Post-provision a shared card: Webhook sent to the consumer with provisioned card credential and recipient token details after provisioning is complete.
Pre-provision a shared card: Webhook sent to the consumer with cardholder and recipient details to initiate shared card pre-provisioning.
Availability: Restricted
April 2026
New Outbound API:
Visa B2B Payment Controls:
Client Outbound Events: Client Outbound Events
Push authentication request: Visa Commercial’s Virtual Card Authentication service transmits the authentication request to the Fintech, enabling them to initiate the authentication workflow with the end user through either one-time-password (OTP) verification or biometric authentication.
Push user-mapping response: Visa Commercial’s Virtual Card Authentication service will transmit the responses for user-mapping operations (create, read, update, and delete) for API calls in which the callback option has been enabled.
Push biometric result: Visa Commercial’s Virtual Card Authentication service will forward the biometric authentication result received from the Fintech to ACS provider, enabling them to continue the authentication process.
Availability: Public
New Inbound API:
Visa Data Tokens:
Visa Cohorts APIs: Cohorts APIs are used for fetching the segment/cohort level data . Which included fetching the cohort metadata and the actual cohort/segment data at different levell
POST Cohort queries: Queries cohort data based on the specified type and filters. Returns paginated results with configurable limit and offset
GET Cohorts metadata: Retrieves metadata information for available cohort types, including their descriptions and available filters
Availability: Restricted
Visa Intelligent Commerce:
Visa Intelligent Commerce Agent APIs: Visa Intelligent Commerce Agent APIs
Consumer - Enroll Card: Partners can use the Enroll Card feature to register a Consumer's payment method in the VACP Platform and configure initial transaction settings. This process includes recording the Consumer's permission for enrollment, stored as assuranceData. If the consumer has also consented to the agent retrieving personalization signals during enrollment, this is recorded in the consentData field. The Enroll Card function is a backend API designed for secure server-to-server interactions.
Consumer - Initiate Purchase Instruction: The Initiate Purchase Instruction API enables consumers or partners to establish a transaction plan within the VACP Platform. This process records the Consumer's approval for the partner to use their Digital Card in a transaction, stored as assuranceData. It also allows for setting up consumer-defined restrictions and spending limits, also known as mandates. This API is designed for secure server-to-server communication, operating as a backend service.
Consumer - Update Purchase Instruction: The Update Purchase Instruction API enables consumers or partners to modify an existing transaction plan within the VACP Platform. This update process includes revising Digital Card details and adjusting consumer-defined restrictions and spending limits collectively referred to as mandates.
Consumer - Cancel Purchase Instruction: The Cancel Purchase Instruction API allows for the revocation of a previously established transaction plan.
Initiate Purchase and Get Payment Credentials: The Retrieve Payment Credentials API triggers the commencement of one or multiple transactions and retrieves the necessary payment credentials associated with the purchase(s).
Partner - Publish Transaction Event Notifications: The Confirmation API enables Partners or Participants to provide status updates and/or results for Instructions, Purchases, Orders, Shipping, and Payment Events (including Purchase Cancellations or Payment Authorizations).
Availability: Restricted
Visa Offers Network:
Consent Service: Provides endpoints to manage user consents.
Create Consent: Create one or more consent records for a user. Supports multiple consent types in a single request.
Retrieve All Consent Status for a User: Retrieve all consent records for a specific user.
Retrieve a Specific Consent Status for a User: Retrieve a specific consent record for a user by consent type.
Delete a Specific Consent Record for a User: Delete a specific consent record for a user by consent type.
Remove All Consent for a User: Delete all consent records for a specific user (GDPR right to erasure).
Availability: Public
New Endpoint:
Visa Direct Connect:
Notification API:
PayoutStatusNotification(Documentation only): The purpose of the API is to Enable Visa to provide updates of an payout transaction to Originating Entity
Availability: Public
Visa Offers Network:
Offers Service:
Get and Filter Offers: Retrieves a paginated list of offers based on optional filters. Supports filtering by offer type, merchant name, and merchant category with pagination and sorting.
Update Offers: Updates existing merchants and offers in bulk. Allows modification of merchant details, offer details, or both. Merchants must exist before updating.
Delete Offer: Soft deletes a merchant and all associated offers by GOR Merchant ID (UUID). The merchant and offers are marked as inactive but remain in the system for historical tracking.
Get Offer by GOR Merchant ID: Retrieves a merchant and all associated offers by GOR's internal merchant ID (UUID format). Returns complete merchant details including offers, store locations, and identifiers.
Availability: Public
Consumer Enrollment Service:
Get User Consents: Endpoint to get the consent status for a user
Availability: Public
March 2026
Product Updates
New Endpoints:
Click to Pay:
Secure Remote Commerce:
Checkout: The Checkout operation utilizes the Consumer chosen Digital Card and details of the current transaction to retrieve Payment Data and payment related data.
Initiate Identity Validation: The Initiate Identity Validation operation initiates a process to validate that a Consumer is in the possession of or has access to, the Consumer Identity claimed.
Complete Identity Validation: The Complete Identity Validation operation determines whether data, provided by the Consumer as part of a second step of an identity validation process, is valid. It can also be used to check whether an out-of-band service was successful.
