v66

latestOpenAPI 3.1.0Apache 2.0raw.githubusercontent.com2026-08-042174421.1 MB

Event Types

card_authorization.challenge

Occurs when an Out of Band challenge is issued during card authorization. The card program should issue its own challenge to the cardholder and then respond via /v1/card_authorizations/{event_token}/challenge_response.

postWebhookcard_authorization.challenge

Payload

event_type'card_authorization.challenge' required

The type of event that occurred.

Example payload

{
  "event_type": "card_authorization.challenge",
  "authorization": {
    "merchant": {
      "acceptor_id": "333301802529120",
      "acquiring_institution_id": "191231",
      "city": "NEW YORK",
      "country": "USA",
      "descriptor": "COFFEE SHOP",
      "mcc": "5812",
      "state": "NY",
      "postal_code": "10001",
      "street_address": "123 MAIN ST",
      "phone_number": "5551234567"
    },
    "cardholder_authentication": {
      "authentication_result": "SUCCESS",
      "authentication_method": "FRICTIONLESS",
      "decision_made_by": "LITHIC_RULES",
      "liability_shift": "3DS_AUTHENTICATED",
      "three_ds_authentication_token": "a6e372d0-b40a-43eb-b0d1-4e1aebef5875"
    },
    "merchant_currency": "USD",
    "amounts": {
      "cardholder": {
        "conversion_rate": "1.000000",
        "currency": "USD"
      },
      "merchant": {
        "currency": "USD"
      },
      "settlement": {
        "currency": "USD"
      },
      "hold": {
        "currency": "USD"
      }
    }
  }
}

Response

Return a 200 status to indicate that the data was received successfully