--- title: "List 3DS Authentications" method: GET path: "/3ds" tags: ["3DS Authentication"] --- # List 3DS Authentications `GET /3ds` ## Request - Base URL: `https://eu-west-1.api.silverflow.com/v1` - URL: `https://eu-west-1.api.silverflow.com/v1/3ds` - Auth: one of: - HTTP basic - HTTP bearer - TypeScript: (a function with typed inputs; its response is checked against the schema) List 3DS transactions. 3DS authentications returned from this endpoint will never have the `authenticationValue` property in either `ares` or `rreq` properties. Requires the `threeDs:List` permission. ## Query parameters - `offsetToken` string - `sortOrder` 'asc' | 'desc' - `limit` integer ## Response `200` A (paged) list of 3DS authentications. - ThreeDsPage - `offsetToken` string - `threeDss` ThreeDsPageEntity[], required - union - ThreeDsFrictionlessAuthenticatedWithoutAuthValue - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.1.0' | '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `deviceChannel` 'browser' | 'app' | '3ri', required: Indicates the type of the interface used to initiate the transaction. - `flow` 'frictionless', required: Indicates the flow that was used for the 3DS authentication. - `result` 'authenticated', required: Authentication result. - `ares` AResWithoutAuthValue, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `acsURL` string: The merchant or PSP needs to send the base64 encoded CReq message as a form to this URL using an HTTP POST, from the cardholder challenge window. The content type needs to be `application/x-www-form-urlencoded`. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `acsSignedContent` string: Contains the JWS object (represented as a string) created by the ACS for the ARes message. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `type` object: Transaction type information from the request - `order` 'checkout' | 'unspecified' | 'one-click' | 'recurring' | 'ucof' | 'installment' | 'standing-order': The method used to place the order. When set to `recurring`, `installment`, or `standing-order`, you are also required to set `recurringExpiry` and `recurringFrequency`. - `intent` 'purchase' | 'reservation' | 'account-status' | 'payout' | 'payout-status' | 'funding' | 'advice' | 'refund': The intention of the cardholder. - `created` string, iso-8601-date-time, required: The date and time this object was created - `version` integer, required: The version of this object - ThreeDsChallenge - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.1.0' | '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `deviceChannel` 'browser' | 'app' | '3ri', required: Indicates the type of the interface used to initiate the transaction. - `flow` 'challenge', required: Indicates the flow that was used for the 3DS authentication. - `result` 'challenge', required: Authentication result. - `ares` ARes, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `acsURL` string: The merchant or PSP needs to send the base64 encoded CReq message as a form to this URL using an HTTP POST, from the cardholder challenge window. The content type needs to be `application/x-www-form-urlencoded`. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `acsSignedContent` string: Contains the JWS object (represented as a string) created by the ACS for the ARes message. - `authenticationValue` string: The result value from the 3DS transaction received from the ACS. This value is no longer present on responses after 45 days have passed after the authentication. Note that Mastercard and Visa use a different underlying format. This property will only be present in the ARes if `transStatus` is `Y`, `A` and conditionally (by DS rules) `I`. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `type` object: Transaction type information from the request - `order` 'checkout' | 'unspecified' | 'one-click' | 'recurring' | 'ucof' | 'installment' | 'standing-order': The method used to place the order. When set to `recurring`, `installment`, or `standing-order`, you are also required to set `recurringExpiry` and `recurringFrequency`. - `intent` 'purchase' | 'reservation' | 'account-status' | 'payout' | 'payout-status' | 'funding' | 'advice' | 'refund': The intention of the cardholder. - `created` string, iso-8601-date-time, required: The date and time this object was created - `version` integer, required: The version of this object - ThreeDsChallengeFinishedWithoutAuthValue - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.1.0' | '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `deviceChannel` 'browser' | 'app' | '3ri', required: Indicates the type of the interface used to initiate the transaction. - `flow` 'challenge', required: Indicates the flow that was used for the 3DS authentication. - `result` 'authenticated' | 'non-authenticated', required: Authentication result. - `ares` AResWithoutAuthValue, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `acsURL` string: The merchant or PSP needs to send the base64 encoded CReq message as a form to this URL using an HTTP POST, from the cardholder challenge window. The content type needs to be `application/x-www-form-urlencoded`. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `acsSignedContent` string: Contains the JWS object (represented as a string) created by the ACS for the ARes message. - `rreq` RReqWithoutAuthValue, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'RReq', required - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `authenticationMethod` string: Authentication approach that the ACS used to authenticate the cardholder for this specific transaction. