v66

latestOpenAPI 3.1.0Apache 2.0raw.githubusercontent.com2026-08-042174421.1 MB

Event Types

card_authorization.challenge_response

Occurs when a cardholder responds to a challenge during card authorization.

postWebhookcard_authorization.challenge_response

Payload

event_type'card_authorization.challenge_response' required

Event type

event_tokenstring uuid required

Globally unique identifier for the event

transaction_tokenstring uuid nullable required

The token of the transaction associated with the authorization event being challenged

card_tokenstring uuid nullable required

The token of the card associated with the challenge

challenge_method'SMS' | 'OUT_OF_BAND' required

The method used to deliver the challenge to the cardholder

response'APPROVE' | 'DECLINE' required

The cardholder's response to the challenge

createdstring date-time required

The timestamp of when the challenge was created

completedstring date-time nullable required

The timestamp of when the challenge was completed

Example payload

{
  "event_type": "card_authorization.challenge_response",
  "event_token": "00000000-0000-0000-0000-000000000001",
  "transaction_token": "00000000-0000-0000-0000-000000000002",
  "card_token": "00000000-0000-0000-0000-000000000003",
  "challenge_method": "SMS",
  "response": "APPROVE",
  "created": "2025-07-17T07:07:29Z",
  "completed": "2025-07-17T07:08:15Z"
}

Response

Return a 200 status to indicate that the data was received successfully