Skip to main content

Hosted Card Entry Form Guide

API session approach for embedded card capture
When you create a session-based card entry form with a CallBackURL, PCI Booking sends a POST request to that URL each time the session status changes. Your endpoint must accept the following payload.

Webhook Payload

CaptureCardRequestID
string
The ID of the card entry form session. Matches the RequestID returned by Create Card Entry Form Session.
CaptureCardRequestStatus
string
The current status of the session. Possible values:
CardUri
string
The PCI Booking token URL for the stored card. Only present when CaptureCardRequestStatus is OK.

Expected Response

Your callback endpoint must return 200 OK to acknowledge receipt. If PCI Booking does not receive a 200 response, the notification is not retried.