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `challengeCancel` string: Indicator informing the ACS and the DS that the authentication has been canceled. - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `interactionCounter` string, required: The number of interactions for each transaction tracked by the ACS. - `messageCategory` string, required: Indicates the category of the EMV 3-D Secure message. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `fraudLiability` 'acquirer' | 'issuer': Which party is liable in case of fraud. - `type` object: Transaction type information from the request - `order` 'checkout' | 'unspecified' | 'one-click' | 'recurring' | 'ucof' | 'installment' | 'standing-order': The method used to place the order. When set to `recurring`, `installment`, or `standing-order`, you are also required to set `recurringExpiry` and `recurringFrequency`. - `intent` 'purchase' | 'reservation' | 'account-status' | 'payout' | 'payout-status' | 'funding' | 'advice' | 'refund': The intention of the cardholder. - `created` string, iso-8601-date-time, required: The date and time this object was created - `lastModified` string, iso-8601-date-time, required: The date and time this object was last modified. - `version` integer, required: The version of this object - ThreeDsNoFlowNoAuthWithoutAuthValue - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.1.0' | '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `deviceChannel` 'browser' | 'app' | '3ri', required: Indicates the type of the interface used to initiate the transaction. - `flow` 'none', required: Indicates the flow that was used for the 3DS authentication. - `result` 'attempt' | 'non-authenticated', required: Authentication result. - `ares` AResWithoutAuthValue, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `acsURL` string: The merchant or PSP needs to send the base64 encoded CReq message as a form to this URL using an HTTP POST, from the cardholder challenge window. The content type needs to be `application/x-www-form-urlencoded`. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `acsSignedContent` string: Contains the JWS object (represented as a string) created by the ACS for the ARes message. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `type` object: Transaction type information from the request - `order` 'checkout' | 'unspecified' | 'one-click' | 'recurring' | 'ucof' | 'installment' | 'standing-order': The method used to place the order. When set to `recurring`, `installment`, or `standing-order`, you are also required to set `recurringExpiry` and `recurringFrequency`. - `intent` 'purchase' | 'reservation' | 'account-status' | 'payout' | 'payout-status' | 'funding' | 'advice' | 'refund': The intention of the cardholder. - `created` string, iso-8601-date-time, required: The date and time this object was created - `version` integer, required: The version of this object - ThreeRiResponseWithoutAuthenticationValue - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. For 3RI it's always 2.2.0 - `deviceChannel` '3ri', required: Indicates the type of the interface used to initiate the transaction. - `result` 'authenticated' | 'non-authenticated', required: Authentication result. - `ares` ThreeRiAResWithoutAuthenticationValue, required: The issuer's response to the 3DS request. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'R', required: Indicates whether a transaction is authenticated or not. - `Y` indicates authenticated - `N` indicates not authenticated - `R` indicates rejected - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. For 3RI it's always 2.2.0. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `fraudLiability` 'acquirer' | 'issuer', required: Which party is liable in case of fraud. - `created` string, iso-8601-date-time, required: The date and time this object was created - `version` integer, required: The version of this object - ThreeDsDataOnly - `key` string, required: Uniquely identifies a 3DS authentication. - `merchantAcceptorRef` SchemasAcceptorRef: Reference key and status of the acceptor - `key` string, required: Uniquely identifies a merchant acceptor. - `version` integer, required: The version of this object - `merchantInfo` MerchantInfoResponse: Merchant details as stored and returned in the response. The `merchantCountryCode` is returned as a complete ISO 3166-1 country code object containing all representations. - `acquirerBin` string: 6-11 digit Bank Identification Number assigned by the card network. Required for all card networks except AMEX. - `merchantId` string, required: Merchant identifier (MID) assigned by the acquirer. - `mcc` string, required: 4-digit ISO 18245 merchant category code - `merchantName` string, required: Merchant's doing-business-as name - `merchantCountryCode` object, required - `alpha3` string, required: ISO 3166-1 alpha-3 country code - `alpha2` string, required: ISO 3166-1 alpha-2 country code - `numeric` string, required: ISO 3166-1 numeric country code - `websiteUrl` string, required: Merchant's website URL - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is EXPERIMENTAL. - `amount` union, required: An amount encoded as an object with a `value` in minor units and a `currency` code. The amount is unknown for entities older than 2023-03-30. - Amount: An amount encoded as an object with a `value` in minor units and a `currency` code. - `value` integer, required: The amount in minor units. For example `$12.34` should be encoded as `1234`. Note that not all currencies have 2 minor units. Some have three or zero. - `currency` string, required - UnknownAmount - `value` -1, required: The value of the amount is unknown. - `currency` 'unknown', required: The currency code is unknown. - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa' | 'unknown', required: The card network that was used for the authentication. It is `unknown` for entities older than 2024-04-11. - `protocolVersion` '2.1.0' | '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `deviceChannel` 'browser' | 'app' | '3ri', required: Indicates the type of the interface used to initiate the transaction. - `flow` 'none', required: Indicates the flow that was used for the 3DS authentication. - `result` 'informational', required: Authentication result. - `ares` ARes, required: A 3DS protocol message as it is received by the card network. Note: `threeDSServerTransID` is present in all message types except `Erro` (ErrorMessage), where it is conditional per the EMVCo spec. - `messageVersion` '2.2.0', required: The 3DS protocol version which has been used to perform 3DS. **Protocol version 2.1.0 is no longer supported by the card networks. The value 2.1.0 can be retrieved for older authentications.