---
title: "Send pre-authentication info"
method: POST
path: "/v1/preauthenticate"
tags: ["Pre-authentication"]
---

# Send pre-authentication info

`POST /v1/preauthenticate`

## Request

- Base URL: `https://api-sandbox.pismolabs.io/3ds-acs`
- URL: `https://api-sandbox.pismolabs.io/3ds-acs/v1/preauthenticate`
- Auth: none declared

Send pre-authentication information to the client's anti-fraud validator to evaluate. Pismo calls the validator's webhook and gets a response before sending a response to the caller.

Pismo provides the encrypt/decrypt keys for the hashed PAN. Talk to your Pismo representative about getting these keys.

For information on PAN encryption, refer to the [PAN encryption for 3DS authentication](doc:pan-encryption-for-3ds-authentication) guide.

## Request body

- PreAuthenticationRequest
  - `id` string, required: Client-generated caller ID.
  - `pan` string, required: Encrypted PAN using 2048 rsa key and base64 encoded. Pismo provides the encrypt/decrypt keys for this field.
  - `raw_provider` RawProvider: All non-PCI information received from provider. Check provider documentation for details.

## Response `200`

OK

- PreAuthenticationResponse
  - `id` string: The Correlation identifier field is used to link related API requests and events. The CID can help the Pismo engineering team track everything related to a call. If not passed, a random one is generated. You can find the CID in the response header.
  - `external_id` string: Provider-generated unique ID for client monitoring and tracking
  - `decision` 'approve' | 'reject': Client's anti-fraud decision
  - `account` PreAuthenticationAccount
    - `id` integer: Pismo account ID
    - `status` 'NORMAL' | 'BLOCKED' | 'CANCELLED': Account status
    - `name` string: name
    - `phone` string: Phone number
    - `email` string: E-mail
  - `customer` PreAuthenticationCustomer
    - `id` number: Customer ID
    - `name` string: name
    - `phone` string: Phone number
    - `email` string: E-mail
  - `card` PreAuthenticationCard
    - `id` integer: Card ID
    - `status` 'NORMAL' | 'BLOCKED' | 'PENDING' | 'LOST' | 'ROBBED' | 'EXPIRED' | 'DAMAGED' | 'FRAUD' | 'WARNING' | 'CANCELED' | 'CREATED' | 'DELETED': Card status
    - `type` 'PLASTIC' | 'VIRTUAL' | 'RECURRING' | 'TEMPORARY': Card type
    - `hash` string: Encrypted PAN using 2048 rsa key and base64 encoded. Pismo provides the encrypt/decrypt keys for this field.
    - `printed_name` string: Printed card name
  - `metadata` Metadata: Metadata returned from client's anti-fraud validator **Note**: This field must not be used to send Personally Identifiable Information (PII), Payment Card Industry (PCI) data, or any sensitive/regulated information. Metadata fields are intended for operational, non-sensitive data only. For sensitive data, use the specific parameters designed for that purpose. For more information, refer to [Get started with Pismo APIs](ref:get-started-with-pismo-apis#metadata).

## Other responses

- `400`: Bad request
- `422`: Unprocessable entity error
- `500`: Internal server error

---

[API](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication.md) - [All operations](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/pismo/apis/card-issuing-3ds-authentication/revisions/ed3d19646ffb?raw)