---
title: "Issuer’s endpoint to handle VCAS stepup flow"
method: POST
path: "/issuer-vcas-stepup-endpoint"
tags: ["VCAS"]
---

# Issuer’s endpoint to handle VCAS stepup flow

`POST /issuer-vcas-stepup-endpoint`

## Request

- Base URL: `https://api-sandbox.pismolabs.io/3ds-acs`
- URL: `https://api-sandbox.pismolabs.io/3ds-acs/issuer-vcas-stepup-endpoint`
- Auth: none declared

Informs VCAS which authentication types are available for a specific user.

## Request body

- VCASStepUpRequest
  - `id` string, required: Pismo-generated unique authentication ID
  - `provider` 'VCAS', required: Third-party provider name
  - `type` 'STEPUP', required: Operation performed
  - `card` Card, required
    - `id` integer: Card ID
    - `mode_id` integer: Card mode ID
    - `type` 'PLASTIC' | 'VIRTUAL' | 'RECURRING' | 'TEMPORARY': Card type
    - `hash` string: Encrypted PAN using 2048 rsa key and base64 encoded. Pismo provides the encrypt/decrypt keys for this field.
    - `bin` string: Card BIN (Bank Identification Number)
    - `last_four_digits` string: Card last four PAN digits
  - `account` AccountV2, required
    - `id` integer: Pismo account ID
    - `document_number` string: Cardholder document number. A government document number, such as a Social Security number (US) or Cadastro de Pessoas Físicas number (Brazil).
    - `phones` StructuredPhone[]
      - `area_code` string: Area code of the phone number
      - `country_code` string: Country code of the phone number
      - `number` string: Phone number without area code
      - `type` string: Type of phone number (e.g., mobile, commercial, residential)
    - `email` string: E-mail
  - `program` Program, required
    - `id` integer: Program ID
  - `customer` Customer, required
    - `id` number: Customer ID
  - `raw_provider` RawProvider, required: All non-PCI information received from provider. Check provider documentation for details.

## Response `200`

OK

- VCASStepUpResponse
  - `raw_response` object: Raw response to VCAS StepUp request, according with VCAS documentation.

---

[API](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication.md) - [All operations](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/revisions/ed3d19646ffb?raw)