Google Pay push provisioning

curl --request POST \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "clientAppID": "<string>",
  "clientDeviceID": "<string>",
  "clientWalletAccountID": "<string>",
  "tokenRequestorID": "<string>"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

payload = {
    "clientAppID": "<string>",
    "clientDeviceID": "<string>",
    "clientWalletAccountID": "<string>",
    "tokenRequestorID": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    clientAppID: '<string>',
    clientDeviceID: '<string>',
    clientWalletAccountID: '<string>',
    tokenRequestorID: '<string>'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'clientAppID' => '<string>',
    'clientDeviceID' => '<string>',
    'clientWalletAccountID' => '<string>',
    'tokenRequestorID' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

	payload := strings.NewReader("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "digitizationData": "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",
  "paymentInstrument": "<string>"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

POST

wallet

{cardId}

provision

googlepay

Google Pay push provisioning

curl --request POST \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "clientAppID": "<string>",
  "clientDeviceID": "<string>",
  "clientWalletAccountID": "<string>",
  "tokenRequestorID": "<string>"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

payload = {
    "clientAppID": "<string>",
    "clientDeviceID": "<string>",
    "clientWalletAccountID": "<string>",
    "tokenRequestorID": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    clientAppID: '<string>',
    clientDeviceID: '<string>',
    clientWalletAccountID: '<string>',
    tokenRequestorID: '<string>'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'clientAppID' => '<string>',
    'clientDeviceID' => '<string>',
    'clientWalletAccountID' => '<string>',
    'tokenRequestorID' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

	payload := strings.NewReader("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "digitizationData": "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",
  "paymentInstrument": "<string>"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

x-audit-user

string

Optional audit user header

Path Parameters

cardId

string<uuid>

required

CardId for the card that should be provisioned (returned from card operation)

Body

application/json

clientAppID

string

Only applicable for VTS customers

Maximum string length: 36

clientDeviceID

string

Only applicable for VTS customers. Unique identifier for the device being provisioned.

clientWalletAccountID

string

Only applicable for VTS customers. Wallet account identifier for the cardholder.

tokenRequestorID

string

Only applicable for VTS customers. Visa-assigned Token Requestor ID (TRID) for the target wallet.

Maximum string length: 11

Pattern: ^[0-9]{1,11}$

Response

digitizationData

string | null

Mastercard (MDES) path: Base64 encoded JSON containing card digitisation data. Populated when the card belongs to a Mastercard program; null on the Visa path.

Example:

"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"

paymentInstrument

string

Visa (VTS) path: Compact JWE string (A256GCMKW/A256GCM) to pass to the VTS Enroll API. Populated when the card belongs to a Visa program. Absent on the Mastercard path. The wallet must call VTS Enroll within 3 minutes of receiving it (the encrypted data expires 20 minutes after issue) with panSource=ISSUER_PUSH_PROVISION, and the clientWalletAccountID / clientDeviceID in the Enroll request must match the values supplied in this provisioning request.

⌘I

Introduction

Cards API

Cardholders API

PIN API

Wallet API

Transaction Lifecycle

Spend Controls API

Exchange Rates API

Google Pay push provisioning

Authorizations

Headers

Path Parameters

Body

Response