Worldpay Verifications API is one of 45 APIs that Worldpay publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Verification. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.
This API exposes
3 operations
across 3 paths,
and defines 43 schemas.
It is described by OpenAPI 3.2.0, at version 3.
Requests are made against 2 base URLs: https://try.access.worldpay.com, https://access.worldpay.com.
3 operations3 paths43 schemas3 POST
Metadata
The identity and technical contract details declared by the specification.
Specification
OpenAPI 3.2.0
API Version
3
Base URL
https://access.worldpay.com
Authentication
HTTP Basic
Resource Areas
1
Authentication & Security 1
Worldpay Verifications API declares
1 security scheme
for authenticating requests.
It accepts HTTP basic authentication (BasicAuth).
By default, every request must be authenticated.
Paths & Operations 3
Across 3 paths, the API surfaces 3 operations — 3 POST. Each is listed below with its method, path, parameters, and response codes.
Generate required data for 3DS Device Data Collection
deviceDataInitialize2 paramsbody→ 200400502503
POST
/verifications/customers/3ds/authentication
Initiate the 3DS authentication
authenticate2 paramsbody→ 200400502503
POST
/verifications/customers/3ds/verification
Verify the 3DS challenge response
verify2 paramsbody→ 200400502503
Schemas 43
The contract defines 43 schemas that model the data the API accepts and returns. The most detailed are authenticationResponseCartesBancaires (11 properties), 3DS_verify_400_response (8 properties), 3DS_deviceDataInitialize_400_response (8 properties), 3DS_authenticate_400_response (8 properties). Each schema is shown below with its type and property counts.
3DS_authenticate
object
6 properties5 required
3DS_authenticate_challenged_200_response
object
5 properties1 required
transactionReference
string
A unique reference for authentication. For example, e-commerce order code. Use the same transactionReference across all 3 potential request types (deviceDataIn…
authentication
object
Object that contains authentication related information.
4 properties
card_networktoken
object
5 properties3 required
status
string
Indicates the outcome of the authentication or verification request. - Y - Successful authentication - N - Failed authentication - U - Unable to complete authe…
3DS_verify_200_response
object
7 properties
3DS_authenticate_200_response_cartes_bancaires
object
7 properties1 required
card_tokenized
object
2 properties2 required
version
string
The version of 3DS used to process the transaction.
3DS_verify_400_response
object
8 properties2 required
transactionId
string
Directory server transaction Id, if provided should be used in the payment authorization authentication object
validation_errors
object
3 properties3 required
3DS_deviceDataInitialize
object
3 properties2 required
deviceDataCollection
object
Object containing device data collection related information
3 properties2 required
acsTransactionId
string
An identifier assigned by the Access Control Server (ACS) to identify a single transaction. Used primarily for Mastercard 3RI subsequent transactions to link t…
Electronic Commerce Indicator (ECI). Indicates the outcome of the 3DS authentication. | ECI | Meaning | |---|---| | 02 or 05 | Fully Authenticated Transaction…
Object that contains authentication related information.
11 properties
3DS_verify_200_response_failed
object
7 properties
3DS_authenticate_502_response
object
5 properties2 required
3DS_authenticate_400_response
object
8 properties2 required
links
object
3DS_deviceDataInitialize_503_response
object
5 properties2 required
authenticationValue
string
A cryptographic value that provides evidence of the outcome of a 3DS verification. - Visa - Cardholder Authentication Verification Value (CAVV) - Mastercard -…
cardHolderName
string
The name on your customer's card. This is not a mandatory field, however we recommend that you supply this to improve authentication rates.
billingAddress
object
An object containing the billing address information.
7 properties4 required
3DS_authenticate_503_response
object
5 properties2 required
enrolled
string
Status of authentication eligibility. - Y - Bank is participating in 3DS - N - Bank is not participating in 3DS - U - The Directory Server (DS) or Access Contr…
card_wallet_googlepay
object
3 properties2 required
challengeResponse
object
Object containing challenge related information in case of a "challenged" flow
4 properties
merchant
object
An object that contains information about the merchant and API level configuration.
1 property1 required
card_front
object
5 properties3 required
3DS_verify
object
3 properties3 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of Worldpay Verifications API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.