Worldline Mobile Payment Operations API

Apple Pay Controller

Operations 16

POST /issuers/{issuerId}/cards/{cardReference}/create-apple-tokenized-card Token Provisioning: Apple push provisioning #
POST /issuers/{issuerId}/cards/{cardReference}/create-vts-tokenized-card Token Provisioning: Google or Samsung push provisioning (Visa variant) #
POST /issuers/{issuerId}/cards/{cardReference}/create-mdes-tokenized-card Token Provisioning: Google or Samsung push provisioning (Mastercard variant) #
POST /issuers/{issuerId}/tokens/{tokenReference}/generate-crypto-otp Token Provisioning: Get-Crypto-OTP by Token #
POST /issuers/{issuerId}/cards/{cardReference}/generate-crypto-otp Token Provisioning: Get-Crypto-OTP by card reference #
GET /issuers/{issuerId}/cards/{cardReference}/token-list Selfcare : Get Token list from a Card Reference #
GET /issuers/{issuerId}/tokens/{tokenReference}/tokenRequestors/{tokenRequestorId}/details Selfcare : Get token details #
POST /issuers/{issuerId}/tokens/{tokenReference}/update Selfcare : Update a token status #
GET /issuers/{issuerId}/tokens/{tokenReference}/card-reference Selfcare : Get Card Reference From Token #
POST /issuers/{issuerId}/cards/{cardReference}/click-to-pay-enroll Click-To-Pay: Enroll a card #
POST /issuers/{issuerId}/cards/{cardReference}/click-to-pay-remove Click-To-Pay: Remove a card or complete account #
GET /issuers/{issuerId}/cards/{cardReference}/click-to-pay-account-data Click-To-Pay: Return all data provisioned for a given card #
POST /issuers/{issuerId}/cardholders/{cardholderReference}/update Update click-to-pay cardholder data #
POST /issuers/{issuerId}/vts-apple-push-data Issuer service aimed to generate data specific elements for push provisioning with ApplePay (MBPAD, MBPAC) #
POST /issuers/{issuerId}/vts-mobile-banking-auth-code Issuer service aimed to generate data specific elements for app to app provisioning (MBAAC) #
POST /issuers/{issuerId}/vts-payment-instrument-details Issuer service aimed to generate data specific elements for push provisioning for VTS #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/wordline-mobile-payment-operations-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

wordline-mobile-payment-operations-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  description: 'The current set of APIs will be available in Q2 2026 on Worldline Global Issuing Platforms.

