Google Pay push provisioning

curl --request POST \
  --globoff \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "clientAppID": "<string>",
  "clientDeviceID": "<string>",
  "clientWalletAccountID": "<string>",
  "tokenRequestorID": "<string>",
  "googleOpaquePaymentCardRequested": true,
  "serverSessionId": "<string>"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

payload = {
    "clientAppID": "<string>",
    "clientDeviceID": "<string>",
    "clientWalletAccountID": "<string>",
    "tokenRequestorID": "<string>",
    "googleOpaquePaymentCardRequested": True,
    "serverSessionId": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    clientAppID: '<string>',
    clientDeviceID: '<string>',
    clientWalletAccountID: '<string>',
    tokenRequestorID: '<string>',
    googleOpaquePaymentCardRequested: true,
    serverSessionId: '<string>'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'clientAppID' => '<string>',
    'clientDeviceID' => '<string>',
    'clientWalletAccountID' => '<string>',
    'tokenRequestorID' => '<string>',
    'googleOpaquePaymentCardRequested' => true,
    'serverSessionId' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

	payload := strings.NewReader("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "digitizationData": "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",
  "paymentInstrument": "<string>",
  "googleOpaquePaymentCard": "<string>"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "JSON parse error: Unexpected character...",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0400",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

POST

wallet

{cardId}

provision

googlepay

Google Pay push provisioning

curl --request POST \
  --globoff \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "clientAppID": "<string>",
  "clientDeviceID": "<string>",
  "clientWalletAccountID": "<string>",
  "tokenRequestorID": "<string>",
  "googleOpaquePaymentCardRequested": true,
  "serverSessionId": "<string>"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

payload = {
    "clientAppID": "<string>",
    "clientDeviceID": "<string>",
    "clientWalletAccountID": "<string>",
    "tokenRequestorID": "<string>",
    "googleOpaquePaymentCardRequested": True,
    "serverSessionId": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    clientAppID: '<string>',
    clientDeviceID: '<string>',
    clientWalletAccountID: '<string>',
    tokenRequestorID: '<string>',
    googleOpaquePaymentCardRequested: true,
    serverSessionId: '<string>'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'clientAppID' => '<string>',
    'clientDeviceID' => '<string>',
    'clientWalletAccountID' => '<string>',
    'tokenRequestorID' => '<string>',
    'googleOpaquePaymentCardRequested' => true,
    'serverSessionId' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay"

