---
title: "FSS ACS Authentication V2"
method: POST
path: "/pws/v2/pws_acs_authentication/"
tags: ["Card"]
---

# FSS ACS Authentication V2

`POST /pws/v2/pws_acs_authentication/`

## Request

- Base URL: `https://api.uat.paymentology.com/ppws/api`
- URL: `https://api.uat.paymentology.com/ppws/api/pws/v2/pws_acs_authentication/`
- Auth: none declared

This API is used for Transaction Authentication from ACS to MB Server

## Request body

- AcsAuthenticationModel
  - `amount` string, required: Transaction amount in minor units of the ongoing transaction.
  - `authType` string, required: Authentication type 0 - No Client Authentication – (Only OTP Delivery) 1- Client authentication (OOB)
  - `currencyCode` string, required: Currency in which amount is expressed.
  - `exponent` string, required: Minor units of Currency Code.
  - `merchantName` string, required: Name of Merchant where transaction was initiated.
  - `messageCategory` string, required: Txn payment type 01- Payment 02- Non Payment.
  - `proxyCard` string, required: This represents the Token Number / Alias Number which will be used in place of Card Number (this would be shared with ACS during Registration).
  - `tranID` string, required: Unique txn ID generated by ACS for every transaction.
  - `otp` string: OTP [If Encrypted OTP is sent in this field]. MB Server has to send the same to Card Holder.
  - `encvalue` string: Encrypted dynamic DEK using KEK
  - `dstranID` string: Unique reference ID received from Mastercard DS in every Authentication Request message (AREQ)
  - `merchantURL` string: Merchant App URL that Authentication App can call the Merchant app after OOB authentication has occurred.

## Response `200`

Successful Response

- AcsAuthenticationResponseModel
  - `description` string, required: Result description
  - `oobType` string, required: Performed authentication method If Zero, values would be [OTP Sent] If Single, values would be [biometric (or) pattern] If Dual, values will be comma separated biometric, pattern
  - `proxyCard` string, required: card proxy number received in request.
  - `resultCode` string, required: Result code to indicate whether transaction was success or failed • 00-Success • 01-Declined
  - `tranId` string, required: Unique txn ID generated by ACS for every transaction.
  - `status` Status
    - `code` string, required: Result code to indicate whether transaction was success or failed • 00-Success • 01-Declined
    - `message` string, required: Any meaningful message
  - `tranID` string

## Other responses

- `404`: Webservices does not exist
- `500`: Internal Server error

## Changes

- **2026-11-03** `73c2771493b1`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/paymentology/apis/payapi-docs/changes/pws/v2/pws_acs_authentication/post.md)

---

[API](https://skmtc.dev/paymentology/apis/payapi-docs.md) - [All operations](https://skmtc.dev/paymentology/apis/payapi-docs/llms.txt) - [OpenAPI document](https://skmtc.dev/paymentology/apis/payapi-docs/revisions/73c2771493b1?raw)