Skip to main content
POST
Create an authentication session

Authorizations

x-api-key
string
header
required

API key for service-to-service or merchant authentication.

Headers

x-correlation-id
string<uuid>

Unique identifier for request tracing. Generated by the client or server if not provided.

Example:

"550e8400-e29b-41d4-a716-446655440000"

x-idempotency-key
string<uuid>

Unique key for idempotent request processing. Duplicate requests with the same key are safely ignored.

Example:

"baf6a8e2-0c89-46ef-9ca5-faa65b99bcd5"

Body

application/json

Create a new 3DS authentication session

instrument_id
string<uuid>
required

Instrument ID

Example:

"baf6a8e2-0c89-46ef-9ca5-faa65b99bcd5"

customer
object
required

Customer details

order
object
required

Order details

return_url
string<uri>
required

Return URL for 3DS challenge completion

Example:

"https://example.com/threeds/callback"

device
object

Device information (required for 3DS and risk assessment)

provider
enum<string>

3DS provider. If not provided, the default provider is used.

Available options:
mpgs-threeds
Example:

"mpgs-threeds"

Response

Authentication session accepted for processing.

threeds
object
required