Welcome to our new developer portal! Use the "Ask" button to chat with our AI Agent.
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Provisioning and Management API

Download OpenAPI specification

Get Digital Card Bundle Data

post
/issuers/{issuerId}/wallets/{walletIndicator}/getDigitalCardBundleData

API used for fetching the data required to build the digital card bundle that will be provisioned into a device.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
userIdstring · max: 64Optional

User unique identifier.
Always provided for Apple.

Example: sSHfawfGsHUQjg8zaOHnPPgso5TF
walletIdstring · max: 64Required

Wallet unique identifier.
Corresponds to unique device identifier for Apple and Samsung.
Corresponds to unique identifier assigned for a given user and device for Google.

Example: 9i+KsSHjySa7Nxyzpvp6V/mL/fhwwZ7H/NEE9XCGjO6zzKiNnimDDAVHxOFa0jKF
deviceTypenumberOptional

Device type.

valuedescription
1Phone
2Tablet
3Watch
4-99RFU
Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/getDigitalCardBundleData

Notify Digital Card Event

post
/issuers/{issuerId}/wallets/{walletIndicator}/notifyDigitalCardEvent

API used for notifying events:

  • provisioning

  • lifecycle

  • digital card bundle update (CBT only)

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
walletIdstring · max: 64Optional

Wallet unique identifier.
Corresponds to unique device identifier for Apple and Samsung.
Corresponds to unique identifier assigned for a given user and device for Google.

Example: 9i+KsSHjySa7Nxyzpvp6V/mL/fhwwZ7H/NEE9XCGjO6zzKiNnimDDAVHxOFa0jKF
userIdstring · max: 64Optional

User unique identifier.
Always provided for Apple.

Example: sSHfawfGsHUQjg8zaOHnPPgso5TF
deviceTypenumberOptional

Device type.

valuedescription
1Phone
2Tablet
3Watch
4-99RFU
eventstring · enumRequiredPossible values:
eventDataobjectOptional

Object containing contextual information based on event value.
For Calypso card technology, in case of provisioning_success, it will contain the CSN: {"csn":"000000006818F4EB"}

In case of failure, it may contain statusCode and statusMessage to provide more details:
{"statusCode":431,"statusMessage":"Error XYZ"}

digitalCardBundlestringOptional

Last known state of the digital card bundle.
Applicable to CBT only.

Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/notifyDigitalCardEvent

Manage Digital Card

post
/issuers/{issuerId}/wallets/{walletIndicator}/manageDigitalCard

API used for managing digital cards state change trigger by Digital Wallets.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
actionstring · enumRequiredPossible values:
initiatorstring · enumOptional

Indicates whether the action is initiated from the device or via cloud interface.
Applicable to 'unlink' action and CBT only.

Possible values:
Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/manageDigitalCard

Get Card Account Metadata

post
/issuers/{issuerId}/wallets/{walletIndicator}/getCardAccountMetadata

API used for getting the metadata of an account.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
Responses
200Success
application/json
displayCardValuestring · min: 1 · max: 20Required

Value of the card to be displayed to the user.

Example: 458965204578
cardArtsIdstring · max: 64Optional

Identifier referencing card arts configuration used for this card.
Default value configured during onboarding is used if this parameter is not provided.

Example: 046d8480-c229-49d3-b2b0-cfe135da1da4
post/issuers/{issuerId}/wallets/{walletIndicator}/getCardAccountMetadata

Purchase Products

post
/issuers/{issuerId}/wallets/{walletIndicator}/purchaseProducts

API used to request the purchase of products initiated from Digital Wallets.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
userIdstring · max: 64Optional

User unique identifier

Example: sSHfawfGsHUQjg8zaOHnPPgso5TF
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
orderIdstring · max: 64Required

Order unique identifier

paymentCredentialsobjectRequired

Payment credentials encrypted with PSP key.
Clear format is defined as per wallet specification here.