    Additional APIs are under construction and planned to be available in 2026.'
  version: 2.41.1
  title: Worldline Card Issuing Mobile Payment Operations API
  contact: {}
servers:
- url: https://sbx-wlip.api1-eu2.psapigateway.preprod.giservices.io/card-issuing/api/v2
tags:
- name: Mobile Payment Operations
  description: Apple Pay Controller
paths:
  /issuers/{issuerId}/cards/{cardReference}/create-apple-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Apple push provisioning'
      description: The following web service generates the complete Payment Data Payload for ApplePay
      operationId: createAppleTokenizedCard
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        schema:
          type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2CreateAppleTokenizedCardV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateAppleTokenizedCardV2Request'
        required: true
  /issuers/{issuerId}/cards/{cardReference}/create-vts-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Google or Samsung push provisioning (Visa variant)'
      description: Generates the complete Payment Data Payload for VTS
      operationId: createVtsTokenizedCard
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        schema:
          type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2CreateVtsTokenizedCardV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VtsCommonPushProvisioningRequest'
        required: true
  /issuers/{issuerId}/cards/{cardReference}/create-mdes-tokenized-card:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Google or Samsung push provisioning (Mastercard variant)'
      description: This service enables generates the complete google Payment Data Payload for MDES
      operationId: createMdesTokenizedCard
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        schema:
          type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2CreateMdesTokenizedCardV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateMdesTokenizedCardV2Request'
        required: true
  /issuers/{issuerId}/tokens/{tokenReference}/generate-crypto-otp:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Get-Crypto-OTP by Token'
      description: This service computes OTP, according to either VTS or MDES App to App authentication
      operationId: getCryptoOTPByToken
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        schema:
          type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2GetCryptoOTPV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddBaseRequest'
        required: true
  /issuers/{issuerId}/cards/{cardReference}/generate-crypto-otp:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Token Provisioning: Get-Crypto-OTP by card reference'
      description: This service computes OTP, according to either VTS or MDES App to App authentication
      operationId: getCryptoOTPByCardReference
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Content-Type
        in: header
        description: Content-Type used in request, For example, “application/json;charset=UTF-8”
        required: true
        schema:
          type: string
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2GetCryptoOTPV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddBaseRequest'
        required: true
  /issuers/{issuerId}/cards/{cardReference}/token-list:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get Token list from a Card Reference'
      description: This service returns a token list attached to a given card. The data are the current G-itsp data and could face a desynchronization with scheme referential
      operationId: getTokenData_1
      parameters:
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: cardReference
        in: path
        description: Max 64 length. Anonymized card identifier (Surrogate of PAN), as defined by Issuer
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2GetTokenDataV2Response'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                  responseDateTime: '2023-03-09T10:23:30.746Z'
                  statusCode: 403
                  statusMessage: NOT_ALLOWED
                  timeTakenMs: 37
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
  /issuers/{issuerId}/tokens/{tokenReference}/tokenRequestors/{tokenRequestorId}/details:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get token details'
      description: This webservice retrieve token information, if existing on G-iTSP side, updated with the tokenProvider data
      operationId: getTokenDetails
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: tokenRequestorId
        in: path
        description: Max length 11 with only Integers. Id of the token requestor as known today
        required: true
        schema:
          type: string
          maxLength: 11
          minLength: 11
          pattern: \d{11}
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        schema:
          type: string
          pattern: MDES|VTS
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2DetailsDataResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                  responseDateTime: '2023-03-09T10:23:30.746Z'
                  statusCode: 403
                  statusMessage: NOT_ALLOWED
                  timeTakenMs: 37
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '409':
          description: Resource belonging to another entity
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReK
                  responseDateTime: '2023-02-09T10:23:30.755Z'
                  statusCode: 409
                  statusMessage: MISMATCH
                  timeTakenMs: 121
        '410':
          description: Resource is expired
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReH
                  responseDateTime: '2023-03-09T10:23:30.752Z'
                  statusCode: 410
                  statusMessage: EXPIRED
                  timeTakenMs: 136
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
  /issuers/{issuerId}/tokens/{tokenReference}/update:
    post:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Update a token status'
      description: This webservice performs update on existing token
      operationId: updateToken
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        schema:
          type: string
          pattern: MDES|VTS
      responses:
        '202':
          description: Accepted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReE
                  responseDateTime: '2024-07-11T12:45:18.473Z'
                  statusCode: 202
                  statusMessage: ACCEPTED
                  timeTakenMs: 185
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReA
                  responseDateTime: '2023-03-09T10:23:30.748Z'
                  statusCode: 400
                  statusMessage: BAD_DATA
                  timeTakenMs: 35
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReC
                  responseDateTime: '2023-03-09T10:23:30.746Z'
                  statusCode: 403
                  statusMessage: NOT_ALLOWED
                  timeTakenMs: 37
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReD
                  responseDateTime: '2023-03-09T10:23:30.747Z'
                  statusCode: 404
                  statusMessage: NOT_FOUND
                  timeTakenMs: 38
        '409':
          description: Conflict
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResponseV2'
              example:
                responseMetadata:
                  correlationId: QQI8qq6jIKq5gO78BocFzSSMI9cI2ReB
                  responseDateTime: '2023-03-09T10:23:30.749Z'
                  statusCode: 500
                  statusMessage: TECHNICAL_ERROR
                  timeTakenMs: 36
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TokenSelfcareUpdateRequest'
        required: true
  /issuers/{issuerId}/tokens/{tokenReference}/card-reference:
    get:
      tags:
      - Mobile Payment Operations
      summary: 'Selfcare : Get Card Reference From Token'
      description: This webservice allows local lookup for card identifier (issuerCardId) on a specific Token
      operationId: getCardIdFromToken_1
      parameters:
      - name: WL-Correlation-ID
        in: header
        description: Max length 64. Unique ID for the API request
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: Authorization
        in: header
        description: Authentication credentials passed in the HTTPS Basic Authorization header. Credentials are provided to the Issuer and need to be different for test and production environments
        required: true
        schema:
          type: string
      - name: issuerId
        in: path
        description: Max length 32. Unique identifier of the Issuer on I-TSP
        required: true
        schema:
          type: string
          maxLength: 32
          minLength: 0
      - name: tokenReference
        in: path
        description: Max length 64. Anonymized token identifier, as defined by Token Service Provider
        required: true
        schema:
          type: string
          maxLength: 64
          minLength: 0
      - name: provider
        in: query
        description: Information about the token provider
        required: true
        schema:
          type: string
          enum:
          - VTS
          - MDES
          pattern: M

# --- truncated at 32 KB (93 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wordline/refs/heads/main/openapi/wordline-mobile-payment-operations-api-openapi.yml