> For the complete documentation index, see [llms.txt](https://docs.payments.thalescloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.payments.thalescloud.io/wallet-server-transit-api-for-huawei/api-reference/incoming-operations-to-tsh/provisioning-and-management-api.md). # Provisioning and Management API [WS-Transit-API-IN-oas2.yaml](https://openapi.gitbook.com/o/fwy1mtbRONGA2YDKDBr0/spec/WS-Transit-API-IN-oas2.yaml) ## Request to check digital card account eligibility > This method is used by wallet server to check that a card account is eligible for provisioning. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/checkCardAccount":{"post":{"summary":"Request to check digital card account eligibility","description":"This method is used by wallet server to check that a card account is eligible for provisioning.","operationId":"checkCardAccount","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"checkCardAccount response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/checkCardAccountRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/checkCardAccountReq"}}},"description":"checkCardAccount request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"checkCardAccountRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format|\n|113|Unknown issuer| \n|115|Unknown product| \n|116|Unknown card account| \n|159|Card is blacklisted|\n|160|Card is deleted| \n|162|Card has unsufficient balance|\n|163|Card product not eligible| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"termsAndConditionsId":{"type":"string","description":"Unique identifier of the T&C to be presented to the end user.
If T&Cs are not required, all 0's should be returned.
getAsset API will be used to retrieve the T&Cs content.","maxLength":64},"cardArtManifest":{"$ref":"#/components/schemas/cardArtManifest"}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
RFC3339 format.
Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"cardArtManifest":{"type":"array","description":"Array of GUIDs required to build card art.
Each cart art can be retrieved using getAsset API with corresponding GUID.","items":{"type":"string","maxLength":64}},"checkCardAccountReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"issuerId":{"$ref":"#/components/schemas/issuerId"},"cardAccountDescriptor":{"$ref":"#/components/schemas/cardAccountDescriptor"},"device":{"$ref":"#/components/schemas/device"},"cardSource":{"$ref":"#/components/schemas/cardSource"}},"required":["requestHeader","issuerId","cardAccountDescriptor","device"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"issuerId":{"type":"string","description":"The Card Issuer Identifier. Unique for each card issuer.","minLength":1,"maxLength":16},"cardAccountDescriptor":{"type":"object","description":"The Card Account Descriptor.
Depending on cardSource, it shall be formatted as follows:\n- For ON-FILE:
\"cardAccountDescriptor\" : {\"walletCardAccountId\" : \"1234\"}\n- For USER-INPUT, CLIENT-SDK and READER-MODE:
\"cardAccountDescriptor\" : {\"opaqueCardAccountData\" : \"data returned by Issuer backend to Wallet\"}"},"device":{"type":"object","properties":{"seId":{"$ref":"#/components/schemas/seId"},"deviceType":{"$ref":"#/components/schemas/deviceType"},"language":{"$ref":"#/components/schemas/language"},"phoneNumberLastDigits":{"$ref":"#/components/schemas/phoneNumberLastDigits"},"deviceName":{"$ref":"#/components/schemas/deviceName"}},"required":["seId","deviceType","language"]},"seId":{"type":"string","description":"Secure Element Identifier","pattern":"([0-9a-fA-F][0-9a-fA-F]){1,24}"},"deviceType":{"type":"string","enum":["PHONE","TABLET","WATCH","UNKNOWN"]},"language":{"type":"string","description":"ISO 639-3 three-letter language codes","minLength":3,"maxLength":3},"phoneNumberLastDigits":{"type":"string","description":"Last digit of the phone number (usually 4 or 5)","minLength":1,"maxLength":5},"deviceName":{"type":"string","description":"Device name that the device owner may use to identify it","minLength":1,"maxLength":128},"cardSource":{"type":"string","enum":["ON-FILE","CLIENT-SDK","USER-INPUT","READER-MODE"]}}}} ``` ## Request to fetch an asset > This method is used by Wallet Server to fetch the content of an asset. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/getAsset":{"post":{"summary":"Request to fetch an asset","description":"This method is used by Wallet Server to fetch the content of an asset.","operationId":"getAsset","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"getAsset response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/getAssetRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/getAssetReq"}}},"description":"getAsset request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"getAssetRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format|\n|123|Unknown asset|\n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"contentType":{"type":"string","enum":["icon","cardBackgroundCombined","termsAndConditions"]},"content":{"type":"object","properties":{"mimeType":{"type":"string","enum":["image/pdf","image/png","text/plain","text/html"],"description":"File type of encoded image or T&C.