totalAmountnumber · floatRequired

Amount

Example: 12.9
currencyCodestringRequired

The 3-letter currency code defined in ISO 4217

Example: EURPattern: ^[A-Za-z]{3}$
Responses
200Success
application/json
purchaseIdstring · max: 64Optional

Purchase unique identifier

Example: P20160107_123456
post/issuers/{issuerId}/wallets/{walletIndicator}/purchaseProducts

Get Purchasable Products

post
/issuers/{issuerId}/wallets/{walletIndicator}/getPurchasableProducts

API used for fetching the list of purchasable products.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
cardAccountIdstring · max: 64Optional

Card account unique identifier.
Not provided when Google is fetching the list of purchasable products for initial provisionings (done on daily basis).
Always provided otherwise.

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
digitalCardIdstring · max: 64Optional

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
productIdstring · max: 64Optional

Unique identifier of a time based product.
Provided when checking renewal options of this product.

Example: 6489d6ae-231d-4260-afd6-5fa44ede0d59
digitalCardBundlestringOptional

Last known state of the digital card bundle.
Applicable to CBT only.

Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/getPurchasableProducts

Register Card Account

post
/issuers/{issuerId}/wallets/{walletIndicator}/registerCardAccount

API used for registering a card account and binding it with an existing EMV tokenId. This API is only applicable to Google Transit Insights (GTI).

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
tokenDatastringRequired

Encrypted Token Data about the token the user wants to register.
It is encrypted using the JWE encryption (please refer to Encrypt Sensitive Data section for more details).
The JSON object that is encrypted is defined as follows:

JSON field parameter namedescription
panThe token PAN value (up to 19 numeric digits)
expiryMonthThe expiry month of the token in MM format
expiryYearThe expiry year of the token in YYYY format
tokenIdstring · max: 64Optional

Token unique identifier.
Provided only in case of re-registration.

Example: 63a0c6dd-2993-49f3-b6ac-9721fbe0877e
Responses
200Success
application/json
tokenIdstring · max: 64Optional

Token unique identifier.
It's the value identified by payment gateway thanks to tokenData provided as input.

Example: 63a0c6dd-2993-49f3-b6ac-9721fbe0877e
post/issuers/{issuerId}/wallets/{walletIndicator}/registerCardAccount

Get Digital Card Bundle Commands

post
/issuers/{issuerId}/wallets/{walletIndicator}/getDigitalCardBundleCommands

API used for fetching the commands required to update/read a digital card bundle provisioned within a device. Transit Issuer has to return the list of commands that needs to be executed on the device after checking the previous commands responses. This API is only applicable to CBT.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Required

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
incompletedExecutionbooleanOptional

Flag indicating that the commands from previous responses array were not all executed successfully.

Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/getDigitalCardBundleCommands

Get Transactions

post
/issuers/{issuerId}/wallets/{walletIndicator}/getTransactions

API used to fetch transaction and balance details from the Transit Issuer. This API is only applicable to ABT.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Optional

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
lastUpdatedTimestring · date-timeOptional

Value that should be used to provide updates that occurred since that time.

Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/getTransactions

Get Messages

post
/issuers/{issuerId}/wallets/{walletIndicator}/getMessages

API used to fetch messages from the Transit Issuer.

Path parameters
issuerIdstring · max: 10Required

Issuer unique identifier. Assigned by Thales during onboarding.

walletIndicatornumberRequired

Indicates which digital wallet is involved in the use case.

ValueDescription
1Apple
2Google
3Samsung
Body
digitalCardIdstring · max: 64Optional

Digital card unique identifier

Example: DGGLSW8D8AC610566D4EF09C22186B2A5ED756
cardAccountIdstring · max: 64Required

Card account unique identifier

Example: FAPLSW8D8AC610566D4EF09C22186B2A5ED793
lastUpdatedTimestring · date-timeOptional

Value that should be used to provide updates that occurred since that time.

Responses
200Success
application/json
post/issuers/{issuerId}/wallets/{walletIndicator}/getMessages

Last updated

Was this helpful?