Record verified cardholder consent for a configured token requestor

POST/cards/wallets/tokens

Only an explicitly bank-bound customer with customer scope, the card's exact holder ID, verified session/device and authentication within five minutes may consent. The card must be active and holder authority current. Requestor and exact terms version/SHA256 must match CARD_WALLET_CONFIG. An empty configuration disables enrollment. Consent identities, session/device hashes and source terms remain immutable; processor activation is separate.

Headers

Idempotency-KeystringRequired

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

card_idstringRequired

Example card_2tVh8nqLxq4GbDe0K1F6S9zRcWm

device_sha256stringRequired

Opaque device binding digest, not raw device identifiers

requestor_idstringRequired

terms_sha256stringRequired

terms_versionstringRequired

Returns

200 OK

consent_device_sha256stringRequired

consent_session_sha256stringRequired

consent_step_up_atstring · date-timeRequired

consented_atstring · date-timeRequired

consented_bystringRequired

effective_statusstringRequired

enrollmentobjectRequired

5 child attributes

card_idstringRequired

Example card_2tVh8nqLxq4GbDe0K1F6S9zRcWm

device_sha256stringRequired

Opaque device binding digest, not raw device identifiers

requestor_idstringRequired

terms_sha256stringRequired

terms_versionstringRequired

holder_customer_idstringRequired

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

idstringRequired

local_sequenceintegerRequired

local_statusstringRequired

networkstringRequired

network_sequenceintegerRequired

network_statusstringRequired

network_token_referencestringOptional

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503