This API is used to notify Financial Institutions and Token Requestors when tokens are provisioned or when the state of a token change.
This API is used to notify Financial Institutions and Token Requestors when tokens are provisioned or when the state of a token change.
| Endpoint | Usage |
|---|---|
| /token/state/provisioned | Notification to inform FI that the token was provisioned to their account. |
| /token/state/changed | Notification to inform FIs and TRs that token state has changed. |
<Link to APIConnect reference page>
Message flow patterns for PAT notification delivery.
PAT uses standardized message flows to deliver notifications to Financial Institutions and Token Requestors. These flows ensure reliable and consistent notification delivery.
During provisioning of tokens by the Token Requestor, the Financial Institution can receive a notification with the real account number that is tokenized. Token Requestors can use the Token Requestor API or batch tokenization to provision tokens.
When token states change, notifications are sent to relevant parties:
Notifications sent during token provisioning operations.
During provisioning of tokens by the Token Requestor, the Financial Institution can receive a notification with the real account number that is tokenized.
Provisioning notifications include:
Token Requestors can use the Token Requestor API or batch tokenization to provision tokens, and notifications will be sent for both methods.
Overview of token lifecycle notification processes and flows.
PAT provides comprehensive notification capabilities to keep Financial Institutions and Token Requestors informed about token state changes. These notifications ensure all parties are aware of important token lifecycle events.
Notifications are delivered through the Notification API endpoints and include:
Notifications sent when Financial Institutions initiate token lifecycle changes.
Financial Institutions can change the state of tokens that are linked to their real account numbers. Token state changes can be initiated using the Financial Institution API, Customer Service Portal or batch lifecycle management. The Token Requestor that owns the linked token can receive a notification. If the Token Requestor is part of a requestor chain, then the notification is sent to the root level Token Requestor.
When a Financial Institution initiates a token state change:
Notifications sent when Token Requestors initiate token lifecycle changes.
Token Requestors can change the state of the tokens they own. Token state changes can be initiated using the Token Requestor API or Customer Service Portal. The Financial Institution that owns the linked real account number can receive a notification.
When a Token Requestor initiates a token state change:
Response codes and status messages for Notification API endpoints.
This section includes detailed information about the API Response fields statusCode and statusMessage.
{
"messageId": "6fdf4f09-7fbb-48ae-be1e-ac412a2949a7",
"conversationId": "aa3a5f54-6eb2-4714-aea3-9f525353cbd7",
"statusCode": "0000",
"statusMessage": "Success.",
"stateChangeReasonCode": "INITIATED_BY_REQUESTOR"
}
| HTTP Code | statusCode | statusMessage | Applicable Message |
|---|---|---|---|
| 200 | 0000 | Success. | - |
| 400 | 1301 | Invalid request. The data field is not in the correct data type format or length or pre-defined values or the required data field is missing. | - |
| 500 | 1300 | Unknown internal server error. Try again later. | - |
| 500 | 1399 | Unknown error. | - |
<Link to APIConnect reference page>
Example HTTP 200 response from Notification API.
{
"messageId": "6fdf4f09-7fbb-48ae-be1e-ac412a2949a7",
"conversationId": "aa3a5f54-6eb2-4714-aea3-9f525353cbd7",
"statusCode": "0000",
"statusMessage": "Success.",
"stateChangeReasonCode": "INITIATED_BY_REQUESTOR"
}
Detailed response message codes for Notification API operations.
This section provides detailed information about response message codes specific to Notification API operations.
Notification API responses indicate the success or failure of notification delivery attempts.
Notification recipients should handle responses appropriately: