Corgi BankDocumentation
OpenAPI

Apply a signed issuer-processor token lifecycle receipt

POST/cards/wallets/events

Requires svc_issuerproc service JWT with cards:write and an Ed25519 signature from the configured current network/requestor key. Signing bytes are the wallets.SigningBytes v1 domain-separated typed JSON with UTC issued_at. Issued receipt must follow consent and be within five minutes (30-second future skew). Exact retained event-reference replay is idempotent; changed receipt, sequence gaps, conflicting token mappings and resurrection fail closed. Activation requires signed issuer_identity_verified external evidence.

Headers

Idempotency-KeystringOptional

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

payloadobjectRequired

Payload is the versioned, domain-separated processor receipt. SigningBytes is normative: typed JSON in this field order with the timestamp normalized to UTC. Activate requires issuer_identity_verified; authorize requires cryptogram_verified.

15 child attributes
actionstringRequired
device_sha256stringRequired
event_referencestringRequired
evidence_referencestringRequired
evidence_sha256stringRequired
issued_atstring · date-timeRequired
key_idstringRequired
networkstringRequired
network_token_referencestringRequired
requestor_idstringRequired
sequenceintegerRequired
token_idstringRequired
transaction_sha256stringOptional
verificationstringOptional
versionstringRequired
signaturestringRequired

Standard base64 Ed25519 signature

Returns

200 OK

actorstringRequired
receiptobjectRequired
2 child attributes
payloadobjectRequired

Payload is the versioned, domain-separated processor receipt. SigningBytes is normative: typed JSON in this field order with the timestamp normalized to UTC. Activate requires issuer_identity_verified; authorize requires cryptogram_verified.

15 child attributes
actionstringRequired
device_sha256stringRequired
event_referencestringRequired
evidence_referencestringRequired
evidence_sha256stringRequired
issued_atstring · date-timeRequired
key_idstringRequired
networkstringRequired
network_token_referencestringRequired
requestor_idstringRequired
sequenceintegerRequired
token_idstringRequired
transaction_sha256stringOptional
verificationstringOptional
versionstringRequired
signaturestringRequired

Standard base64 Ed25519 signature

received_atstring · date-timeRequired
resultobjectRequired
15 child attributes
consent_device_sha256stringRequired
consent_session_sha256stringRequired
consent_step_up_atstring · date-timeRequired
consented_atstring · date-timeRequired
consented_bystringRequired
effective_statusstringRequired
enrollmentobjectRequired
5 child attributes
card_idstringRequired

Example card_2tVh8nqLxq4GbDe0K1F6S9zRcWm

device_sha256stringRequired

Opaque device binding digest, not raw device identifiers

requestor_idstringRequired
terms_sha256stringRequired
terms_versionstringRequired
holder_customer_idstringRequired

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

idstringRequired
local_sequenceintegerRequired
local_statusstringRequired
networkstringRequired
network_sequenceintegerRequired
network_statusstringRequired
network_token_referencestringOptional
trust_config_sha256stringRequired
verification_keyobjectRequired
6 child attributes
idstringRequired
networkstringRequired
public_keystringRequired

Standard base64 Ed25519 public key

requestor_idstringRequired
valid_fromstring · date-timeRequired
valid_throughstring · date-timeRequired

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503

to move to open esc to close