Mastercard Notifications API

openapi: 3.2.0
info:
  title: Mastercard Notifications API
  contact:
    name: API Support
    email: apisupport@mastercard.com
    url: https://developer.mastercard.com/support
  version: '1.0'
  description: 'Operations tagged Notifications across 3 of this provider''s published API definitions: mastercard-commercial-event-notifications-openapi.yml, mastercard-community-pass-payment-apis-openapi.yml, mastercard-installments-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.mastercard.com/commercial-event-notifications
  description: Production server URL
- url: https://sandbox.api.mastercard.com/commercial-event-notifications
  description: Sandbox server URL
- url: https://api.mastercard.com/community-pass/payments
  description: Production Environment
- url: https://sandbox.api.mastercard.com/community-pass/payments
  description: Sandbox Environment
- url: https://sandbox.api.mastercard.com/installments
  description: Sandbox
- url: https://api.mastercard.com/installments
  description: Production
tags:
- name: Notifications
  description: Notification Operations - Retrieving collection of generated notifications
paths:
  /notifications:
    get:
      summary: Getting notifications
      description: 'This endpoint represents the collection of notifications that have been generated for the client within the retention period for notifications. A GET on this endpoint retrieves the notifications in a paginated manner.

        '
      tags:
      - Notifications
      operationId: getNotifications
      parameters:
      - $ref: '#/components/parameters/startDateParam'
      - $ref: '#/components/parameters/endDateParam'
      - $ref: '#/components/parameters/subscriptionNameParam'
      - $ref: '#/components/parameters/subjectNameParam'
      - $ref: '#/components/parameters/pushStatusParam'
      - $ref: '#/components/parameters/notificationsOffsetParam'
      - $ref: '#/components/parameters/notificationsLimitParam'
      responses:
        '200':
          $ref: '#/components/responses/GetNotificationResponse'
        '400':
          $ref: '#/components/responses/NotFound'
        '403':
          $ref: '#/components/responses/Forbidden'
    post:
      tags:
      - Notifications
      summary: Mastercard Notifications Api
      description: This API is to be used by the payment provider to notify a payment status to relevant Mastercard Applications in case the payment was initiated from an Application external to Mastercard.
      operationId: paymentNotification
      requestBody:
        $ref: '#/components/requestBodies/NotificationRequest'
      responses:
        '200':
          $ref: '#/components/responses/NotificationSuccess'
        '400':
          $ref: '#/components/responses/BadRequestError'
        '401':
          $ref: '#/components/responses/InvalidAuthHeaderError'
        '403':
          $ref: '#/components/responses/InvalidKeyError'
        '404':
          $ref: '#/components/responses/NotFoundError'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    servers:
    - url: https://api.mastercard.com/commercial-event-notifications
      description: Production server URL
    - url: https://sandbox.api.mastercard.com/commercial-event-notifications
      description: Sandbox server URL
components:
  schemas:
    ICMPProvisioningNotificationContent:
      type: object
      properties:
        tokenInfo:
          type: object
          properties:
            accountNumber:
              description: Conatins the Token Account Number.
              type: string
              minLength: 12
              maxLength: 19
              example: XXXXXXXXXX4733
            expiry:
              description: Contains the token expiry date in YYYY-MM format.
              type: string
              minLength: 7
              maxLength: 7
              example: 2026-12
            accountGuid:
              description: The globally unique identifier of the token.
              type: string
              example: afb79fa1-da6c-44c7-adda-6d7f3931dda9
            createdDate:
              description: Date when the account was created, in ISO 8601 extended format. It can be either in UTC "YYYY-MM-DDThh:mm:ss[.sss]Z" or with an offset "YYYY-MM-DDThh:mm:ss[.sss]�hh:mm", where [.sss] is optional and can be 1 to 3 digits.
              type: string
              example: '2024-02-01T00:00:00Z'
            activatedDate:
              description: Date when the account was activated, in ISO 8601 extended format. It can be either in UTC "YYYY-MM-DDThh:mm:ss[.sss]Z" or with an offset "YYYY-MM-DDThh:mm:ss[.sss]�hh:mm", where [.sss] is optional and can be 1 to 3 digits.