	payload := strings.NewReader("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/{cardId}/provision/googlepay")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"clientAppID\": \"<string>\",\n  \"clientDeviceID\": \"<string>\",\n  \"clientWalletAccountID\": \"<string>\",\n  \"tokenRequestorID\": \"<string>\",\n  \"googleOpaquePaymentCardRequested\": true,\n  \"serverSessionId\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "digitizationData": "eyJmdW5kaW5nQWNjb3VudEluZm8iOnsiZW5jcnlwdGVkUGF5bG9hZCI6eyJlbmNyeXB0ZWRLZXkiOiIwNDhmYjgyZDUzYmE1MjE4MDVhMWU3ZTAxMGZiYjQ2MTEyZWMzYzBiOWM3MjJhNWVkMDgwN2JhYTUyYmY3ZDFiMWMxZGFhYzVkNTQwOGVlZTc2MWIzODUwMTIxYjIwM2IyNmQwZTZiODYzNzIyNzUxY2I3NGE4YThiY2I3NDIxMmFiMDgxZGQ0ZjU1ZTM2ZDhiZjE2Mzc0Mzk0ZGQ3YjA2ZjRiYzAwZjM5YTUwZTI5NDk3MzRiYWMyZWVhY2Y3ZjIxMWFmMjQ0NGQwYmUxZTk2YzBhM2NkNjQwNmU3NGM2ZTkxZGI4OTRmNWE4MTBjOTY0ZGY4ODdjMDBjMzdkZTVkNTI5MTk3MGYyNDMyOTVlNGI3MzgzNmEyYzJiMDhmZTFmNjc5ZjRiMjkwMzhhODdjYTgwMjg3ZTExZDgzYzcxODkyMDk0NTEzNjIyYWU4OWM0NTk3ZmM1MWY0NDA3Y2ZhZWZiZmNkZTkxYjJhNDNhMTQ3NjNkY2E2Y2Q4YWM2MDk3MmRmZDUxNmZmNWI5YjQzZDliOGM5Yzg5ZjYxY2NkNmEyMzA3YTQ4YTVlYzRlNDZlYzE4MmI0Yjk1YmQ0ZGEyNTA3YjZjNzlhMjY1YzBjOWRkYThiYjZhNmM3M2U0NDhiY2E0OGFjZGMzY2U4YTQ1MGE3YjllYjVkYjQ3ZWFjZSIsIml2IjoiNzRlZGU5ZDUyNDc4Yjk4ZTQ1NDEzYzIyMDcwNzlkYmQiLCJvYWVwSGFzaGluZ0FsZ29yaXRobSI6IlNIQTI1NiIsInB1YmxpY0tleUZpbmdlcnByaW50IjoiMjI5MGExMzdiOTRiZmI3YWI0YzA2OTA5MWQ3Yjc5OWMzN2UyMWY1NGYzYmRhOGNiZDAwODZmNzk0YzE0OTkyZSIsImVuY3J5cHRlZERhdGEiOiI2YTgyYmJmMzNjZjZiMjk3MjY0ZDIwM2I1ZjU4YTMzZDdlM2NkMGU3YjNiY2E1NTJkYjQwY2NmZjg2NzI4ZDc3YjRjN2JhMzI3YTg3ZmI0MTg5ZmJjZGM5NTExYjZiZTJkZGZlOTRkODViMjBkNmFmOGRlYTM5OWE5MTAzYTQzYmRkOTc4YTNkOWM2MDlhZTQyYzUwMGJiYjNlNWVmMjhmNDg3ZmM4MDQzY2MwOWY3YTQzMjE2YzZjMWY1NDFhNTkxM2U5OGRmNzlmYzY3YjM3ZmFiY2RhNTliZDQ3Njk2YjFmMzlhYWM5NGE3ODQyNmRiOGZkNTY4NmY4NDFmNDZiZDNhMjEyMTdmYTYwYjAxMDQ0YWI4YmFkNjRmY2M0YTFhOGY2MDNkNGIzNGUyZmYwMmY1N2Y1OGQ4NzI3NWUwYTkzZDc1ZDVhOWQ2ZjIxN2M5MmEyZjZjNDViMzE3YjkzZTg2YmNlNzc5NDExM2I3ODEyYzY4NmNiODYzMzlhM2Y0MDVkMDNmZmVjZTg4NWQ4ODFlYjA5ZmM4NDQ5ZTgxMzgzYmM1ZTJhOGI0MWQ4MTUxNmRjMGI2OGExZGQxNTgyNzQwNmQ5OTNjNjU1MGZjNzA2MmNlNjZkZWVmNzAwNzNkMmNiMjQ3NmEyZjc2MGU0ODVmZDgxMzY1MTc1ZjczYTQ2ZWU4NzI4YzRjNGNhODhmMzljNTgwYzUwZjYwNDBjYWM2ZmYyZjVlNzZjZTAxYTg1YTUxYTI5NDBmMTQ4YWQ3YjFiNTRhZTM3MGY4NjlmYTJmOGFiNGVmOTE3ZjU4MjUyN2FjYjk1MTkwOGU3NTVkNmE0YmNjNzUwODBiMmFkYjMwZTg5MmMyZTM0ZDE0MTA3MGZiMjJhMWQzMmEwY2U4ZDg5Nzg3M2ZjYzFhNzRmMGFmYWE2MDU4MzZhMjY3YyJ9LCJwYW5VbmlxdWVSZWZlcmVuY2UiOm51bGwsInRva2VuVW5pcXVlUmVmZXJlbmNlIjpudWxsfSwidG9rZW5pemF0aW9uQXV0aGVudGljYXRpb25WYWx1ZSI6ImV5SjJaWEp6YVc5dUlqb2lOQ0lzSW1SaGRHRldZV3hwWkZWdWRHbHNWR2x0WlhOMFlXMXdJam9pTWpBeU5pMHdOUzB5TmxReE5qb3dPRG8wTmxvaUxDSnJaWGxCYkdsaGN5STZJakkwTVRVd05DMUZUa1pWUTBVdFRWbERUMUpGTFZSQlZpMHdOakkxSWl3aWMybG5ibUYwZFhKbElqb2liR3AwY1VSdVlYbEVUa2RhV0RWc2VYVlVjVkpyVlc1WFV6QjJZbXBKZGt3ME55dENkblJHT0UwdlR6UllUbFJGYnpjd1IxRXpZbGcxTVUxRVRUVTBSbWhJVkVZcmMwOWFjamR5YjBRelowVkpRMEpRVjI5M05qUTVLMDFuY2xseFpHSm5UMmhxVFZCVU0zZEpXWFZ3V1hSMFFqVlBVVE5CTkdKemVqUm9aMkU1WjBoNlNEUnpVazl3Ym01NGJIZE5OR0Z4VGtGUFJXVTJlRmsyU21kaFJVdzNaRTFCTTFaWGEzaEVUWEl3SzJaQ09ESmhNVTVPTTNsVFF6aFdTSGxCTmxGM2EybHhhbUZNVldFd2VTdGFNbmhIY0hBMkx6WndMM2h5T1cxSU9HSmFkbVJwTkhKUmIwUmpjMGxQUTAxbE5ETnBZVVphVERCc2FIcFJTVXhuWVVWVVpGUmxMMVo0UzFGVk0wOWFZbmN4YTFOTlZIZEVUbEYyTVZSSmIxRmhia1E0WXk4MGVuQXZOekIwU1M4NWFHSnNhME5EVWt0M1ltWjJUVUZOUzA1U1ZteFJWWFJsVWtodmFsVTFOVEpZVEhaS0x6Um5QVDBpTENKemFXZHVZWFIxY21WQmJHZHZjbWwwYUcwaU9pSlNVMEV0VTBoQk1qVTJJaXdpYVc1amJIVmtaV1JHYVdWc1pITkpiazl5WkdWeUlqb2laR0YwWVZaaGJHbGtWVzUwYVd4VWFXMWxjM1JoYlhCOFlXTmpiM1Z1ZEU1MWJXSmxjbnhoWTJOdmRXNTBSWGh3YVhKNUluMD0ifQ",
  "paymentInstrument": "<string>",
  "googleOpaquePaymentCard": "<string>"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "JSON parse error: Unexpected character...",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0400",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

