Cards manual provisioning verification

Cards manual provisioning verification
Webhook

Request

Triggered when a card is manually added to a wallet provider, and the verification methods required to complete the wallet provisioning are returned.

Event type: cards#manual-provisioning-verification
Profile level subscriptions: Not Supported
Application level subscriptions: Supported

See the Webhooks guide for setup instructions, signature verification, and best practices.

X-Signature-SHA256string

RSA-SHA256 signature of the request body, Base64 encoded. Verify this against the Wise public key to ensure the request is authentic and has not been tampered with.

Example:t7FMhk3OARMgwqz0LJXO...

X-Delivery-Idstring, (uuid)

Unique identifier for this webhook delivery attempt.

Example:a1b2c3d4-e5f6-7890-abcd-ef1234567890

X-Test-Notificationboolean

Present with the value true if this is a test notification sent to verify your callback URL during subscription setup.

Example:true

Bodyapplication/json

schema_versionstring

Version of the event schema. Determined by the schema_version on your webhook subscription.

Value:"2.0.0"

Example:"2.0.0"

subscription_idstring, (uuid)

ID of the webhook subscription that triggered this event.

Example:"5281e333-a4d9-4960-aec3-553267a9a8aa"

event_typestring

Event type identifier

Example:"cards#manual-provisioning-verification"

sent_atstring, (date-time)

Timestamp when the event was sent.

Example:"2026-03-09T05:52:37Z"

dataobject

Payload

{
  "schema_version": "2.0.0",
  "subscription_id": "5281e333-a4d9-4960-aec3-553267a9a8aa",
  "event_type": "cards#manual-provisioning-verification",
  "sent_at": "2026-03-09T05:52:37Z",
  "data": {
    "resource": {
      "profile_id": 9953556,
      "client_id": "tw-test-card-issuance",
      "card_token": "72393ec3-0707-4bf1-00b7-744f7a380d2c",
      "type": "card"
    },
    "payment_token_unique_reference": "DNITHE352605523102858206",
    "last_four_digits": "8237",
    "creation_time": "2026-03-09T05:52:37.274962Z",
    "wallet_name": "Google Pay"
  }
}

Responses

Return any 2xx status to acknowledge receipt of the event.

Bodyapplication/json

statusstring

Example:"ok"

Response

{
  "status": "ok"
}