\"image/pdf\" and \"image/png\" are applicable to card art only.
\"text/plain\" and \"text/html\" are applicable to T&C only.
"},"encodedData":{"type":"string","description":"Base64 encoded asset data"},"width":{"type":"string","description":"Cart art width.
Required for PNG images."},"height":{"type":"string","description":"Cart art height.
Required for PNG images"}}}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
RFC3339 format.
Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"getAssetReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"guid":{"type":"string","maxLength":64}},"required":["requestHeader","guid"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48}}}} ``` ## Request to provision a digital card > This method is used by wallet server to provision a digital card to user's device. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/provisionCard":{"post":{"summary":"Request to provision a digital card","description":"This method is used by wallet server to provision a digital card to user's device.","operationId":"provisionCard","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"provisionCard response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/provisionCardRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/provisionCardReq"}}},"description":"provisionCard request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"provisionCardRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format|\n|113|Unknown issuer| \n|116|Unknown card account| \n|118|Unknown session| \n|161|Invalid crypto OTP| \n|164|Provisioning count exceeded| \n|166|Invalid card information|\n|167|Card is already provisioned| \n|170|Provisioning request declined|\n|171|Wallet account mismatch.
The wallet account is already associated
with a card under different customer name| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"walletCardId":{"$ref":"#/components/schemas/walletCardId"},"walletCardAccountId":{"$ref":"#/components/schemas/walletCardAccountId"},"cardDescriptor":{"$ref":"#/components/schemas/cardDescriptor"}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
RFC3339 format.
Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"walletCardId":{"type":"string","description":"The Wallet Card Identifier. Unique for each wallet card.","minLength":1,"maxLength":64},"walletCardAccountId":{"type":"string","description":"The Wallet Card Account Identifier. Unique for each wallet card account.","minLength":1,"maxLength":64},"cardDescriptor":{"type":"object","description":"The card descriptor which contains various metadata.
","properties":{"appletCurrencyCode":{"type":"string","description":"The apple currency code.
It is specified as 3 letters code (ISO4217)","minLength":3,"maxLength":3},"displayCardNumber":{"type":"string","description":"The card number to be displayed on the wallet.
If it's not provided, cardId will be used.","minLength":1,"maxLength":16},"cardholderName":{"type":"string","description":"The card holder to be displayed on the wallet.","minLength":1,"maxLength":128},"cardArtManifest":{"$ref":"#/components/schemas/cardArtManifest"},"labelColor":{"type":"string","description":"Color of overlaying text","pattern":"^rgb\\([0-9]{1,3},[0-9]{1,3},[0-9]{1,3}\\)$"},"shortDescription":{"type":"string","description":"A short description of the card.","maxLength":32},"longDescription":{"type":"string","description":"A longer description of the card.","maxLength":64},"privacyPolicyURL":{"type":"string","description":"URL pointing to issuer privacy policy","maxLength":128},"termsAndConditionsURL":{"type":"string","description":"URL pointing to card terms and conditions","maxLength":128},"contactWebsite":{"type":"string","description":"Customer service website of the issuer","maxLength":128},"contactEmail":{"type":"string","description":"Customer service email address of the issuer","maxLength":32},"contactNumber":{"type":"string","description":"Customer service phone number of the issuer.
This number is provided in standard, international format with country code","maxLength":32},"contactName":{"type":"string","description":"Customer service contact name of the issuer","maxLength":128},"cardActions":{"type":"object","properties":{"minLoadedBalance":{"type":"number","description":"Minimum value amount a card can contain after applying a top-up action"},"maxLoadedBalance":{"type":"number","description":"Maximum value amount a card can contain after using a top-up action"},"minLoadAmount":{"type":"number","description":"Minimum amount that can be added during a top-up action per transaction"},"maxLoadAmount":{"type":"number","description":"Maximum amount that can be added during a top-up action per transaction"}},"required":["maxLoadedBalance","minLoadAmount"]},"commutePlans":{"type":"array","maxItems":10,"items":{"type":"object","properties":{"identifier":{"type":"string","description":"Identifier of a plan, unique to the list of plans.","minLength":1,"maxLength":128},"title":{"type":"array","maxItems":10,"items":{"type":"object","properties":{"label":{"type":"string","description":"Commute plan title label.
