setting Authorize holder.

When the transaction is confirmed, the issuer and other authorized holders can send the token to the holder.
To revoke a holder's authorization in the UI, follow the same steps and select Revoke holder in Operation. The signing window shows the setting Unauthorize holder.

To authorize a holder to receive your MPT, submit an MPTokenAuthorize transaction:
{
"payload": {
"id": "{{intent_id}}",
"accountId": "{{issuer_account_id}}",
"ledgerId": "xrpl-testnet",
"parameters": {
"type": "XRPL",
"feeStrategy": {
"priority": "Medium",
"type": "Priority"
},
"memos": [],
"operation": {
"type": "MPTokenAuthorize",
"tokenIdentifier": {
"issuanceId": "000004C463C52827307480341125DA0577AFFC21D4B2D083",
"type": "MPTokenIssuanceId"
},
"holder": {
"address": "rHolderAddress...",
"type": "Address"
},
"flags": []
}
},
"customProperties": {},
"type": "v0_CreateTransactionOrder"
}
}| Field | Type | Required | Description |
|---|---|---|---|
tokenIdentifier.issuanceId | string | Conditional | The 192-bit MPT issuance ID. Required when tokenIdentifier.type is MPTokenIssuanceId. |
tokenIdentifier.type | string | Yes | MPTokenIssuanceId to identify the MPT by its issuance ID, or TickerId to identify it by its ticker ID. With TickerId, set tokenIdentifier.tickerId in place of tokenIdentifier.issuanceId. |
holder | object | Yes | The holder to authorize. |
holder.type | string | Yes | One of: Account (internal account UUID), Address (XRPL address), or Endpoint (endpoint UUID). |
holder.address | string | Conditional | The holder's XRPL address to authorize. Required when holder.type is Address. |
holder.accountId | string | Conditional | Internal account UUID. Required when holder.type is Account. |
holder.endpointId | string | Conditional | Endpoint UUID. Required when holder.type is Endpoint. |
flags | array | Yes | Empty array [] for authorization. |
To revoke a holder's authorization, include the tfMPTUnauthorize flag:
{
"operation": {
"type": "MPTokenAuthorize",
"tokenIdentifier": {
"issuanceId": "000004C463C52827307480341125DA0577AFFC21D4B2D083",
"type": "MPTokenIssuanceId"
},
"holder": {
"address": "rHolderAddress...",
"type": "Address"
},
"flags": ["tfMPTUnauthorize"]
}
}Revoking authorization does not remove the holder's tokens. Use clawback to recover tokens before revoking if needed.
A successful request returns the transaction order with status Pending. After confirmation, the holder can receive tokens from the issuer or other authorized holders.
- Multi-purpose tokens — Overview of MPT operations.
- Authorize MPT (holder) — Holder-side authorization.
- Mint tokens — Issue tokens to authorized holders.
- MPTokenAuthorize — XRPL transaction reference.