---
title: "Lookup 3DS"
method: POST
path: "/external_cards/lookup_3ds"
tags: ["External Cards"]
---

# Lookup 3DS

`POST /external_cards/lookup_3ds`

Using device collection data, performs a lookup for an External Card Transfer 3DS authentication. The results will indicate whether the transfer is successfully authenticated or if a 3DS challenge is required.

## Headers

- `Idempotency-Key` string

## Request body

- union
  - object — Details for an External Card Transfer 3-D Secure Authentication lookup request using a browser
    - `device_details` DeviceDetails — Optionally provided browser device details, used as a fallback in case there is an issue with Device Data Collection. Note that minimal field validation is performed.
      - `color_depth` integer, required — The device's color palette bit depth, in bits per pixel
      - `header` string, required — The exact contents of the browser's HTTP accept headers
      - `ip_address` string, required — The device's IP address (either IPv4 or IPv6 formats are acceptable)
      - `java_enabled` boolean, required — If the browser has the ability to execute Java (value returned from `navigator.javaEnabled` property)
      - `javascript_enabled` boolean, required — If the browser has the ability to execute JavaScript (value returned from `navigator.javaScriptEnabled` property)
      - `language` string, required — The browser's language as defined in IETF BCP47
      - `screen_height` integer, required — The total height of the device's screen, in pixels
      - `screen_width` integer, required — The total width of the device's screen, in pixels
      - `timezone` integer, required — The offset from UTC of the device's local timezone, in minutes
      - `user_agent` string, required — The exact contents of the HTTP user agent header
    - `authentication_indicator` 'INSTALLMENT' | 'PAYMENT' | 'RECURRING', required
    - `device_channel` 'BROWSER' | 'SDK', required — Channel through which Device Data Collection was performed Channel | Description --- | --- `BROWSER` | Internet browser `SDK` | Mobile app
    - `id` string, uuid, required — The unique identifier of the 3DS authentication
    - `transaction_mode` 'COMPUTER_DEVICE' | 'MOBILE_DEVICE' | 'TABLET_DEVICE', required
  - Lookup3dsRequestBase — Details for an External Card Transfer 3-D Secure Authentication lookup request
    - `authentication_indicator` 'INSTALLMENT' | 'PAYMENT' | 'RECURRING', required
    - `device_channel` 'BROWSER' | 'SDK', required — Channel through which Device Data Collection was performed Channel | Description --- | --- `BROWSER` | Internet browser `SDK` | Mobile app
    - `id` string, uuid, required — The unique identifier of the 3DS authentication
    - `transaction_mode` 'COMPUTER_DEVICE' | 'MOBILE_DEVICE' | 'TABLET_DEVICE', required

## Response `200`

External Card Transfer 3DS authentication lookup complete

- Lookup3dsResponse — Details for an External Card Transfer 3-D Secure Authentication lookup response
  - `challenge_payload` string — 3DS challenge payload, returned if challenge is required
  - `challenge_url` string, uri — 3DS challenge URL, returned if challenge is required
  - `id` string, uuid, required — The unique identifier of the 3DS authentication
  - `processor_transaction_id` string — Processor Transaction ID, returned if challenge is required
  - `status` 'CHALLENGE_REQUIRED' | 'FAILED' | 'NOT_ENROLLED' | 'SUCCESS' | 'UNKNOWN', required — Status of the 3DS authentication

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden error
- `422` — Unprocessable entity request response
- `500` — Internal server error

---

[API](https://skmtc.net/synctera/apis/synctera-api.md) · [All operations](https://skmtc.net/synctera/apis/synctera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/synctera/synctera-api/revisions/b0d812e6cdd0/schema)