Worldline Mobile Payment Operations API

swagger: '2.0'
info:
  description: 'The current set of APIs will be available in Q2 2026 on Worldline Global Issuing Platforms.

    Additional APIs are under construction and planned to be available in 2026.'
  version: 2.41.1
  title: Worldline Card Issuing Account - AccountState Mobile Payment Operations API
  contact: {}
host: sbx-wlip.api1-eu2.psapigateway.preprod.giservices.io/card-issuing
basePath: /api/v2
schemes:
- https
tags:
- name: Mobile Payment Operations
  description: Apple Pay Controller
paths:
  /issuers/{issuerId}/cards/{cardReference}/create-apple-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Apple push provisioning'
      description: The following web service generates the complete Payment Data Payload for ApplePay
      operationId: createAppleTokenizedCard
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/CreateAppleTokenizedCardV2Request'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2CreateAppleTokenizedCardV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/cards/{cardReference}/create-vts-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Google or Samsung push provisioning (Visa variant)'
      description: Generates the complete Payment Data Payload for VTS
      operationId: createVtsTokenizedCard
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/VtsCommonPushProvisioningRequest'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2CreateVtsTokenizedCardV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/cards/{cardReference}/create-mdes-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Google or Samsung push provisioning (Mastercard variant)'
      description: This service enables generates the complete google Payment Data Payload for MDES
      operationId: createMdesTokenizedCard
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/CreateMdesTokenizedCardV2Request'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2CreateMdesTokenizedCardV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/tokens/{tokenReference}/generate-crypto-otp:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Get-Crypto-OTP by Token'
      description: This service computes OTP, according to either VTS or MDES App to App authentication
      operationId: getCryptoOTPByToken
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/AddBaseRequest'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2GetCryptoOTPV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/cards/{cardReference}/generate-crypto-otp:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Get-Crypto-OTP by card reference'
      description: This service computes OTP, according to either VTS or MDES App to App authentication
      operationId: getCryptoOTPByCardReference
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/AddBaseRequest'
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2GetCryptoOTPV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/cards/{cardReference}/token-list:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get Token list from a Card Reference'
      description: This service returns a token list attached to a given card. The data are the current G-itsp data and could face a desynchronization with scheme referential
      operationId: getTokenData_1
      produces:
      - application/json
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2GetTokenDataV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                responseDateTime: '2023-03-09T10:23:30.746Z'
                statusCode: 403
                statusMessage: NOT_ALLOWED
                timeTakenMs: 37
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/tokens/{tokenReference}/tokenRequestors/{tokenRequestorId}/details:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get token details'
      description: This webservice retrieve token information, if existing on G-iTSP side, updated with the tokenProvider data
      operationId: getTokenDetails
      produces:
      - application/json
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: tokenRequestorId
        in: path
        description: Max length 11 with only Integers. Id of the token requestor as known today
        required: true
        type: string
        maxLength: 11
        minLength: 11
        pattern: \d{11}
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        type: string
        pattern: MDES|VTS
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2DetailsDataResponse'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                responseDateTime: '2023-03-09T10:23:30.746Z'
                statusCode: 403
                statusMessage: NOT_ALLOWED
                timeTakenMs: 37
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '409':
          description: Resource belonging to another entity
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReK
                responseDateTime: '2023-02-09T10:23:30.755Z'
                statusCode: 409
                statusMessage: MISMATCH
                timeTakenMs: 121
          schema:
            $ref: '#/definitions/ResponseV2'
        '410':
          description: Resource is expired
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReH
                responseDateTime: '2023-03-09T10:23:30.752Z'
                statusCode: 410
                statusMessage: EXPIRED
                timeTakenMs: 136
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/tokens/{tokenReference}/update:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Update a token status'
      description: This webservice performs update on existing token
      operationId: updateToken
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        type: string
        pattern: MDES|VTS
      - in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/TokenSelfcareUpdateRequest'
      responses:
        '202':
          description: Accepted
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReE
                responseDateTime: '2024-07-11T12:45:18.473Z'
                statusCode: 202
                statusMessage: ACCEPTED
                timeTakenMs: 185
          schema:
            $ref: '#/definitions/ResponseV2'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                responseDateTime: '2023-03-09T10:23:30.746Z'
                statusCode: 403
                statusMessage: NOT_ALLOWED
                timeTakenMs: 37
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '409':
          description: Conflict
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: Internal Server Error
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                responseDateTime: '2023-03-09T10:23:30.749Z'
                statusCode: 500
                statusMessage: TECHNICAL_ERROR
                timeTakenMs: 36
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/tokens/{tokenReference}/card-reference:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get Card Reference From Token'
      description: This webservice allows local lookup for card identifier (issuerCardId) on a specific Token
      operationId: getCardIdFromToken_1
      produces:
      - application/json
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        type: string
        maxLength: 32
        minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        type: string
        maxLength: 64
        minLength: 0
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        type: string
        pattern: MDES|VTS
        enum:
        - VTS
        - MDES
      responses:
        '200':
          description: OK
          schema:
            $ref: '#/definitions/ResponseV2GetCardIdFromTokenV2Response'
        '400':
          description: Bad Request
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                responseDateTime: '2023-03-09T10:23:30.748Z'
                statusCode: 400
                statusMessage: BAD_DATA
                timeTakenMs: 35
          schema:
            $ref: '#/definitions/ResponseV2'
        '403':
          description: Forbidden
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                responseDateTime: '2023-03-09T10:23:30.746Z'
                statusCode: 403
                statusMessage: NOT_ALLOWED
                timeTakenMs: 37
          schema:
            $ref: '#/definitions/ResponseV2'
        '404':
          description: Resource not found
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                responseDateTime: '2023-03-09T10:23:30.747Z'
                statusCode: 404
                statusMessage: NOT_FOUND
                timeTakenMs: 38
          schema:
            $ref: '#/definitions/ResponseV2'
        '409':
          description: Resource belonging to another entity
          examples:
            application/json:
              responseMetadata:
                correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReK
                responseDateTime: '2023-02-09T10:23:30.755Z'
                statusCode: 409
                statusMessage: MISMATCH
                timeTakenMs: 121
          schema:
            $ref: '#/definitions/ResponseV2'
        '500':
          description: ''
          schema:
            $ref: '#/definitions/ResponseV2'
  /issuers/{issuerId}/cards/{cardReference}/click-to-pay-enroll:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Click-To-Pay: Enroll a card'
      description: Enroll a card into click-to-pay. If account does not exist it will be created. For an account creation (first card) full data must be provided
      operationId: clickToPayEnroll
      consumes:
      - application/json
      produces:
      - application/json
      parameters:
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        type: string
      - name: Content-Type
        in: header
        description: Content-Type used in request, For exa

# --- truncated at 32 KB (85 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wordline/refs/heads/main/openapi/wordline-mobile-payment-operations-api-openapi.yml