# Manual provisioning payment token activation

This endpoint activates the payment token for a card that has been manually added to a wallet provider. Please read this [guide](/guides/product/issue-cards/card-digital-wallet.md) before implementing this API.
This API is not available for sandbox testing.

Endpoint: POST /spend/profiles/{profileId}/cards/{cardToken}/payment-tokens/{paymentTokenUniqueReference}/activation
Version: 2027Q1
Security: UserToken, ClientCredentialsToken

## Security:

  - `UserToken` (unknown)
    http bearer JWT

  - `ClientCredentialsToken` (unknown)
    http bearer JWT

## Path parameters:

  - `profileId` (integer, required)
    The profile ID

  - `cardToken` (string, required)
    The card token

  - `paymentTokenUniqueReference` (string, required)
    The payment token unique reference issued by the scheme token service

## Header parameters:

  - `X-External-Correlation-Id` (string)
    Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. [Learn more](/guides/developer/headers/correlation-id).

## Request fields (application/json):

  - `activation` (string, required)
    Approve or decline a payment token activation
    Enum: "APPROVE", "DECLINE"

## Response 204:

  - `204` (unknown)
    No Content - Payment token have been successfully activated or declined

## Response 204 headers:

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f

## Response 400:

  - `400` (unknown)
    Invalid request

## Response 400 fields (application/json):

  - `type` (string)
    Validation type error

  - `title` (string)
    A validation type exception

  - `status` (string)
    The HTTP status error code

  - `instance` (string)
    The uri the triggered a validation error

  - `errors` (array)
    A list of specific validation failures.

  - `errors.detail` (string)
    A detailed description of the validation failure.

  - `errors.code` (string)
    A specific code for the validation failure type.

  - `errors.ref` (string)
    A reference to the field that failed validation.

## Response 400 headers (application/json):

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f

## Response 403:

  - `403` (unknown)
    Forbidden request

## Response 403 fields (application/problem+json):

  - `type` (string)
    An access type exception

  - `title` (string)
    The title of the exception

  - `status` (string)
    The HTTP status error code

  - `detail` (string)
    A detailed description of the validation failure

  - `instance` (string)
    The uri the triggered a validation error

  - `code` (string)
    A specific application-level code

## Response 403 headers (application/problem+json):

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f

## Response 404:

  - `404` (unknown)
    Not found

## Response 404 fields (application/problem+json):

  - `type` (string)
    An domain type exception

  - `title` (string)
    The title of the exception

  - `status` (string)
    The HTTP status error code

  - `detail` (string)
    A detailed description of the validation failure

  - `instance` (string)
    The uri the triggered a validation error

  - `code` (string)
    A specific application-level code

## Response 404 headers (application/problem+json):

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f

## Response 429:

  - `429` (unknown)
    Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

## Response 429 headers (application/json):

  - `Retry-After` (integer)
    Number of seconds to wait before retrying the request.
    Example: 5

  - `X-Rate-Limited-By` (string)
    Identifies the rate limiter that triggered the 429 response.
    Example: wise-public-api

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f

## Response 500:

  - `500` (unknown)
    Server side error

## Response 500 fields (application/problem+json):

  - `type` (string)
    An server type exception

  - `title` (string)
    The title of the exception

  - `status` (string)
    The HTTP status error code

  - `detail` (string)
    A detailed description of the validation failure

  - `instance` (string)
    The uri the triggered a validation error

## Response 500 headers (application/problem+json):

  - `X-External-Correlation-Id` (string)
    Echoed back when `X-External-Correlation-Id` was included in the request. [Learn more](/guides/developer/headers/correlation-id).
    Example: f47ac10b-58cc-4372-a567-0e02b2c3d479

  - `x-trace-id` (string)
    Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.
    Example: fba501b6d453b96789f52338f019341f