** - `sdkTransID` string, uuid: Universally unique transaction identifier assigned upon the activation of 3DS SDK. - `messageExtension` MessageExtension[]: Carries additional data that is not defined within the 3DS protocol. This field is usually used for card network specific data. - `name` string, required - `id` string, required - `criticalityIndicator` boolean, required - `data` unknown, required - `messageType` 'ARes', required - `dsTransID` string, uuid, required: Universally unique transaction identifier assigned by the DS to identify a single transaction. - `acsTransID` string, uuid, required: Universally unique transaction identifier assigned by the ACS to identify a single transaction. Each DS can provide a unique ID to each ACS on an individual basis. - `transStatus` 'Y' | 'N' | 'U' | 'A' | 'C' | 'D' | 'R' | 'I', required: Indicates whether a transaction qualifies as an authenticated transaction or account verification. - `transStatusReason` string: Provides information on why the `transStatus` field has the specified value. - `threeDSServerTransID` string, required: Universally unique transaction identifier assigned by the 3DS server to identify a single transaction. This identifier is assigned by Silverflow. - `cardholderInfo` string: Text provided by the ACS/issuer to cardholder during a frictionless or decoupled transaction. - `acsChallengeMandated` string: Indication of whether a challenge is required for the transaction to be authorized due to local/regional mandates or other variable. - `dsReferenceNumber` string, required: EMVCo-assigned unique identifier to track approved DS. - `acsReferenceNumber` string, required: Unique identifier assigned by the EMVCo secretariat upon testing and approval. - `acsOperatorID` string: DS assigned ACS identifier. - `acsDecConInd` string: Indicates whether the ACS confirms utilisation of decoupled authentication and agrees to utilize decoupled authentication to authenticate the cardholder. - `acsRenderingType` AcsRenderingType: The ACS rendering type contains information about the rendering type that the ACS is sending for the cardholder authentication. - `acsInterface` string, required: This is the ACS interface that the challenge will present to the cardholder. - `acsUiTemplate` string, required: Identifies the UI template format that the ACS first presents to the consumer. - `acsURL` string: The merchant or PSP needs to send the base64 encoded CReq message as a form to this URL using an HTTP POST, from the cardholder challenge window. The content type needs to be `application/x-www-form-urlencoded`. - `authenticationType` string: Indicates the type of authentication method the issuer will use to challenge the cardholder, whether in the ARes message or what was used by the ACS when in the RReq message. - `eci` string: Payment system-specific value provided by the ACS or DS to indicate the results of the attempt to authenticate the Cardholder. - `whiteListStatus` string: Enables the communication of trusted beneficiary/whitelist status between the ACS, the DS and the 3DS requestor. - `whiteListStatusSource` string: This data element will be populated by the system setting Whitelist Status. Required if Whitelist Status is present. - `acsSignedContent` string: Contains the JWS object (represented as a string) created by the ACS for the ARes message. - `authenticationValue` string: The result value from the 3DS transaction received from the ACS. This value is no longer present on responses after 45 days have passed after the authentication. Note that Mastercard and Visa use a different underlying format. This property will only be present in the ARes if `transStatus` is `Y`, `A` and conditionally (by DS rules) `I`. - `transactionReference` string: Unique ID assigned by the merchant or payment service provider for the transaction. Used to identify the transaction. - `fraudLiability` 'acquirer' | 'issuer': Which party is liable in case of fraud. - `type` object: Transaction type information from the request - `order` 'checkout' | 'unspecified' | 'one-click' | 'recurring' | 'ucof' | 'installment' | 'standing-order': The method used to place the order. When set to `recurring`, `installment`, or `standing-order`, you are also required to set `recurringExpiry` and `recurringFrequency`. - `intent` 'purchase' | 'reservation' | 'account-status' | 'payout' | 'payout-status' | 'funding' | 'advice' | 'refund': The intention of the cardholder. - `created` string, iso-8601-date-time, required: The date and time this object was created - `version` integer, required: The version of this object ## Other responses - `400`: Bad Request - `401`: Authentication Required - `429`: Too Many Requests - `500`: Internal Server Error --- [API](https://skmtc.dev/silverflow/apis/silverflow-api.md) - [All operations](https://skmtc.dev/silverflow/apis/silverflow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/silverflow/apis/silverflow-api/revisions/43ecbe4fd6ea?raw)