---
title: "Bind Visa device and token"
method: POST
path: "/v1/cards/{cardId}/network-tokens/{tokenId}/devices/{deviceId}/binding"
tags: ["Token lifecycle"]
---

# Bind Visa device and token

`POST /v1/cards/{cardId}/network-tokens/{tokenId}/devices/{deviceId}/binding`

## Request

- Base URL: `https://gw-pci.pismolabs.io/cards-tokenization`
- URL: `https://gw-pci.pismolabs.io/cards-tokenization/v1/cards/{cardId}/network-tokens/{tokenId}/devices/{deviceId}/binding`
- Auth: HTTP bearer

Executes Visa device binding for a given token and device. Device binding establishes that a specific device belongs to a specific cardholder. Once bound, the device can be trusted more in future transactions.

An issuer can use this endpoint to update the status of a specific device linked to a token.

**Notes**:
 * This is a PCI endpoint, use the https://gw-pci.pismolabs.io/cards-tokenization environment.
 * This endpoint takes an account token - an access token encoded with a Pismo account ID

## Path parameters

- `cardId` string, required
- `tokenId` string, required
- `deviceId` string, required

## Request body

- VisaDeviceBindingRequest
  - `operator_id` string, required: Client-generated ID for person or system performing the operation. This is for client monitoring and internal record-keeping.
  - `operation_type` 'TOKEN_DEVICE_BINDING_REMOVE' | 'TOKEN_DEVICE_BINDING_APPROVE' | 'TOKEN_DEVICE_BINDING_APPROVE_BANK_APP' | 'TOKEN_DEVICE_BINDING_APPROVE_CALL_CENTER', required: Visa device binding lifecycle operation type.
  - `operation_reason` 'FRAUD' | 'LOST_CARD' | 'STOLEN_CARD' | 'LOST_DEVICE' | 'STOLEN_DEVICE' | 'CUSTOMER_REQUEST' | 'CLOSED' | 'FOUND_DEVICE', required: Visa lifecycle operation reason.
  - `activation_code` string: Activation code **REQUIRED** when `operation_type` = `TOKEN_DEVICE_BINDING_APPROVE_CALL_CENTER`.
  - `device_index` integer, required: Visa index number for device ID.

## Response `200`

Operation successfully executed.

- object
  - `network_ack` boolean: Was the network operation acknowledged?

## Other responses

- `400`: Bad request
- `401`: Access token is missing or invalid
- `500`: Internal Server Error

---

[API](https://skmtc.dev/pismo/apis/card-issuing-tokenization.md) - [All operations](https://skmtc.dev/pismo/apis/card-issuing-tokenization/llms.txt) - [OpenAPI document](https://skmtc.dev/pismo/apis/card-issuing-tokenization/revisions/fbf231735d66?raw)