Outgoing token event webhook endpoint
This is not an endpoint. This is the description of a request that is sent to subscribed webhooks upon token creation or update.
Download OpenAPI specification
Body
Token event
A unique identifier for the token assigned by the Token Service Provider (TSP) (eg. Visa or MC) to manage the lifecycle of the token.
1 - 64^[A-Za-z0-9_-]+$"DWSPMC00000000010906a349d9ca4eb1a4d53e3c90a11d9c"
Identifier used by merchants or wallet providers to request tokens from the TSP.
"212345678"
Code of the wallet provider or merchant that requested the token (APPLE_PAY /GOOGLE_PAY/SAMSUNG_PAY/OTHER). OTHER is used for tokens not linked to a wallet provider, such as merchant tokens (credential-on-file, subscription payments) or cloud tokens (e.g., Mastercard APANs).
APPLE_PAY, GOOGLE_PAY, SAMSUNG_PAY, OTHER "APPLE_PAY"
Current status of the token:
- ACTIVE - Available for payments
- DEACTIVATED - Permanently deactivated
- INACTIVE - Waiting for activation
- SUSPENDED - Temporarily not available for payments
ACTIVE, DEACTIVATED, INACTIVE, SUSPENDED "ACTIVE"
The last 4 digits of the tokenised PAN (DPAN) used for display and identification purposes.
"7890"
The Device Primary Account Number (DPAN) represents the tokenised card number assigned by the payment network (Visa, Mastercard, etc.) when a card is added to a digital wallet. It replaces the original funding PAN (FPAN) in wallet transactions.
"5412345678901234"
If the token was deleted from the consumer app
The wallets common name for authorization decision.
GREEN, YELLOW, ORANGE, RED "YELLOW"
The id of the card associated with the token.
"20218aae-b15e-406c-9e9f-23735cd86a48"
Device information.
The timestamp when the token was created by the TSP.
The timestamp of the most recent update to the token’s status.
The version number of the entity.
1
Response
Event processed successfully.