Examples: - First Ferry Monthly Ticket\n - First Ferry Weekly Ticket","minLength":1,"maxLength":64},"value":{"type":"string","description":"Commute plan title extra details.
Examples: - North Point - Hunghom - Kowloon City","minLength":1,"maxLength":64},"language":{"type":"string","description":"Text language as defined by BCP 47 standard.
Examples: - en-US\n - zh-CN","minLength":1,"maxLength":16}},"required":["label","language"]}},"usage":{"type":"object","properties":{"label":{"type":"string","enum":["Usage","Limitations"],"description":"Label describing commute plan usage"},"value":{"type":"array","maxItems":10,"items":{"type":"object","properties":{"text":{"type":"string","description":"Descriptive text about commute plan usage","minLength":1,"maxLength":128},"language":{"type":"string","description":"Text language as defined by BCP 47 standard.
Examples: - en-US\n - zh-CN","minLength":1,"maxLength":16}},"required":["text","language"]}}},"required":["label","value"]},"validityPeriod":{"type":"object","properties":{"startDate":{"type":"string","description":"Starting date of the commute plan (can be in the future).
RFC3339 format
Examples: - \"2018-11-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"expiryDate":{"type":"string","description":"Ending date of the commute plan.
RFC3339 format
Examples: - \"2018-12-24T17:32:28Z\"\n - \"2019-10-09T10:00:00-05:00\"","format":"date-time"},"dateStyle":{"type":"string","enum":["SHORT","MEDIUM","LONG"],"description":"Style of the date to be displayed on user device. Default value is \"MEDIUM\".
Examples: - SHORT ==> \"11/23/19\"\n - MEDIUM ==> \"Nov 23, 2019\"\n - LONG ==> \"November 23, 2019\""},"timeStyle":{"type":"string","enum":["SHORT","MEDIUM","LONG"],"description":"Style of the date to be displayed on user device. Default value is \"SHORT\".
Examples: - SHORT ==> \"3:30 PM\"\n - MEDIUM ==> \"3:30:32 PM\"\n - LONG ==> \"3:30:32 PM PST\""}},"required":["startDate","expiryDate"]}},"required":["identifier","title","usage","validityPeriod"]}},"mobileApp":{"type":"object","properties":{"identifier":{"type":"string","description":"Identifier of the mobile application","maxLength":128},"action":{"type":"string","description":"Mobile application native action.
Used for deep linking","maxLength":128},"intentExtraText":{"type":"string","description":"Mobile application native intent extra text.
Used for deep linking","maxLength":128}},"required":["identifier"]}},"required":["appletCurrencyCode","labelColor","shortDescription"]},"cardArtManifest":{"type":"array","description":"Array of GUIDs required to build card art.
Each cart art can be retrieved using getAsset API with corresponding GUID.","items":{"type":"string","maxLength":64}},"provisionCardReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"issuerId":{"$ref":"#/components/schemas/issuerId"},"cardAccountDescriptor":{"$ref":"#/components/schemas/cardAccountDescriptor"},"ssdDescriptor":{"$ref":"#/components/schemas/ssdDescriptor"},"walletAccountId":{"$ref":"#/components/schemas/walletAccountId"},"device":{"$ref":"#/components/schemas/device"},"walletScoring":{"$ref":"#/components/schemas/walletScoring"},"customerData":{"$ref":"#/components/schemas/customerData"},"cardLastDigits":{"$ref":"#/components/schemas/cardLastDigits"},"cryptoOTP":{"$ref":"#/components/schemas/cryptoOTP"}},"required":["requestHeader","issuerId","cardAccountDescriptor","ssdDescriptor","walletAccountId","device"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"issuerId":{"type":"string","description":"The Card Issuer Identifier. Unique for each card issuer.","minLength":1,"maxLength":16},"cardAccountDescriptor":{"type":"object","description":"The Card Account Descriptor.
Depending on cardSource, it shall be formatted as follows:\n- For ON-FILE:
\"cardAccountDescriptor\" : {\"walletCardAccountId\" : \"1234\"}\n- For USER-INPUT, CLIENT-SDK and READER-MODE:
\"cardAccountDescriptor\" : {\"opaqueCardAccountData\" : \"data returned by Issuer backend to Wallet\"}"},"ssdDescriptor":{"type":"object","description":"Metadata of the SSD hosting the issuer applet.
