m2pfintech
API LibraryAuthentication And Validation

Validate Card

Validates a card without requiring PIN authentication. This API verifies the card using the last six digits of the card number, expiry date, entity ID, and registered mobile number. Returns card status, kit number, and linked account information on successful validation. This is useful for scenarios where PIN is not available but card identity needs to be confirmed.

POST
/kit-manager/validateCard

Authorization

tenantAuth
tenant<token>

The DCMS tenant name for multi-tenant isolation. Every API call must include this header to identify the client organization.

In: header

Header Parameters

tenant*string

The DCMS client or tenant name for multi-tenant isolation.

Request Body

application/json

cardNoLastSix*string

Last six digits of the card number for identification.

entityId*string

Customer entity identifier.

expiryDate*string

Card expiry date in MMYY format.

mobileNo*string

Registered mobile number for additional verification.

Response Body

application/json

application/json

curl -X POST "https://api.dcms.example.com/v1/kit-manager/validateCard" \  -H "tenant: ACME_BANK" \  -H "Content-Type: application/json" \  -d '{    "cardNoLastSix": "000507",    "entityId": "6766570",    "expiryDate": 129,    "mobileNo": "6786774109"  }'
{
  "result": {
    "entityId": "6766570",
    "kitNo": "40000000",
    "cardStatus": "ACTIVE",
    "accountInfo": [
      {
        "accountNo": "036657655673",
        "accountStatus": "ACTIVE",
        "accountType": "SAVING",
        "accountsCurrency": "INR",
        "branchId": "1",
        "defaultAccount": true,
        "ifscCode": "",
        "initialFunding": "0",
        "isPrimary": false,
        "schemeCode": "0000"
      }
    ]
  },
  "exception": null,
  "pagination": null
}
{
  "result": null,
  "exception": {
    "errorCode": "CRD001",
    "shortMessage": "Card validation failed",
    "detailMessage": "The provided card details do not match any active card",
    "httpStatus": "BAD_REQUEST",
    "fieldError": [
      "Card details mismatch"
    ],
    "languageCode": "en"
  },
  "pagination": null
}

Fetch Accounts by Card Number (Mapping Manager) POST

Retrieves the account-to-kit mapping information for a given card number through the account-kit mapping manager. Returns the entity ID, kit number, and a list of all linked accounts with their details including account number, status, type, currency, branch, IFSC code, and whether the account is a default or primary account. Also returns offline wallet accounts if applicable.

Validate Card Ending POST

Validates a card using the last six digits of the card number along with PIN, CVV, expiry date, and registered mobile number. This is a comprehensive validation that checks multiple credentials simultaneously. Returns card status, kit number, and linked account information on successful validation. The PIN must be encrypted using the shared encryption algorithm before sending.