v1

latestOpenAPI 3.1.0Copyright Pismo2026-07-247702,7523.1 MB

Pre-digitalization

Create encrypted card data for Apple Pay

Generate encrypted card data to provision a token via push-provisioning and the Apple SDK. Also returned is cardholder identifying information.

Notes:

This is a PCI endpoint, use the https://gw-pci.pismolabs.io/cards-tokenization environment.
This endpoint takes an account token - an access token encoded with a Pismo account ID.

post/v1/cards/{cardId}/network-tokens/push-provisioning/wallets/applepay

Path parameters

cardIdstring required

Card ID

Request body

Apple_public_certificate_b64string[] required

Apple SDK Base64 encoded certificate from Apple *You need to encode what you receive from Apple with Base64 and then send it here.

device_type'MOBILE_PHONE' | 'WATCH' required

Device type that the token will be provisioned for.

app_versionstring required

Application version from the provisioning request.

Noncestring required

From Apple SDK. Nonce = "number used once", a one-time-use random generated value.

product_typestring

From Apple SDK. Product type identifier. if a specific identifier needs to be passed, it must be entered in this field. if not passed, Pismo uses default values from the networks.

Nonce_signaturestring required

From Apple SDK

tav_version'TAV3' | 'TAV4'

The Token Authorization Value (TAV) version. The TAV value contains the issuer's digital signature that approves the token digitization for a Primary Account Number (PAN). REQUIRED for Mastercard if the issuer wants to use model TAV4.

key_aliasstring

Mastercard provided Key alias value used to generate the signature on a TAV body request. REQUIRED if Mastercard and TAV4 version.

authcodestring

An issuer-generated 6-character code specific to the current provisioning request. Issuer and Visa use this field to identify specific activation codes in problem resolution or authentication related questions. Format is alphanumeric. Allowed characters include 0-9 and A-Z. Characters must be in uppercase and not contain all zeros or all spaces. REQUIRED for Visa.

Example request

{
  "Apple_public_certificate_b64": [
    "LS0tL...Q0FURS0tLS0t"
  ],
  "Nonce": "48585930",
  "product_type": "016:XX:A000000001010111101",
  "Nonce_signature": "vdt5543",
  "tav_version": "TAV4",
  "key_alias": "2023-abd-deeg",
  "authcode": "0CVBD9"
}

Response

Success

Example response

{
  "additional_info": {
    "push_data": {
      "ephemeralPublicKey": "BLv5wb8HKPTlabxWW6z2at67jDqLZlFbGrOmq0bc2A0BbhRCmwWpzcf8ST2kEBctYX1nNZ9fE5MRSPf/4Tpz698=",
      "encryptedData": "uOt1....T9TOebjAM6DI43juahDiaMvpUaQZU2KNaICA==",
      "activationData": "ewogICJmdW5...PSIKfQ=="
    },
    "additional_info": {
      "name": "Ron Rico",
      "address": "221B Baker Street",
      "country": "Elbonia",
      "city": "Raccoon",
      "phone": "867-5309",
      "state": "Siege",
      "zip_code": "8675309",
      "printed_name": "Tupper Weir",
      "last_4_digits": "9999",
      "has_address_info": false,
      "has_phone_info": true
    }
  }
}