v1

latestOpenAPI 3.1.0Copyright Pismo2026-07-247702,7523.1 MB

VCAS

Issuer’s endpoint to handle VCAs validate flow

Informs the issuer about the validation flow.

post/issuer-vcas-validate-endpoint

Request body

idstring required

Pismo-generated unique authentication ID

provider'VCAS' required

Third-party provider name

type'VALIDATE' required

To validate the credential (e.g., OTP) provided by the cardholder during a step-up authentication flow.

raw_providerRawProvider required

All non-PCI information received from provider. Check provider documentation for details.

Example request

{
  "id": "ff77635e-1cd6-4fda-992d-5ceb71d75644",
  "provider": "VCAS",
  "type": "VALIDATE",
  "raw_provider": {
    "ProcessorId": "5723ae630063ac1a9c3ab079",
    "IssuerId": "5723ae630063ac1a9c3ab481",
    "TransactionId": "00ec043e-40b5-4ce4-95c2-9e83b644f412",
    "DSTransactionId": "521fa021-4791-4579-a3e9-76de87c219c0",
    "StepupRequestId": "878f4751-4140-4881-9e4a-003e83524f22",
    "MessageVersion": "2.2.0",
    "RDXMessageVersion": "2.2.3"
  }
}

Response

raw_responseobject

Raw response to VCAS Validate request, according with VCAS documentation.

Example response

{
  "raw_response": {
    "ProcessorId": "5723ae630063ac1a9c3ab079",
    "IssuerId": "5723ae630063ac1a9c3ab671",
    "TransactionId": "00ec043e-40b5-4ce4-95c2-9e83b644f412",
    "StepupRequestId": "00ec043e-40b5-4ce4-95c2-9e83b644f618",
    "Language": "string",
    "CredentialId": "string",
    "Status": "SUCCESS",
    "TransStatusReason": "string",
    "RiskIndicator": "string",
    "Reason": {
      "ReasonCode": "string",
      "ReasonDescription": "string"
    },
    "Error": {
      "ReferenceNumber": "string",
      "ReasonDescription": "string",
      "Description": "string",
      "Message": "string"
    },
    "RReqOverrides": {
      "AuthenticationMethod": "SMS_OTP",
      "TransStatusReason": "CARD_AUTH_FAILED",
      "AuthenticationAttempts": "string",
      "CustomerCancel": true
    }
  }
}