              type: string
              example: '2024-02-12T00:00:00Z'
            lastUpdatedDate:
              description: Date when the account was last updated, in ISO 8601 extended format. It can be either in UTC "YYYY-MM-DDThh:mm:ss[.sss]Z" or with an offset "YYYY-MM-DDThh:mm:ss[.sss]�hh:mm", where [.sss] is optional and can be 1 to 6 digits.
              type: string
              example: '2024-02-12T15:19:36.633965Z'
        tokenType:
          description: Refers to the type of token requested for this digitization. Valid values are EMBEDDED_SE = Embedded Secure Element, CLOUD = Mastercard Cloud-Based, Payments | STATIC = Static token.
          type: string
          minLength: 1
          maxLength: 16
          example: CLOUD
        eventType:
          description: Refers to the type of the provisioning event. Valid values are APPROVED, REQUIRE_ADDITIONAL_AUTHENTICATION, COMPLETED, REJECTED.
          type: string
          example: COMPLETED
        tokenRequestorId:
          description: Refers to the party that requested the digitization. This field is conditional and is required only if the tokens are assigned by MDES.
          type: string
          minLength: 11
          maxLength: 11
          example: '50134085386'
        reasonCode:
          description: 'Contains the reason code for why the notification is being sent. This applies to all tokens in the Tokens array. Must be one of:  STATUS_UPDATE- The status of the tokens has been changed, REDIGITIZATION_COMPLETE - The token has been re-digitized to the device, DELETED_FROM_CONSUMER_APP - The token has been deleted from the consumer application. The token may still be active.'
          type: string
          minLength: 1
          maxLength: 32
          example: STATUS_UPDATE
        correlationId:
          description: Contains the value linking pre-digitization messages generated during provisioning.
          type: string
          minLength: 1
          maxLength: 14
          example: D0013529619845
        source:
          description: 'Contains the source of the account information. Must be one of: - ACCOUNT_ON_FILE : Source was an existing account on file, - ACCOUNT_ADDED_MANUALLY: Source was a new account entered manually be the account holder, - ACCOUNT_ADDED_VIA_APPLICATION: Source was new account added by another application (for example, Issuer banking app), - EXISTING_TOKEN_CREDENTIAL: Source was an existing token, - ACCOUNT_ADDED_VIA_BROWSER: Source was browser.'
          type: string
          minLength: 1
          maxLength: 32
          example: ACCOUNT_ON_FILE
        tokenizedMetaData:
          type: object
          properties:
            accountHolderData:
              description: Contains the account holder's personal information.
              type: object
              properties:
                accountHolderName:
                  description: Conatins the name of the account holder in the format LASTNAME/FIRSTNAME or FIRSTNAME LASTNAME.
                  type: string
                  minLength: 1
                  maxLength: 27
                  example: John Doe
                accountHolderAddress:
                  description: Contains the address for the account holder. Verified as part of reaching the digitization decision.
                  type: object
                  properties:
                    city:
                      description: Refers to the city of the billing address.
                      type: string
                      minLength: 1
                      maxLength: 32
                      example: St. Louis
                    country:
                      description: Refers to the country of the billing address. Expressed as a 3-letter (alpha-3) country code as defined in ISO 3166-1.
                      type: string
                      minLength: 3
                      maxLength: 3
                      example: USA
                    countrySubdivision:
                      description: Refers to the country subdivision (for example, the state in the U.S.) of the billing address.
                      type: string
                      minLength: 1
                      maxLength: 12
                      example: MO
                    line1:
                      description: First line of the billing address.
                      type: string
                      minLength: 1
                      maxLength: 64
                      example: zSqLUXpVDvIlGHqBgwWwaqjefUprTD
                    line2:
                      description: Second line of the billing address.
                      type: string
                      minLength: 1
                      maxLength: 64
                      example: PzWcIVnnUAcwIhClfoRFCpXVBKXKTz
                    postalCode:
                      description: Refers to the postal code (for example, zipcode in the U.S.) of the billing address.
                      type: string
                      minLength: 1
                      maxLength: 16
                      example: '61000'
                accountHolderMobilePhoneNumber:
                  description: accountHolderMobilePhoneNumber conatins the contact details/mobile number details of the account holder.
                  type: object
                  properties:
                    countryDialInCode:
                      description: Conatins the country code for the phone number. E.g. 1 for US or 44 for UK.
                      type: string
                      minLength: 1
                      maxLength: 4
                      example: '1'
                    phoneNumber:
                      description: Contains the phone number, may contain country code along with phone number when countryDialInCode is not present.
                      type: string
                      minLength: 1
                      maxLength: 20
                      example: '4692392391'
                consumerIdentifier:
                  description: Consumer Identifier provided by the token requestor. It's not a mandatory field and is optionally present in AuthorizeService when provided by the wallet provider.
                  type: string
                  minLength: 1
                  maxLength: 88
                  example: 1b24f24a24ba98e27d43e345b532a245e4723d7a9c4f624e93452c1b24f24a24b
                accountHolderEmailAddress:
                  description: The email address of the account holder. Not required - Optionally present in pushAccount request. Not present otherwise.
                  type: string
                  minLength: 6
                  maxLength: 320
                  example: abc@email.com
                deviceLocation:
                  description: Latitude and longitude where the device the consumer is attempting to authorize is located. In the format "(sign) latitude/(sign) longitude" with a precision of 2 decimal places. Ex:"38.63/-90.2". Latitude is between -90 and 90 and longitude is between -180 and 180.
                  type: string
                  minLength: 1
                  maxLength: 64
                  example: 38.63/-90.2
                sourceIp:
                  description: Contains the IP of the device initiating the request.
                  type: string
                  minLength: 7
                  maxLength: 64
                  example: 127.0.0.1
            paymentAccountReference:
              description: The unique account reference assigned to the PAN.
              type: string
              minLength: 29
              maxLength: 29
              example: 50017G8EU2RXB4YI1QIOT9R829RC4
            deviceInfo:
              description: Contains information about the target device to be provisioned.
              type: object
              properties:
                cardCaptureTechnology:
                  description: 'The technology used to capture the card details. New values can be added at any time and must not result in an error. Must be one of: - CAMERA = The card details were captured using the device camera,  - MANUAL = The card details were manually entered,  - UNKNOWN = It is not known how the card details were entered, READER_MODE = The card details were captured using reader mode.'
                  type: string
                  minLength: 1
                  maxLength: 32
                  example: CAMERA
                deviceName:
                  description: Contains the name that the Account holder has associated to the device with the Payment App Provider.
                  type: string
                  minLength: 1
                  maxLength: 64
                  example: Emerson Phone
                formFactor:
                  description: 'The form factor of the device to be provisioned. New values can be added without notice and should be accpeted. Must be one of: - PHONE = Mobile phone, - TABLET = Tablet computer, - TABLET_OR_EREADER = Tablet computer or e-reader, - WATCH = Watch, - WATCH_OR_WRISTBAND = Watch or wristband, including a fitness band, smart strap, disposable band, watch add-on, security/ID Band, - CARD = Card, STICKER = Sticker, - PC = PC or Laptop, - DEVICE_PERIPHERAL = Device peripherals, such as a mobile phone case or sleeve, - TAG = Tag, such as a key fob or mobile tag, - JEWELRY = Jewelry, such as a ring, bracelet, necklace and cuff links, - FASHION_ACCESSORY = Fashion accessory, such as a handbag, bag charm, glasses, - GARMENT = Garment, such as a dress, - DOMESTIC_APPLIANCE = Domestic appliance, such as a refrigerator, washing machine, - VEHICLE = Vehicle, including vehicle attached devices, - MEDIA_OR_GAMING_DEVICE = Media or gaming device, including a set top box, media player, television, - UNDEFINED = Device type that is not yet defined. Used for wallets introducing a new device type that is not yet public knowledge.'
                  type: string
                  minLength: 1
                  maxLength: 64
                  example: PHONE
                imei:
                  description: The IMEI number of the device being provisioned.
                  type: string
                  minLength: 15
                  maxLength: 15
                  example: '352099001761481'
                isoDeviceType:
                  description: Contains the 2 digit device type provided on the iso messages that the token is being provisioned to. Only present when provided by a Wallet Provider.
                  type: string
                  minLength: 1
                  maxLength: 2
                  example: 09
                msisdn:
                  description: The MSISDN of the device being provisioned.
                  type: string
                  minLength: 1
                  maxLength: 15
                  example: '7307406945'
                osName:
                  description: 'The name of the device operating system. Must be one of: - ANDROID = Google Android operating system, - WINDOWS = Microsoft Windows operating system, - TIZEN = Tizen operating system, - IOS = Apple iOS operating system, - PAGARE_EMBEDDED_OS = FitPay embedded operating system, - ANDROID_WEAR = Android wear operating system, - EMBEDDED_OS = All Embedded operating system and Real time Operating systems.'
                  type: string
                  minLength: 1
                  maxLength: 32
                  example: ANDROID
                osVersion:
                  description: The version of the device operating system.
                  type: string
                  minLength: 1
                  maxLength: 32
                  example: 4.4.4
                paymentTypes:
                  description: 'Different types of Payments supported for the token. Must be one of below and Array [String] type: - NFC = The token is NFC capable, - DSRP = The token is DSRP capable, - ECOMMERCE = The token can be used for e-commerce transactions.'
                  type: array
                  items:
                    type: string
                    example: NFC
                serialNumber:
                  description: Contains the serial number of the device. May be masked.
                  type: string
                  minLength: 1
                  maxLength: 64
                  example: 2F6D63
                storageTechnology:
                  description: 'The architecture or technology used for token storage. Must be one of: - DEVICE_MEMORY = Device memory, - DEVICE_MEMORY_PROTECTED_TPM = Device memory using a protected trust platform module, - TEE = Trusted execution environment, - SE = Secure element, - SERVER = Server host, - VEE - Virtual Execution Environment.'
                  type: string
                  minLength: 1
                  maxLength: 32
                  example: SERVER
            accountIdHash:
              description: SHA-256 hash of the Account holder's account ID with the Payment App Provider. Typically expected to be an email address. Type - string (Alpha Numeric) Hex-encoded data (case-insensitive).
              type: string
              minLength: 1
              maxLength: 64
              example: 8F7A8970515A65202E24F7A7240557F467B5218433CD38BCA94778FB445A6952
            activeTokenCount:
              description: The number of active tokens that already exist for the Funding Account based on the token type. Secure Element and Cloud tokens are counted together. Valid values are 0 to 99. A value of 99 means there are 99 or more active tokens. Tokens that have been deleted from the wallet are excluded from the count.
              type: string
              minLength: 1
              maxLength: 2
              example: '44'
            consumerFacingEntityName:
              description: Entity name that account holder recognizes as being where they store their PAN (wallets, merchants, commerce platforms&).
              type: string
              minLength: 1
              maxLength: 100
              example: MasterCard
        walletInfo:
          description: Contains information about the wallet.
          type: object
          properties:
            walletId:
              description: The identifier of the Wallet Provider who requested the digitization. Only present when the token is provided to a Wallet Provider.
              type: string
              minLength: 1
              maxLength: 3
              example: '103'
            paymentAppInstanceId:
              description: The identifier of the Payment App instance within a device that will be provisioned with a token. Only present when supplied by a Wallet Provider.
              type: string
              minLength: 1
              maxLength: 48
              example: 047C4395D11690022347075090475326A02CB5118F774F2F
            secureElementId:
              description: The identifier of the Secure Element to be provisioned with the token. Present only when the token is provisioned to a Secure Element and when provided by the Wallet Provider.
              type: string
              minLength: 1
              maxLength: 128
              example: 1b24f24a24ba98e27d43e345b532a245e4723d7a9c4f624e93452c
        walletProviderDecisioningInfo:
          description: Contains information about the decision recommended by the Wallet Provider.
          type: object
          properties:
            accountLifeTime:
              description: The lifetime of the account with the Token Requestor.
              type: string
              minLength: 1
              maxLength: 2
              example: '4'
            accountScore:
              description: Score given to the account by the Wallet Provider. Value must be between 1 and 5.
              type: string
              minLength: 1
              maxLength: 64
              example: '4'
            deviceScore:
              description: Score given to the device by the Wallet Provider. Value must be between 1 and 5.
              type: string
              minLength: 1
              maxLength: 64
              example: '3'
            phoneNumberScore:
              description: Score given to the phone number by the Wallet Provider. Value must be between 1 and 5.
              type: string
              minLength: 1
              maxLength: 64
              example: '3'
            recommendationReasons:
              description: Reasons provided to the Wallet Provider on how the recommended decision was reached. Please refer to the Reason Codes section in [Mastercard Developers](https://developer.mastercard.com/mdes-pre-digitization/documentation/code-formats/#reason-codes) for all eligible values. Type - Array [String].
              type: array
              items:
                type: string
                example: ACCOUNT_TOO_NEW
            recommendationStandardVersion:
              description: The standards version used by the Wallet Provider to determine the recommended decision.
              type: string
              minLength: 1
              maxLength: 64
              example: 1.0.0
            recommendedDecision:
              description: 'The decision recommended by the Wallet Provider. Must be one of: - APPROVED = Services request was approved, - DECLINED = Services request was declined, - REQUIRE_ADDITIONAL_AUTHENTICATION = Services request requires additional authentication to be approved.'
              type: string
              minLength: 1
              maxLength: 64
              example: APPROVED
        vcnInfo:
          description: Contains information about the virtual card account.
          type: object
          properties:
            accountGuid:
              description: The globally unique identifier of the virtual card account.
              type: string
              example: 4fd7fe39-48de-464e-bed2-c148250d7047
            ownerInfo:
              description: Contains information about the Issuer and Corporate.
              type: object
              properties:
                issuerGuid:
                  description: The globally unique identifier of the Issuer.
                  type: string
                  example: SENTTY83BAA6404E87C4D18F67669A687E8D8E86C9E74740FFE8EE403956EBEFF373661648820215
                corpGuid:
                  description: The globally unique identifier of the Corporate.
                  type: string
                  example: SENTTYA9C1DB157A85313B10E11ACA0B508844145FB98B7A8529E3DA099F1E5D744ADD1692330249
            createdDate:
              description: Date when the account was created, in ISO 8601 extended format. It can be either in UTC "YYYY-MM-DDThh:mm:ss[.sss]Z" or with an offset "YYYY-MM-DDThh:mm:ss[.sss]�hh:mm", where [.sss] is optional and can be 1 to 3 digits.
              type: string
              example: '2024-02-01T00:00:00Z'
            lastUpdatedDate:
              description: Date when the account was last updated, in ISO 8601 extended format. It can be either in UTC "YYYY-MM-DDThh:mm:ss[.sss]Z" or with an offset "YYYY-MM-DDThh:mm:ss[.sss]�hh:mm", where [.sss] is optional and can be 1 to 3 digits.
              type: string
              example: '2024-02-12T15:19:36.633965Z'
            accountNumber:
              description: Contains the Card Account Number.
              type: string
              minLength: 12
              maxLength: 19
              example: XXXXXXXXXXX4547
            expiry:
              description: Card expiry date in YYYY-MM format.
              type: string
              minLength: 7
              maxLength: 7
              example: 2026-12
        rcnInfo:
          description: Contains information about the real card account.
          type: object
          properties:
            accountGuid:
              description: The globally unique identifier of the real card account.
              type: string
              example: 8f89407e-1c7f-4b4b-bfc7-a7ef47207022
            accountNumber:
              description: Contains the Card Account Number.
              type: string
              minLength: 12
              maxLength: 19
              example: XXXXXXXXXXX1234
            expiry:
              description: Card expiry date in YYYY-MM format.
              type: string
              minLength: 7
              maxLength: 7
              example: 2026-12
        purchaseRequest:
          description: Purchase Request Details.
          type: object
          properties:
            purchaseRequestId:
              description: ICCP Purchase Request ID - uniquely identifies the purchase request and VCN
              type: integer
              example: 5213
            rcnAlias:
              description: Real card number alias.
              type: string
              example: Travel Expense RCN
            companyId:
              description: ICCP Company ID - uniquely identifies the company that created the VCN.
              type: integer
              example: 233191
    Error-403:
      type: object
      required:
      - Errors
      properties:
        Errors:
          type: object
          required:
          - Error
          properties:
            Error:
              type: array
              description: An array of error objects giving information about relevant errors.
              items:
                type: object
                properties:
                  Source:
                    type: string
                    description: The origin of the error
                    example: Commercial Event Notifications
                  ReasonCode:
                    type: string
                    description: A unique error code representing the error that occurred
                    example: subscriber.notAllowed
                  Description:
                    type: string
                    description: A developer-friendly description of the error that occurred
                    example: Access not allowed
                  Recoverable:
                    type: boolean
                    description: Can the error be recovered by retrying the same request later?
