---
title: "Initialize 3DS authentication"
method: POST
path: "/cards/{card_id}/3ds-initialize"
tags: ["3D Secure (3DS)"]
---

# Initialize 3DS authentication

`POST /cards/{card_id}/3ds-initialize`

Initial call to check if device fingerprinting is needed for subsequent
3DS authentication.

## Path parameters

- `card_id` string, required

## Headers

- `Authorization` string, required
- `Content-Type` 'application/vnd.api+json', required

## Response `200`

Successful initialization

## Other responses

- `206` — Request successful. No iframe/data in the response means initialization isn’t needed, and authentication can continue immediately.
- `400` — Invalid request
- `401` — No credentials were provided, or the provided credentials were expired.
- `403` — Valid credentials were provided, but they do not permit access to this resource.
- `404` — Resource not found.
- `422` — Unprocessable Entity. The request was well-formed but contained semantic errors.
- `500` — An unexpected error occurred.
- `503` — Service Unavailable

---

[API](https://skmtc.net/verygoodsecurity/apis/vgs-card-management-platform-cmp-api.md) · [All operations](https://skmtc.net/verygoodsecurity/apis/vgs-card-management-platform-cmp-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/verygoodsecurity/vgs-card-management-platform-cmp-api/revisions/71471c6a84af/schema)