---
title: "Create an authorization"
method: POST
path: "/purchases/ ​​​​​"
---

# Create an authorization

`POST /purchases/ ​​​​​`

## Headers

- `Content-Type` string

## Request body

- object
  - `amount` integer, required — Amount of the purchase in cent. Required on create
  - `reference` string, required — Reference of the transaction, required on create. Max length 255 characters.
  - `customer_ip` string, required — RFC791-compliant IP address
  - `currency` string, required — Three letter [ISO currency code](https://pmnts.readme.io/v1.0/docs/iso-currency-codes-1), in UPPERCASE
  - `card_number` string — Required on create, unless you provide a `card_token` or a `wallet` object
  - `card_holder` string — Name of the card holder
  - `card_expiry` string — Format: `MM/YYYY` Required on create, unless you provide a `card_token` or a `wallet` object
  - `card_token` string — Required on create, unless you provide a `card_number` or a `wallet` object
  - `cvv` string — CVV card number. (3/4 characters)
  - `test` boolean — Indicates if this is a test transaction
  - `wallet` object
    - `type` string, required — Name of the wallet ('ApplePay', 'GooglePay')
    - `encPaymentData` string — required for type: VISA
    - `encKey` string — required for type: VISA
    - `callid` string — required for type: VISA
    - `token` string — required for type: APPLE, GOOGLE
    - `user_id` string — required for type: MASTERPASSEXPRESS
    - `origin_url` string — required for type: MASTERPASSEXPRESS
    - `card_id` string — required for type: MASTERPASSEXPRESS
    - `address_id` string — required for type: MASTERPASSEXPRESS
    - `checkout_resource_url` string — required for type: MASTERPASS
    - `oauth_token` string — required for type: MASTERPASS
    - `oauth_verifier` string — required for type: MASTERPASS
    - `checkout_id` string — required for type: ZIP_MONEY
    - `account_id` string — required for type: ZIP_MONEY
  - `metadata` object
  - `addendum_data` string
  - `capture` boolean, required — Indicates if this purchase should be captured (true), or authorized only (false)
  - `final` boolean — Indicates if the amount presented for the authorization is the final amount, or may be topped up or cancelled. Note: final authorizations cannot be cancelled, they will either be captured like a normal authorization, or will need to expire naturally.

## Response `200`

200

- union
  - object
    - `successful` boolean
    - `response` object
      - `authorization` string
      - `id` string
      - `card_number` string
      - `card_holder` string
      - `card_expiry` string
      - `card_token` string
      - `card_type` string
      - `card_category` string
      - `card_subcategory` string
      - `amount` integer
      - `decimal_amount` integer
      - `successful` boolean
      - `message` string
      - `reference` string
      - `currency` string
      - `transaction_id` string
      - `settlement_date` string
      - `transaction_date` string
      - `response_code` string
      - `captured` boolean
      - `captured_amount` integer
      - `rrn` string
      - `cvv_match` string
      - `metadata` object
      - `addendum_data` object
    - `errors` unknown[]
      - unknown
  - object
    - `successful` boolean
    - `response` object
      - `authorization` unknown
      - `id` string
      - `card_number` string
      - `card_holder` string
      - `card_expiry` string
      - `card_token` string
      - `card_type` string
      - `card_category` string
      - `card_subcategory` string
      - `amount` integer
      - `decimal_amount` integer
      - `successful` boolean
      - `message` unknown
      - `reference` string
      - `currency` string
      - `transaction_id` string
      - `settlement_date` unknown
      - `transaction_date` unknown
      - `response_code` string
      - `captured` boolean
      - `captured_amount` unknown
      - `rrn` unknown
      - `cvv_match` string
      - `metadata` object
      - `addendum_data` unknown
    - `errors` string[]

---

[API](https://skmtc.net/fatzebra/apis/gateway.md) · [All operations](https://skmtc.net/fatzebra/apis/gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fatzebra/gateway/versions/6317ad424277/schema)