Authentication and data security for Visa Intelligent Data Exchange API

Third-party data providers must leverage either Mutual Transport Layer Security (m)TLS (also known as Two-Way SSL or Mutual Authentication) or apiKey and X-Pay-Token to perform client-server authentication.

Third-party data providers must apply additional security via Message Level Encryption (MLE), which encrypts the data payload within the API. MLE serves as an extra layer of security outside of authentication.