Identity Lookup: The Identity Lookup operation uses a provided consumer identity (email address or mobile phone number) to determine whether it is associated with an SRC profile.
Availability: Public
Scan to Pay:
QR Transaction Status Enquiry: API to retrieve the QR transaction status
Availability: Restricted
B2B Virtual Account Payment Method:
Account Management service:
Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
Bulk Requisition Service: Unified endpoint for bulk virtual account operations. The action is determined by the 'action' field in the request body
Get All Payment Credentials: Get all payment credentials by alias id.
Update Alias: Update Alias by Alias Id
Get Alias Id from Value: Get Alias Id from Alias Value
Get Alias: Get Alias by Alias Id
Delete Alias: Delete Alias by Alias Id
Update Payment Credential: Update Payment Credential by paymentcredential Id.
Get Payment Credential: Get payment credentials by paymentcredential Id.
Availability: Public
New Endpoints:
Click to Pay:
SRC Passkey:
GSPA Checkout: The Checkout operation utilises the Consumer’s chosen Digital Card and details of the current transaction to retrieve the payment related secure data. If present in the checkoutResponse attribute, the encryptedPayload or encryptedSignedPayload encrypted according to JSON Web Encryption (JWE) specification RFC 7516 and the algorithm used for encryption is according to RFC 7518, Section 4.1
Availability: Restricted
Visa Offers Network:
Offers Service:
Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
Update Offers for a Merchant: Updates existing offers for merchants. Use this endpoint to modify offer details, change offer status, or activate/deactivate offers.
Get Offers for a Specific Merchant: Retrieves all active offers associated with a specific merchant. Returns an array of offers with complete details including dates, discounts, and status.
Delete Offer for a Merchant: Soft deletes a specific offer by marking it as inactive. The offer record remains in the system but is no longer visible in active queries or available for customer use.
Create New Offers - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
Update Offers - Generic - Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
Eligibility Service:
Get Segments By User ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
Get Segments by Card ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
Get Merchant Ranks by User ID: Returns merchantsRanks details for the provided request parameters.
Get Merchant Ranks by Card ID: Returns merchantsRanks details for the provided request parameters.
Payout Service:
Payout Request - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/payout. Requires X-GOR-CLIENT-ID header for client identification.
Ledger Service:
Ledger Add Event - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/event. Requires X-GOR-CLIENT-ID header for client identification.
Consumer Enrollment Service:
Consumer Enrollment Opt In - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/optIn. Requires X-GOR-CLIENT-ID header for client identification.
Availability: Restricted
Visa Pilot Program Enablement:
QR Wrapper Service:
tranEnquiry: API provides services to retrieve Payment details for CYBS Flow
Availability: Restricted
January 2026
Product Updates
New Product:
Payment Account Tokenization: Payment Account Tokenization (PAT) is a Demand Deposit Account (DDA) tokenization solution following the same paradigm asa Token Service Provider, such as VTS. PAT substitutes a bank account number and replaces this with a surrogate value. This surrogate value is used for an RTP/ACH transaction. This enables banks to manage account payment risk exposure in several payment use cases (p2p, biller, RFP, open banking, wallets, etc.) by replacing account numbers with account tokens linked to attributes and token rules.
Availability: Public
Visa Accounts Receivable Manager(Visa AR Manager): Visa Accounts Receivable Manager (Visa AR Manager) is designed to grow and maintain existing virtual card volume by automating the virtual card transaction process, addressing a significant pain point for B2B accepting merchants.
Availability: Public
New APIs:
Visa Digital Wallet Enabler:
TR HCE API: TR HCE API
Get Keys: This message is used by the token requestor to request the keys from the TSP.
Get Provisioning Data: This message is used by the token requestor to fetch the provisioning data.
Availability: Public
Visa Direct Connect:
Visa Direct Connect SDK: APIs for Visa Direct Connect SDK
Update Preferred Payment Credential: Update a payment credential as the preferred card
Availability: Restricted
Visa Id & Credential:
Batch Solution: Placeholder API for onboarding clients to VICA Batch solution
Batch Enrollment and LCM Solution: Batch Enrollment and LCM Solution
Availability: Restricted
Visa Pilot Program Enablement:
VDCM Card Services: VDCM Card Services
Post Card Look Up: Post Card Look Up
Availability: Restricted
Visa Processing Performance Monitor:
DPS API: These APIs provide DPS transactions stats such as STIP and Declines.
Get Stip Statistics: Retrieve Stand-In Processing data summary
Get Decline Statistics: Retrieve decline data summary
Availability: Restricted
New Endpoints:
Alias Directory Service:
Alias Resolution:
Alias Confirm: Retrieve information about an Alias and the payment credential(s) associated with the Alias. This will help confirm the identity of the person associated with the alias, ensuring secure and accurate transactions.
Availability: Public
Visa Pilot Program Enablement:
QR Wrapper Service:
Enhanced Lookup: This Enhanced Lookup API is used by the wallets to get additional Merchant information by passing the scanned QR payload
Refund Cybersource: Refund Cybersource API end point is used to void or refund the authorized transaction based on the time limit configured for each QR Connector
Place Order: Place Order, hosts API end point to place the order to AliPay
Availability: Restricted
Product Name Change:
Visa AR Manager:
Changed product name to Visa Accounts Receivable Manager