It is used by TSH to compute personalization script.","properties":{"aid":{"type":"string","description":"hexadecimal representation of SSD AID","pattern":"([a-fA-F0-9][a-fA-F0-9]){5,16}"},"appletInstanceAid":{"type":"string","description":"hexadecimal representation of Issuer Applet AID","pattern":"([a-fA-F0-9][a-fA-F0-9]){5,16}"},"apduResponse":{"type":"string","description":"hexadecimal representation of TLV:
  • Tag 85 = DR (optional)
  • Tag 86 = Receipt (mandatory)
  • Tag A6 = CRT (mandatory)

    as defined in GP Amendment E.

    Example:
    8510332A524EF397AF72E75333FF5E853D9F86106B58F49CD5339DCA61086710D5992948A61690020303950110960100800188810110820105830130","pattern":"([a-fA-F0-9][a-fA-F0-9])+","maxLength":512},"counter":{"type":"string","description":"current SSD sequence counter","pattern":"([a-fA-F0-9][a-fA-F0-9]){3}"},"casdCertificate":{"type":"string","description":"CASD GP certificate as defined in GP Amendment E.

    Example:
    7F2181BD7F2181B993100431171BCB53800191700015133013074207637093010000395F200100950200805F2404211804034501007F4946B041047EED4B67E5937FC77DA23FE0AB250A4689B878165602B8AEA3075BF1D8B5021CDA9E17956CC0454614FDE8A218987B4BD19649DD4E50839BA574DEB2F3A56C8DF001005F3740869C9DA25B1E8DCE37893B0188A6587B32BAA6923FF0927836D5614FCA83283B9186FC39135DBBD40D747A37A802D2E86815DADD8A6278319E5BEE9BB3582754","pattern":"([a-fA-F0-9][a-fA-F0-9])+","maxLength":512},"spsdCertificateSerialNumber":{"type":"string","description":"Serial number of the SPSD certificate used to generate OBGK.
    This serial number can be used to match against certificate when multiple certificates are supported or when certificate has been replaced because of expiration.","pattern":"([a-fA-F0-9][a-fA-F0-9]){1,32}"}},"required":["aid","appletInstanceAid","apduResponse","counter","casdCertificate","spsdCertificateSerialNumber"]},"walletAccountId":{"type":"string","description":"The Wallet Account Identifier. Unique for each wallet account.","minLength":1,"maxLength":128},"device":{"type":"object","properties":{"seId":{"$ref":"#/components/schemas/seId"},"deviceType":{"$ref":"#/components/schemas/deviceType"},"language":{"$ref":"#/components/schemas/language"},"phoneNumberLastDigits":{"$ref":"#/components/schemas/phoneNumberLastDigits"},"deviceName":{"$ref":"#/components/schemas/deviceName"}},"required":["seId","deviceType","language"]},"seId":{"type":"string","description":"Secure Element Identifier","pattern":"([0-9a-fA-F][0-9a-fA-F]){1,24}"},"deviceType":{"type":"string","enum":["PHONE","TABLET","WATCH","UNKNOWN"]},"language":{"type":"string","description":"ISO 639-3 three-letter language codes","minLength":3,"maxLength":3},"phoneNumberLastDigits":{"type":"string","description":"Last digit of the phone number (usually 4 or 5)","minLength":1,"maxLength":5},"deviceName":{"type":"string","description":"Device name that the device owner may use to identify it","minLength":1,"maxLength":128},"walletScoring":{"type":"object","properties":{"color":{"type":"string","enum":["GREEN","YELLOW","ORANGE"]},"deviceScore":{"type":"number","description":"|Score|Description|\n|-------|-------|\n|5|Long history of activity; No suspicious activity|\n|4|Short history of activity; No suspicious activity|\n|3|Little or No history|\n|2|Irregular activity noted|\n|1|Improper activity noted|\n","minimum":1,"maximum":5},"accountScore":{"type":"number","description":"|Score|Description|\n|-------|-------|\n|5|Long history of activity; No suspicious activity|\n|4|Short history of activity; No suspicious activity|\n|3|Little or No history|\n|2|Irregular activity noted|\n|1|Improper activity noted|\n","minimum":1,"maximum":5},"phoneNumberScore":{"type":"number","description":"|Score|Description|\n|-------|-------|\n|5|Long history of activity; No suspicious activity|\n|4|Short history of activity; No suspicious activity|\n|3|Little or No history|\n|2|Irregular activity noted|\n|1|Improper activity noted|\n","minimum":1,"maximum":5},"reasonCodes":{"type":"array","description":"List of reasons","maxItems":100,"items":{"type":"string","description":"|reasonCode|Description|\n|-------|-------|\n|01|User Wallet Account ID too new relative to launch|\n|02|User Wallet Account ID too new relative to provisioning request|\n|03|User Wallet Account ID/Card Pair is newer than date threshold|\n|04|Changes made to account data within date threshold|\n|05|Suspicious transactions linked to this account.|\n|06|The Account has not had activity in the last year.|\n|07|Suspended cards in the secure element|\n|08|The device was put in lost mode in the last 7 days for longer than the duration threshold|\n|09|The number of provisioning attempts on this device in 72 hours exceeds the threshold|\n|0A|There have been more than the threshold number of different cards attempted at provisioning to this phone in 24 hours.|\n|0B|The card provisioning request contains a distinct name in excess of the permitted threshold|\n|0C|Device Score is less than 3|\n|0D|Device Score is less than 4|\n|0E|Device provisioning location outside of OEM marketplace store home country|\n|0F|Model rules not available at this time (in cases where back end systems time out).|\n|0G|Orange path flag|\n|0H|Phone Number Score is less than 3|\n","minLength":2,"maxLength":2}}},"required":["color"]},"customerData":{"type":"object","properties":{"dateOfBirth":{"type":"string","description":"Customer date of birth.
    Date provided in 'YYYY-MM-DD' format as specified in RFC 3339","format":"date"},"customerId":{"type":"string","description":"Customer identifier","minLength":1,"maxLength":32}}},"cardLastDigits":{"type":"string","description":"The Card last 4 or 5 digits.","minLength":4,"maxLength":5},"cryptoOTP":{"type":"string","description":"Cryptographic OTP computed by Issuer backend and returned to the wallet during enrolment.
    It will be checked by TSH if it's provided.","maxLength":3096}}}} ``` ## Request to suspend, resume or delete/park a digital card > This method is used by Wallet Server to request a suspend, resume or park/delete a virtual card. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/manageCard":{"post":{"summary":"Request to suspend, resume or delete/park a digital card","description":"This method is used by Wallet Server to request a suspend, resume or park/delete a virtual card.","operationId":"manageCard","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"manageCard response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/manageCardRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/manageCardReq"}}},"description":"manageCard request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"manageCardRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format|\n|113|Unknown issuer| \n|119|Unknown virtual card| \n|432|Operation is not allowed with current card state| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"manageCardReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"issuerId":{"$ref":"#/components/schemas/issuerId"},"walletCardId":{"$ref":"#/components/schemas/walletCardId"},"operation":{"$ref":"#/components/schemas/operation"}},"required":["requestHeader","issuerId","walletCardId","operation"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"issuerId":{"type":"string","description":"The Card Issuer Identifier. Unique for each card issuer.","minLength":1,"maxLength":16},"walletCardId":{"type":"string","description":"The Wallet Card Identifier. Unique for each wallet card.","minLength":1,"maxLength":64},"operation":{"type":"string","enum":["SUSPEND","RESUME","PARK","DELETE"],"description":"The operation to perform on the card.
    Note:
    - PARK is to be used for an already provisioned card.
    - Whereas DELETE is to be used for failed provisioning."}}}} ``` ## Callback to sendScript request > This method is used by Wallet server to provide a callback to a previous sendScript sent by TSH. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/sendScriptCallback":{"post":{"summary":"Callback to sendScript request","description":"This method is used by Wallet server to provide a callback to a previous sendScript sent by TSH.","operationId":"sendScriptCallback","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"sendScriptCallback response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/sendScriptCallbackRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/sendScriptCallbackReq"}}},"description":"sendScriptCallback request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"sendScriptCallbackRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format| \n|121|Unknown task| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"sendScriptCallbackReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"taskId":{"$ref":"#/components/schemas/taskId"},"apduResponses":{"$ref":"#/components/schemas/apduResponses"}},"required":["requestHeader","taskId"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"taskId":{"type":"string","description":"Unique task identifier used to correlate a callback to a request.","minLength":1,"maxLength":64},"apduResponses":{"type":"array","description":"List of APDU responses returned by secure element.","items":{"type":"object","properties":{"rApdu":{"$ref":"#/components/schemas/rApdu"},"messageId":{"type":"string","description":"ID of the command executed","minLength":1,"maxLength":64},"messageName":{"type":"string","description":"Descriptive name of the command that has been executed.