x-audit-user

string

Optional audit user header

Path Parameters

cardId

string<uuid>

required

CardId for the card that should be provisioned (returned from card operation)

Body

application/json

clientAppID

string

Only applicable for VTS customers

Maximum string length: 36

clientDeviceID

string

Only applicable for VTS customers. Unique identifier for the device being provisioned.

clientWalletAccountID

string

Only applicable for VTS customers. Wallet account identifier for the cardholder.

tokenRequestorID

string

Only applicable for VTS customers. Visa-assigned Token Requestor ID (TRID) for the target wallet.

Maximum string length: 11

Pattern: ^[0-9]{1,11}$

googleOpaquePaymentCardRequested

boolean

Unified Push Provisioning (UPP). Whether to also generate and return a Google OPC so the cardholder's FPAN can be saved to their Google Account.

serverSessionId

string

Unified Push Provisioning (UPP). Session identifier used by Google when generating the Google OPC. Required and must contain at least one non-whitespace character when googleOpaquePaymentCardRequested is true; otherwise ignored. Missing, empty, or whitespace-only values return HTTP 400 when OPC is requested.

Response

digitizationData

string | null

Mastercard (MDES) path: Base64 encoded JSON containing card digitisation data. Populated when the card belongs to a Mastercard program; null on the Visa path.

Example:

"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"

paymentInstrument

string

Visa (VTS) path: Compact JWE string (A256GCMKW/A256GCM) to pass to the VTS Enroll API. Populated when the card belongs to a Visa program. Absent on the Mastercard path. The wallet must call VTS Enroll within 3 minutes of receiving it (the encrypted data expires 20 minutes after issue) with panSource=ISSUER_PUSH_PROVISION, and the clientWalletAccountID / clientDeviceID in the Enroll request must match the values supplied in this provisioning request.

googleOpaquePaymentCard

string

Unified Push Provisioning (UPP). Present only when googleOpaquePaymentCardRequested was set on the request. PGP-signed, Google-encrypted payload used by Google to save the cardholder's FPAN to their Google Account.

Introduction

Cards API

Cardholders API

PIN API

Wallet API

Transaction Lifecycle

Spend Controls API

Exchange Rates API

Fee Configuration

Google Pay push provisioning

Authorizations

Headers

Path Parameters

Body

Response