Visa Click to Pay

Merchants and Payment Service Providers

API Fundamentals

Endpoints

API Authentication Methods

The Click to Pay API requires two authentication mechanisms only:

Protocols Details
Token Authentication (x-pay-token)

Session-based authentication using JSON Web Tokens that identify specific transactions and their contents.

See API Key – Shared Secret (X-Pay Token) in the Visa Developer Center for authentication setup instructions.

API Key Authentication (apikey)

Client-specific authentication using persistent API keys issued during onboarding.

Keys identify the connecting client system and remain valid throughout the integration lifecycle.