    Extracted from the original message and appended with \"_RESP\"","minLength":1,"maxLength":100}},"required":["rApdu","messageId"]}},"rApdu":{"type":"string","description":"APDU response received from SE, encoded in Hex string.","pattern":"([0-9a-fA-F][0-9a-fA-F]){1,257}"}}}} ``` ## Callback to updateCard request > This method is used by Wallet server to provide a callback to a previous updateCard sent by TSH. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/updateCardCallback":{"post":{"summary":"Callback to updateCard request","description":"This method is used by Wallet server to provide a callback to a previous updateCard sent by TSH.","operationId":"updateCardCallback","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"updateCardCallback response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/updateCardCallbackRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/updateCardCallbackReq"}}},"description":"updateCardCallback request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"updateCardCallbackRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format| \n|121|Unknown task| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"updateCardCallbackReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"taskId":{"$ref":"#/components/schemas/taskId"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["requestHeader","taskId","statusCode"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"taskId":{"type":"string","description":"Unique task identifier used to correlate a callback to a request.","minLength":1,"maxLength":64}}}} ``` ## Request to get the current status of a digital card > This method is used by Wallet Server to the current status of a digital card. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/getCardStatus":{"post":{"summary":"Request to get the current status of a digital card","description":"This method is used by Wallet Server to the current status of a digital card.","operationId":"getCardStatus","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"getCardStatus response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardStatusRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardStatusReq"}}},"description":"getCardStatus request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"getCardStatusRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format| \n|119|Unknown virtual card| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"state":{"type":"string","enum":["CREATED","ACTIVE","SUSPENDED_WALLET","SUSPENDED_ISSUER","UNLINKED"]}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"getCardStatusReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"walletCardId":{"$ref":"#/components/schemas/walletCardId"}},"required":["requestHeader","walletCardId"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"walletCardId":{"type":"string","description":"The Wallet Card Identifier. Unique for each wallet card.","minLength":1,"maxLength":64}}}} ``` ## Request to get the current status of a card account > This method is used by Wallet Server to the current status of a card account. ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/getCardAccountStatus":{"post":{"summary":"Request to get the current status of a card account","description":"This method is used by Wallet Server to the current status of a card account.","operationId":"getCardAccountStatus","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"getCardAccountStatus response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardAccountStatusRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardAccountStatusReq"}}},"description":"getCardAccountStatus request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"getCardAccountStatusRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format| \n|116|Unknown card account| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"state":{"type":"string","enum":["ACTIVE","PARKED","CANCELLED"],"description":"The card account state"},"accountBalance":{"type":"object","description":"Represents the balance account attributes.","properties":{"balanceAmount":{"type":"number","description":"The current balance amount of the card","format":"double"},"balanceCurrencyCode":{"type":"string","description":"The currency of the purchase order.
    It is specified as 3 letters code (ISO4217)","minLength":3,"maxLength":3},"balanceDate":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"}},"required":["balanceAmount","balanceCurrencyCode","balanceDate"]}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"getCardAccountStatusReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"walletCardAccountId":{"$ref":"#/components/schemas/walletCardAccountId"}},"required":["requestHeader","walletCardAccountId"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"walletCardAccountId":{"type":"string","description":"The Wallet Card Account Identifier. Unique for each wallet card account.","minLength":1,"maxLength":64}}}} ``` ## Request to provide the next list of commands to be executed for a specific card > This method is used to request the pending commands to be executed for a specific card.\
    Device should keep coming back when: - HTTP 200 is returned with statusCode=0 and APDU commands are provided\ > \- or HTTP 500 is returned (until max number of retries is reached)\ > \- or TSH is not accessible (until max number of retries is reached) ```json {"openapi":"3.1.1","info":{"title":"Thales TSH Transit API - WS to TSH","version":"1.0.8"},"paths":{"/getCardCommands":{"post":{"summary":"Request to provide the next list of commands to be executed for a specific card","description":"This method is used to request the pending commands to be executed for a specific card.
