Apply a signed issuer-processor token lifecycle receipt
/cards/wallets/eventsRequires svc_issuerproc service JWT with cards:write and an Ed25519 signature from the configured current network/requestor key. Signing bytes are the wallets.SigningBytes v1 domain-separated typed JSON with UTC issued_at. Issued receipt must follow consent and be within five minutes (30-second future skew). Exact retained event-reference replay is idempotent; changed receipt, sequence gaps, conflicting token mappings and resurrection fail closed. Activation requires signed issuer_identity_verified external evidence.
Headers
Idempotency-KeystringOptionalSend on every write that creates or changes money or state; a replay with the same key returns the original result with 200.
Body parameters
payloadobjectRequiredPayload is the versioned, domain-separated processor receipt. SigningBytes is normative: typed JSON in this field order with the timestamp normalized to UTC. Activate requires issuer_identity_verified; authorize requires cryptogram_verified.
15 child attributes
actionstringRequireddevice_sha256stringRequiredevent_referencestringRequiredevidence_referencestringRequiredevidence_sha256stringRequiredissued_atstring · date-timeRequiredkey_idstringRequirednetworkstringRequirednetwork_token_referencestringRequiredrequestor_idstringRequiredsequenceintegerRequiredtoken_idstringRequiredtransaction_sha256stringOptionalverificationstringOptionalversionstringRequiredsignaturestringRequiredStandard base64 Ed25519 signature
Returns
200 OK
actorstringRequiredreceiptobjectRequired2 child attributes
payloadobjectRequiredPayload is the versioned, domain-separated processor receipt. SigningBytes is normative: typed JSON in this field order with the timestamp normalized to UTC. Activate requires issuer_identity_verified; authorize requires cryptogram_verified.
15 child attributes
actionstringRequireddevice_sha256stringRequiredevent_referencestringRequiredevidence_referencestringRequiredevidence_sha256stringRequiredissued_atstring · date-timeRequiredkey_idstringRequirednetworkstringRequirednetwork_token_referencestringRequiredrequestor_idstringRequiredsequenceintegerRequiredtoken_idstringRequiredtransaction_sha256stringOptionalverificationstringOptionalversionstringRequiredsignaturestringRequiredStandard base64 Ed25519 signature
received_atstring · date-timeRequiredresultobjectRequired15 child attributes
consent_device_sha256stringRequiredconsent_session_sha256stringRequiredconsent_step_up_atstring · date-timeRequiredconsented_atstring · date-timeRequiredconsented_bystringRequiredeffective_statusstringRequiredenrollmentobjectRequired5 child attributes
card_idstringRequiredExample card_2tVh8nqLxq4GbDe0K1F6S9zRcWm
device_sha256stringRequiredOpaque device binding digest, not raw device identifiers
requestor_idstringRequiredterms_sha256stringRequiredterms_versionstringRequiredholder_customer_idstringRequiredExample cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm
idstringRequiredlocal_sequenceintegerRequiredlocal_statusstringRequirednetworkstringRequirednetwork_sequenceintegerRequirednetwork_statusstringRequirednetwork_token_referencestringOptionaltrust_config_sha256stringRequiredverification_keyobjectRequired6 child attributes
idstringRequirednetworkstringRequiredpublic_keystringRequiredStandard base64 Ed25519 public key
requestor_idstringRequiredvalid_fromstring · date-timeRequiredvalid_throughstring · date-timeRequiredErrors
Every error is a problem document with a stable code. See Errors.
400401403404409412413422424429500503