Create Card Validation

post

https://api.sb.moneris.io/validations

Initiate a new Card Validation request.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

idempotencyKey

string

required

length between 1 and 36

A Unique Identifier that is required for handling idempotent requests.

Note: Moneris encourages the use of UUID Version 4 in APIs as an idempotency key."

orderId

string | null

^[a-zA-Z0-9-_]+$

Indicates the merchant-defined transaction identifer or order ID. Identifiers are unique for every Purchase, Pre-Authorization and Independent Refund transaction

Note: No two transactions of these types may have the same order ID. Field only accepts alphanumerical characters, dashes and underscores.

paymentMethod

required

Used to collect payment data needed to execute the transaction.
Can also be used to collect and save customer payment instruments on file.

customerId

string | null

^[A-Za-z]{2}\d{2}[A-Za-z0-9]{26}$

Unique Identification for the Customer

customerReference

string | null

Unique Identification for the Customer. This can be an identifier generated from a merchant-defined identifier.

dynamicDescriptor

string | null

Merchant defined description sent on a per-transaction basis that will appear on the credit card statement.

Dependent on the card Issuer, the statement will typically show the dynamic descriptor appended to the merchant's existing business name separated by the '/' character.

Note: The combined length of the merchant's business name, forward slash '/' character, and the dynamic descriptor may not exceed 22 characters.

ecommerceIndicator

string

enum

Defaults to SSL_MERCHANT

Describes the category of e-commerce transaction being processed.

Allowed:

customData

object | null

Merchant can send custom meta data with the transaction in this object. Moneris will echo these values back in response.

Headers

Api-Version

string

required

Defaults to 2025-08-14

The endpoint's API Version.

Must be provided through the headers section.

X-Correlation-Id

string

Correlates a series of requests within the same flow.

Note: This ID is generated by Moneris with every request or response, if it doesn't exist.
Merchants are to echo back the value with every request that is part of the call flow."

X-Merchant-Id

string

required

length between 13 and 13

Thirteen character identification code.

Note: This code is provided by Moneris and is required to identify the Merchant executing the transaction."

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

201Validation request created successfully.

400Failed Validation operation result response

401Not authorized. The user does not have a valid API Key or Access Token.

403Forbidden. The user does not have permission to access the requested resource.

409Request could not be completed due to a conflict with resource state or existing idempotency key.

422Failed Validation operation result response

429Too Many Requests

500Unexpected error.

503Service Temporarily Unavailable