For AI agents: the complete documentation index is at /llms.txt, and the full text of every page is at /llms-full.txt. Most pages are also available as Markdown by adding .md to the URL.

3D Secure 2 SDK

Configuration for 3D Secure 2 SDK

Configuration

For configuration code samples, see our Configuration Code for SDKs article.

Notification URLs

Sample Method Notification Endpoint

Sample Challenge Notification Endpoint

Gather device data

Check version

Initiate authentication - exemptions

When a merchant requests an exemption, they will no longer be able to avail of a liability shift in the event of a chargeback.

For Mastercard exemption requests, see our Mastercard Message Extension article.

Mandatory and recommended fields

Optional fields

Authentication - Frictionless flow

Successful authentication response

Failed authentication response

Authentication - Challenge flow

Challenge response

Obtain authentication data

Authorization

3D Secure helper library (client side)

Check Version method

Field	Format	Type	Description
Version Check Endpoint	String	M	Your server-side endpoint responsible for handling the Check Version request and response.
accountId	String	O	Your Account ID assigned by us.
card	Object	M	Object containing the card information.
cardHolderName	String	O	The full name of the cardholder.
customerReference	String	O	Merchant-defined field to reference the customer.
cvn	String	O	The numeric value printed on the physical card.
expMonth	String	O	The expiry date month of the card.
expYear	String	O	The expiry date year of the card.
number	String	O	The card account number used to authorize the transaction. Also known as PAN.
reference	String	O	Merchant-defined field to reference the transaction.
merchantId	String	O	Your Merchant ID assigned by us.
methodNotificationUrl	String	O	The URL that will receive the Method Completion message.
methodWindow	ChallengeWindowOptions	O	Object containing the options on how to present the Challenge Window to the cardholder.
Merchant Data	String	O	Any data you want to pass from the 3DS JavaScript to your server-side code.

Initiate Authentication method

Field	Format	Type	Description
Authentication Endpoint	String	M	Your server-side endpoint responsible for handling the Initiate Authentication request and response.
accountId	String	O	Your Account ID assigned by us.
authenticationRequestType	Enum	O	Indicates the type of channel used to initiate the transaction. Allowed values: AddCard<br />CardholderVerification<br />MaintainCard<br />InstalmentTransaction<br />PaymentTransaction<br />RecurringTransaction
authenticationSource	Enum	O	Indicates the type of channel used to initiate the transaction. Allowed values: Browser<br />MobileSDK<br />StoredRecurring
browserData	Object	M	Object containing the details of the user's browser.
colorDepth	String	M	Browser color depth.
javaEnabled	Boolean	M	Whether the browser can execute Java.
javascriptEnabled	Boolean	M	Whether the browser can execute Javascript.
language	String	M	Browser language.
screenHeight	Number	M	Total height of the customer's screen in pixels.
screenWidth	Number	M	Total width of the customer's screen in pixels.
time	Date	M
timezoneOffset	Number	M	Time difference between UTC time and the customer's browser local time.
userAgent	String	M	Exact content of the HTTP user-agent header sent by the browser.
card	Object	O	Object containing the card information.
challengeNotificationUrl	String	O	URL that receives the Challenge Result message and informs your application that the customer has completed the challenge.
challengeRequestIndicator	Enum	O	Indicates whether a challenge is requested for this transaction. The Issuer may override whatever preference is specified in this field. Allowed values: ChallengeMandated<br />ChallengePreferred<br />NoChallengeRequested<br />NoPreference

Policies

Connect

Additional Resources