curl --request POST \
--url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"cardIds": [
"20218aae-b15e-406c-9e9f-23735cd86a48"
],
"availablePushMethods": [
"WEB"
]
}
'import requests
url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors"
payload = {
"cardIds": ["20218aae-b15e-406c-9e9f-23735cd86a48"],
"availablePushMethods": ["WEB"]
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
cardIds: ['20218aae-b15e-406c-9e9f-23735cd86a48'],
availablePushMethods: ['WEB']
})
};
fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'cardIds' => [
'20218aae-b15e-406c-9e9f-23735cd86a48'
],
'availablePushMethods' => [
'WEB'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors"
payload := strings.NewReader("{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}"
response = http.request(request)
puts response.read_body{
"tokenRequestors": [
{
"tokenRequestorId": "50123456789",
"name": "Sunrise Ave. Ltd",
"consumerFacingEntityName": "Happy Sunrise Online",
"tokenRequestorType": "MERCHANT",
"walletId": "123",
"enabledAccountRanges": [
5412346789000000000
],
"programIds": [
[
"67fb672b-9148-4a80-8ccf-761e8bd308cb",
"f96584be-d56f-4ca1-9bfd-b708f6a32d25"
]
],
"supportsMultiplePushedCards": true,
"supportedAccountHolderData": [
"ADDRESS"
],
"supportsCardHolderAuthentication": true,
"availablePushMethods": [
{
"type": "WEB",
"uri": "http://www.tokenrequestor1.com/pushtoken"
}
],
"mediaContents": [
{
"type": "image/png",
"data": "iVBORw0KGgoAAAANSUhEUgAAAXcAAAF3CAIAAADRopypAAAABGdBTUEAANbY1E9YMgAAAAlwSFlzAAAASAAAAEgARslrPgAAGtNJREFUeNrt3W9oW",
"height": "192",
"width": "192"
}
]
}
]
}{
"type": "about:blank",
"title": "Forbidden",
"status": 403,
"detail": "Access Denied",
"instance": "/v1/cards",
"id": "5cc541cb-f456-4331-b537-d2380fca0403",
"timestamp": "2026-02-24T12:34:56Z"
}{
"type": "about:blank",
"title": "Internal Server Error",
"status": 500,
"detail": "Unexpected error occurred.",
"instance": "/v1/cards",
"id": "5cc541cb-f456-4331-b537-d2380fca0500",
"timestamp": "2026-02-24T12:34:56Z"
}List Eligible Token Requestors
Send a request to this endpoint to return a list of eligible token requestors (Samsung Pay and/order Click to Pay), as available for the specific card program.
curl --request POST \
--url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"cardIds": [
"20218aae-b15e-406c-9e9f-23735cd86a48"
],
"availablePushMethods": [
"WEB"
]
}
'import requests
url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors"
payload = {
"cardIds": ["20218aae-b15e-406c-9e9f-23735cd86a48"],
"availablePushMethods": ["WEB"]
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
cardIds: ['20218aae-b15e-406c-9e9f-23735cd86a48'],
availablePushMethods: ['WEB']
})
};
fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'cardIds' => [
'20218aae-b15e-406c-9e9f-23735cd86a48'
],
'availablePushMethods' => [
'WEB'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors"
payload := strings.NewReader("{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/wallet/mdestokenconnect/requestors")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"cardIds\": [\n \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n ],\n \"availablePushMethods\": [\n \"WEB\"\n ]\n}"
response = http.request(request)
puts response.read_body{
"tokenRequestors": [
{
"tokenRequestorId": "50123456789",
"name": "Sunrise Ave. Ltd",
"consumerFacingEntityName": "Happy Sunrise Online",
"tokenRequestorType": "MERCHANT",
"walletId": "123",
"enabledAccountRanges": [
5412346789000000000
],
"programIds": [
[
"67fb672b-9148-4a80-8ccf-761e8bd308cb",
"f96584be-d56f-4ca1-9bfd-b708f6a32d25"
]
],
"supportsMultiplePushedCards": true,
"supportedAccountHolderData": [
"ADDRESS"
],
"supportsCardHolderAuthentication": true,
"availablePushMethods": [
{
"type": "WEB",
"uri": "http://www.tokenrequestor1.com/pushtoken"
}
],
"mediaContents": [
{
"type": "image/png",
"data": "iVBORw0KGgoAAAANSUhEUgAAAXcAAAF3CAIAAADRopypAAAABGdBTUEAANbY1E9YMgAAAAlwSFlzAAAASAAAAEgARslrPgAAGtNJREFUeNrt3W9oW",
"height": "192",
"width": "192"
}
]
}
]
}{
"type": "about:blank",
"title": "Forbidden",
"status": 403,
"detail": "Access Denied",
"instance": "/v1/cards",
"id": "5cc541cb-f456-4331-b537-d2380fca0403",
"timestamp": "2026-02-24T12:34:56Z"
}{
"type": "about:blank",
"title": "Internal Server Error",
"status": 500,
"detail": "Unexpected error occurred.",
"instance": "/v1/cards",
"id": "5cc541cb-f456-4331-b537-d2380fca0500",
"timestamp": "2026-02-24T12:34:56Z"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
Optional audit user header
Body
List of card IDs to filter the eligible token requestors.
List of push methods supported by the token requestors — filters the token requestors that support at least one the methods sent in the request. Possible values are: * "ANDROID": The URI is an Android app intent. * "IOS": The URI is an iOS app intent. * "WEB": The URI is a browser URL.
The push method type corresponding to the URI supported by the token requestor. The array is absent if the token requestor does not support MDES Token Connect. Possible values are:
- "ANDROID": The URI is an Android app intent.
- "IOS": The URI is an iOS app intent.
- "WEB": The URI is a browser URL.
ANDROID, IOS, WEB Response
OK
List of eligible Token Requestors.
Show child attributes
Show child attributes
Was this page helpful?

