More Related Content
Similar to Master cardapis v7.2020 (20)
Master cardapis v7.2020
- 1. ©2014 MasterCard.
Proprietary and Confidentialdeveloper.mastercard.com @MasterCardDev
©2014 MasterCard.
Proprietary and Confidential
Peter van der Linden
Coding to the MasterCard OpenAPIs
- 5. ©2015 MasterCard.
tialdeveloper.mastercard.com @MasterCardDev
Consumer APIs
API What it does
Locations Gives a list of nearby ATMs, rePower and travel card agents.
MoneySend Entity-to-consumer payments (sender can be merchant,
government, NGO, person, self)
Merchant ID Expands the brief seller details on a credit card statement
rePower Top up a pre-paid card at POS, ATM, etc
Local Favorites List restaurants favored by locals in some place
Places Up-to-date info about nearby merchants (e.g. really open?)
Western Union
Money Transfer
Send/get money to/from Western Union network
- 6. ©2015 MasterCard.
tialdeveloper.mastercard.com @MasterCardDev
Merchant APIs
API What it does:
Simplify Commerce Adds ability to pay by any credit card to a merchant's website. More later
MasterPass Partner
Wallet
Creates new, or links to an issuer bank's existing, MasterCard-branded wallet.
Users can add any payment card into their wallet. More later.
MasterPass
merchant checkout
Allows user to choose a payment card at checkout. Remembers billing & ship data.
Easily integrated with Simplify Commerce (2-3 lines of javascript),
Shows icons representing cart contents during checkout for better UI
Connected chkout = merchant saves user/wallet connection for speed in checkout
Express checkout = recall which card & details are used, for next time. More later.
Lost/Stolen cards Checks if a card number is on the list of lost or stolen cards
Fraud score How risky is this transaction? 0 = safe, 999 = very high risk
Retail banking
agent
Draw money from your existing pre-paid card, at a participating merchant
(Mexico only)
- 12. ©2015 MasterCard.
tialdeveloper.mastercard.com @MasterCardDev
Security – required for financials!
RSA key pair, public key delivered in a CSR
Oauth 1, with Google body-hash extension
a nonce
SHA-1 hash of request body, base64 encoded
Sign signature base string using your private key
See http://goo.gl/jDPzMm for full details
That's a lot of coding for nothing visible!
- 13. ©2015 MasterCard.
tialdeveloper.mastercard.com @MasterCardDev
Hackathon Solution – proxy server!
URL as it appears in docs on developer zone:
https://sandbox.api.mastercard.com/atms/v1/atm
Proxy server URL (Oct 24/25 only)
http://dmartin.org:8024/atms/v1/atm
Full URL with args:
http://dmartin.org:8024/atms/v1/atm?
Format=XML&PageOffset=0&PageLength=10&AddressLine1=70+Main+St
&PostalCode=63366&Country=USA&InternationalMaestroAccepted=1
- 14. ©2015 MasterCard.
tialdeveloper.mastercard.com @MasterCardDev
REST APIs - summary
Use proxy to Sandbox, not production URLs
Use http not https, with proxy
Don't adjust your browser or PC proxy settings
Get string, or Post XML doc
Response is sent back as an XML document
Tip: get it working in Postman first
Tip: http://xmlvalidator.com