---
title: "Send pre-authentication for evaluation"
method: POST
path: "/customer_evaluation_provided_url"
tags: ["HST"]
---

# Send pre-authentication for evaluation

`POST /customer_evaluation_provided_url`

## Request

- Base URL: `https://api-sandbox.pismolabs.io/3ds-acs`
- URL: `https://api-sandbox.pismolabs.io/3ds-acs/customer_evaluation_provided_url`
- Auth: none declared. Required headers: `account_id`, `card_id`

Send pre authentication information to customer to evaluate the authentication.

## Headers

- `account_id` integer, required
- `card_id` integer, required

## Request body

- Evaluate
  - `id` string, required: Pismo-generated unique authentication ID
  - `external_id` string, required: Provider-generated unique ID for client monitoring and tracking
  - `provider` 'HST', required: Third-party provider name
  - `type` 'authentication' | 'challenge-request', required: Evaluation intention
  - `card` Card, required
    - `id` integer: Card ID
    - `mode_id` integer: Card mode ID
    - `type` 'PLASTIC' | 'VIRTUAL' | 'RECURRING' | 'TEMPORARY': Card type
    - `hash` string: Encrypted PAN using 2048 rsa key and base64 encoded. Pismo provides the encrypt/decrypt keys for this field.
    - `bin` string: Card BIN (Bank Identification Number)
    - `last_four_digits` string: Card last four PAN digits
  - `account` Account, required
    - `id` integer: Pismo account ID
    - `document_number` string: Cardholder document number. A government document number, such as a Social Security number (US) or Cadastro de Pessoas Físicas number (Brazil).
    - `postal_code` string: Cardholder postal code
  - `program` Program, required
    - `id` integer: Program ID
  - `customer` Customer, required
    - `id` number: Customer ID
  - `raw_provider` RawProvider, required: All non-PCI information received from provider. Check provider documentation for details.

## Response `200`

OK

- EvaluateResponse
  - `decision` 'approve' | 'reject' | 'request_challenge', required: Client's anti-fraud evaluated decision
  - `challenge_info` ChallengeInfo: Customer challenge information including cardholder data
    - `cardholder_name` string: Cardholder name
    - `method` 'OTP' | 'OOB': Method to be used to challenge the cardholder. Possible values: - OTP - OOB
    - `cardholder_phone` object: Cardholder phone number details
      - `country_code` string: Country code
      - `area_code` string: Area code
      - `number` string: Phone number without area code
  - `subissuer_id` string: Client's subissuer override, we will use this one to override the issuerSpecificData.subissuerID, if empty, we will use the org_id value.
  - `product_id` string: Client's product override, we will use this one to override the issuerSpecificData.productID, if empty, we will use the program_id value.
  - `metadata` Metadata: Metadata returned from client's anti-fraud validator **Note**: This field must not be used to send Personally Identifiable Information (PII), Payment Card Industry (PCI) data, or any sensitive/regulated information. Metadata fields are intended for operational, non-sensitive data only. For sensitive data, use the specific parameters designed for that purpose. For more information, refer to [Get started with Pismo APIs](ref:get-started-with-pismo-apis#metadata).

---

[API](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication.md) - [All operations](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/revisions/ed3d19646ffb?raw)