--- title: "Create Evaluation" method: POST path: "/v1/ato/evaluations" tags: ["Account Take Over Services"] --- # Create Evaluation `POST /v1/ato/evaluations` Receives a new transaction to evaluate Account Take Over request ## Request body - BaseATOData - `device` DeviceData - `ipv4` string — The original ip address v4 from browser. Not required for Payment Antifraud Data with redirection payment. Required if ipv6 is blank - `ipv6` string — The original ip address v6 from browser. Not required for Payment Antifraud Data with redirection payment. Required if ipv4 is blank - `location` Location - `latitude` number, double, required — Device latitude - `longitude` number, double, required — Device longitude - `merchant_device` string — Id of the device, identified by the merchant by their internal systems - `session_id` string — Value generated by javascript/sdk snippet of our device fingerprint solution - `sla_date` string — The date that the evaluation is expected to be resolved - `callback_url` string — A publicly accessible HTTPS endpoint where your application will receive asynchronous notifications about the status of the evaluation. - `type` 'LOGIN' | 'CHANGE_PASSWORD' | 'CHANGE_PROFILE' | 'SIGN_UP' | 'USER_ACTIVATION' | 'GENERAL_CHECKPOINT' | 'ENROLLMENT' | 'ATTEMPT_CHANGE_PASSWORD' | 'ATTEMPT_RESET_PASSWORD' | 'ATTEMPT_ADD_CARD', required — The type of the evaluation - `details` union - LoginDetails - `email` string — Email contact - `user_id` string, required — User identification - `authentication_type` 'PASSWORD' | 'MAGIC_LINK' | 'SOCIAL_NETWORK' — Authentication type - `authentication_result` 'SUCCESS' | 'FAILED' — Result of the authentication - `captcha` boolean — Captcha displayed - `document` ATODocument - `nationality` string — Person nationality. Two-letter country code as described in the ISO 3166 international standard - `number` string, required — Person document number - `type` 'DNI' | 'CPF' | 'CNPJ' | 'CUIL' | 'CI' — Person document type - ChangePasswordDetails - `user_id` string, required — User identification - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `email` string — Email contact - union - union - ChangeProfileAddEmail - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileAddPhone - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileAddAccount - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileAddCard - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileAddPersonalInfo - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - union - ChangeProfileDeleteEmail - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileDeletePhone - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileDeleteAccount - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileDeleteCard - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - union - ChangeProfileUpdateEmail - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileUpdatePhone - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - union - ChangeProfileConfirmEmail - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - ChangeProfileConfirmPhone - `result` 'SUCCESS' | 'FAILED' — Result of the operation - `user_id` string, required — User identification - SignupDetails - `first_name` string, required — First name - `last_name` string, required — Last name - `birth_date` string, required — Birthdate - `email` string, required — Email contact - `gender` 'FEMALE' | 'MALE' | 'OTHER' — Gender - `phones` Phone[] - `area_code` string — Phone area code. If the country code is also available, include the full combination (country code + area code) for better context, though the country code is optional. - `number` string, required — Phone number - `type` string — Phone type - `document` ATODocument - `nationality` string — Person nationality. Two-letter country code as described in the ISO 3166 international standard - `number` string, required — Person document number - `type` 'DNI' | 'CPF' | 'CNPJ' | 'CUIL' | 'CI' — Person document type - `address` Address - `address` string, required — Company address - `number` string, required — Company street number - `cep` string, required — Company cep - UserActivationDetails - `user_id` string, required — User identification - GeneralCheckpointDetails - `user_id` string, required — User identification - `action` string, required — Action where checkpoint is called - EnrollmentDetails - `first_name` string, required — First name - `last_name` string, required — Last name - `birth_date` string, required — Birthdate - `email` string, required — Email contact - `gender` 'FEMALE' | 'MALE' | 'OTHER' — Gender - `phones` Phone[] - `area_code` string — Phone area code. If the country code is also available, include the full combination (country code + area code) for better context, though the country code is optional. - `number` string, required — Phone number - `type` string — Phone type - `document` ATODocument - `nationality` string — Person nationality. Two-letter country code as described in the ISO 3166 international standard - `number` string, required — Person document number - `type` 'DNI' | 'CPF' | 'CNPJ' | 'CUIL' | 'CI' — Person document type - `address` Address - `address` string, required — Company address - `number` string, required — Company street number - `cep` string, required — Company cep - AttemptAddCardDetails - `card` Card - `id` string — Identification Card - `details` CardDetails, required - `unique_id` string — Client card unique identifier - `bin` string, required — Abbreviation for 'Bank Indetification Number'. It's a code that identifies the institution responsable for issuing the credit card. - `last_digits` string — Credit card identifier number last digits - `account_number` string — Number of the account - `card_holder` string — Account holder name - `document_holder` string — Account holder document number - `expiration_month` integer — Card expiration month - `expiration_year` integer — Card expiration year - `type` 'CREDIT' | 'DEBIT' | 'PREPAID', required — Card type - `user_id` string, required — User identification ## Response `200` Evaluation response - StandardApiResponse - `onboardingId` string, required — Onboarding identification - `referenceId` string, required — Client transaction identifier - `status` 'PENDING' | 'INPROGRESS' | 'ACTIONREQUIRED' | 'COMPLETED' | 'REJECT' | 'CANCELLED', required — Onboarding status - `message` string — Information message - `credentials` Credentials - `storeCode` string, required — Store code - `privateKey` string — Authentication key - `orgId` string — Fingerprint key - `paymentAccounts` PaymentAccount[] - `paymentMethod` 'CARD' — Payment method for the extract - `account` string — Payment account number - `evaluatesFraud` boolean — Indicates if the account has antifraud ## Other responses - `400` — Bad Request - `401` — Unauthorized - `500` — Internal Server Error --- [API](https://skmtc.dev/koin/apis/payments-api.md) · [All operations](https://skmtc.dev/koin/apis/payments-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/koin/payments-api/revisions/6f2c01e43fe2/schema)