Submit card data

This endpoint is used depending on the type of integration. Please check with our integration team if you are eligible for using this endpoint.

Sending card data for a payout

Submit card

POST {next_action.url}

Sends PAN, card expiry date and CSC to perform a transaction.

Headers

Name	Type	Description
x-merchant-id*	string
x-timestamp*	number
x-simplified-signature*	string	x-simplified-signature

Request Body

Name	Type	Description
payout_id*	string
card.exp_year*	string
card.exp_month*	string
card.pan*	string

200 Card data accepted

{
  "next_action": {
    "type": "string",
    "url": "string"
  }
}

400: Bad Request Card data submission failed

Returns the respective error message with the error details.

401: Unauthorized Signature validation failed

Your signature generation may not be set up correctly or you are using an incorrect public or secret key.

403: Forbidden Access denied

Your merchant account may not have been fully set up. Please contact us for assistance.

422: Unprocessable Entity Invalid request

You might have issue with the integration. Please contact us and provide your request payload for investigation.

Please note, this request is not sent to the Kitopay API directly, it is sent to the URL that will be provided dynamically in the transaction creation request response (next_action.url) in order to securely process the sensitive card data according to the PCI DSS standards with the help of our certified partners.

Example

curl -X POST 'https://pci.url.tld/dynamic/path/' \
-H 'Content-Type: application/json' \
-H 'x-merchant-id: dev_pub_fb1dad5f-5982-4e1a-ac2f-62a7daaa7148' \
-H 'x-timestamp: 1601234567' \
-H 'x-simplified-signature: da09fe246312d0b1c2682d39b34d5efeb8925617710ec9a752d9a9dc39856945' \
-d '{
    "payout_id": "2fda990a-88cf-445e-abd1-b9bc0a23f4cc",
    "card": {
        "pan": "4242090942421919",
        "exp_month": "02",
        "exp_year": "2028"
    }
}'