    Device should keep coming back when: - HTTP 200 is returned with statusCode=0 and APDU commands are provided\n - or HTTP 500 is returned (until max number of retries is reached)\n - or TSH is not accessible (until max number of retries is reached)","operationId":"getCardCommands","parameters":[{"$ref":"#/components/parameters/podHeader"}],"responses":{"200":{"description":"getCardCommands response payload","content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardCommandsRes"}}}},"500":{"description":"Internal Server Error"}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/getCardCommandsReq"}}},"description":"getCardCommands request payload","required":true}}}},"components":{"parameters":{"podHeader":{"schema":{"type":"string","maxLength":128},"name":"x-pod","in":"header","description":"HTTP header identifying the pod and corresponding DNS hostname of the load balancer from which traffic is coming.
    Subsequent API calls should be sent to this pod.","required":true}},"schemas":{"getCardCommandsRes":{"type":"object","properties":{"responseHeader":{"type":"object","properties":{"responseId":{"$ref":"#/components/schemas/responseId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"},"statusCode":{"type":"number","description":"Status code to the request\n|Status code | Description|\n|-------|-------|\n|0|OK| \n|111|Missing mandatory parameter|\n|112|Bad parameter format| \n|117|Unknown device| \n|118|Unknown session|\n|119|Unknown virtual card| \n|159|Card is blacklisted|\n|160|Card is deleted| \n|162|Card has unsufficient balance|\n|163|Card product not eligible| \n|321|Operation already on-going for this device|\n|322|Time to live of the operation expired| \n|911|Operation failed| \n|921|Unexpected server error|\n"},"statusMessage":{"type":"string","description":"Textual status message"}},"required":["responseId","sessionId","statusCode"]},"apduCommands":{"$ref":"#/components/schemas/apduCommands"}},"required":["responseHeader"]},"responseId":{"type":"string","description":"Unique response identifier","minLength":1,"maxLength":48},"sessionId":{"type":"string","description":"Unique session identifier used to trace the calls across systems during a use case.","minLength":1,"maxLength":48},"generationDateTime":{"type":"string","description":"Date time representing when the request or response has been generated.
    RFC3339 format.
    Examples:\n - \"2018-12-24T17:32:28Z\"\n - \"2019-10-02T10:00:00-05:00\"","format":"date-time"},"apduCommands":{"type":"array","description":"List of APDU commands to send to a secure element.","items":{"type":"object","properties":{"cApdu":{"$ref":"#/components/schemas/cApdu"},"messageId":{"type":"string","description":"ID of the command to execute","minLength":1,"maxLength":64},"messageName":{"type":"string","description":"Descriptive name of the command that needs to be executed.","minLength":1,"maxLength":100}},"required":["cApdu","messageId"]}},"cApdu":{"type":"string","description":"APDU Command sent to SE, encoded in Hex string.","pattern":"([0-9a-fA-F][0-9a-fA-F]){1,255}"},"getCardCommandsReq":{"type":"object","properties":{"requestHeader":{"$ref":"#/components/schemas/requestHeader"},"mode":{"type":"string","enum":["PARK","REDIRECT","TOP-UP"],"description":"It is needed in the first request only."},"walletCardId":{"$ref":"#/components/schemas/walletCardId"},"apduResponses":{"$ref":"#/components/schemas/apduResponses"}},"required":["requestHeader","walletCardId"]},"requestHeader":{"type":"object","properties":{"requestId":{"$ref":"#/components/schemas/requestId"},"sessionId":{"$ref":"#/components/schemas/sessionId"},"generationDateTime":{"$ref":"#/components/schemas/generationDateTime"}},"required":["requestId","sessionId"]},"requestId":{"type":"string","description":"Unique request identifier","minLength":1,"maxLength":48},"walletCardId":{"type":"string","description":"The Wallet Card Identifier. Unique for each wallet card.","minLength":1,"maxLength":64},"apduResponses":{"type":"array","description":"List of APDU responses returned by secure element.","items":{"type":"object","properties":{"rApdu":{"$ref":"#/components/schemas/rApdu"},"messageId":{"type":"string","description":"ID of the command executed","minLength":1,"maxLength":64},"messageName":{"type":"string","description":"Descriptive name of the command that has been executed.
    Extracted from the original message and appended with \"_RESP\"","minLength":1,"maxLength":100}},"required":["rApdu","messageId"]}},"rApdu":{"type":"string","description":"APDU response received from SE, encoded in Hex string.","pattern":"([0-9a-fA-F][0-9a-fA-F]){1,257}"}}}} ``` --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.payments.thalescloud.io/wallet-server-transit-api-for-huawei/api-reference/incoming-operations-to-tsh/provisioning-and-management-api.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.