                    example: false
                  Details:
                    type: string
                    description: Additional details regarding the error that occurred
                    example: Subscriber with consumerKey 'INVALID_CONSUMER_KEY' doesn't have permissions to complete the request
    Error-404:
      type: object
      required:
      - Errors
      properties:
        Errors:
          type: object
          required:
          - Error
          properties:
            Error:
              type: array
              description: An array of error objects giving information about relevant errors.
              items:
                type: object
                properties:
                  Source:
                    type: string
                    description: The origin of the error
                    example: Commercial Event Notifications
                  ReasonCode:
                    type: string
                    description: A unique error code representing the error that occurred
                    example: resource.not.found
                  Description:
                    type: string
                    description: A developer-friendly description of the error that occurred
                    example: The resource provided is not found
                  Recoverable:
                    type: boolean
                    description: Can the error be recovered by retrying the same request later?
                    example: false
                  Details:
                    type: string
                    description: Additional details regarding the error that occurred
                    example: The specified resource was not found
    ICCPAuthorizationNotificationContent:
      description: The content of the notification, the structure of which depends on the subject.
      type: object
      properties:
        messageTypeIndicator:
          description: 'Message Type Identifier. Following are the possible values for messageTypeIndicator: 0110 (Authorization Response), 0120 (Authorization Advice), 0400 (Reversal Request) and 0420 (Reversal Advice).'
          type: string
          minLength: 4
          maxLength: 4
          example: '0110'
        systemTraceAuditNumber:
          description: Systems Trace Audit Number (STAN) is a number a message initiator assigns to uniquely identify a transaction. This value is derived from DE 11.
          type: string
          minLength: 1
          maxLength: 255
          example: '011174'
        financialNetworkCode:
          description: Financial network code derived from DE 63, subfield 1 identifies the specific program or service (for example, the financial network, financial program, or card program) with which the transaction is associated.
          type: string
          example: MCC
        banknetReferenceNumber:
          description: Banknet reference number derived from DE 63, subfield 2 is generated by the Authorization Platform for each originating message it routes. The reference number is guaranteed to be a unique value for any transaction within the specified financial network on any processing day.
          type: string
          example: Q4A91A
        transactionAmount:
          description: The transaction amount represented in minor units, which are the smallest units of a currency. The value is determined by the number of decimal places associated with the currency. Refers to DE 63, subfield 2.
          type: number
          example: 7550
        transactionCurrencyCode:
          description: Currency of the transaction (merchant currency) refers to DE 49.
          type: string
          example: USD
        billingAmount:
          description: Cardholder billing amount (DE 6) indicates the transaction amount in the issuers currency. It is the amount billed to the cardholder in the cardholder account currency, excluding cardholder billing fees and is represented in minor units, which are the smallest units of a currency. The value is determined by the number of decimal places associated with the currency.
          type: number
          example: 7550
        billingCurrencyCode:
          description: The currency code of the cardholder billing defines the currency of DE 6 (Amount, Cardholder Billing).
          type: string
          example: USD
        responseCode:
          description: DE 39 (Response Code) defines the disposition of a previous message or an action taken as a result of receipt of a previous message. Response codes also are used to indicate approval or decline of a transaction. In the event an authorization is declined, the response code indicates the reason for rejection and may indicate an action to be taken at the card acceptor (for example, capture card).
          type: string
          example: '00'
        authorizationCode:
          description: DE 38 (Authorization ID Response) contains the online authorization code provided by the issuer on the original authorization response. It is a transaction response ID code that the authorizing institution assigns. DE 38 is used to transmit a card issuers authorization code for Authorization transactions. In general, the authorization code used in DE 38 may be any combination of alphanumeric characters.
          type: string
          example: '502359'
        transmissionRawDate:
          description: DE 7, subfield 1 (Date) is the date (UTC) that the message was entered into the Mastercard Network in the format MMDD.
          type: string
          example: '1103'
        transmissionRawTime:
          description: DE 7, subfield 2 (Time) is the time (UTC) that the message was entered into the Mastercard Network in the format HHmmss.
          type: string
          example: '101611'
        settlementDate:
          description: Referring to DE 15, the reporting d

# --- truncated at 32 KB (140 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mastercard/refs/heads/main/openapi/mastercard-notifications-api-openapi.yml