Download PDF

Releases 2026

Release 1.27. - 23.10.2026

Added

  • Introduced Samsung Pay tokenized payments.
  • New optional data field client_type for Mastercard P2P, Account to Account and Funds Transfer scenarios.
  • New optional data field recipient_type for Mastercard P2P, B2P, OG and SDWO payout scenarios.
  • Mastercard assigned new AAV leading indicator kD and repurposed AAV leading indicator kV.
  • Information about the supported Visa BAI and Mastercard TTI values for AFT and OCT transactions.
  • Original_rtid detail in Recurring payment specific details.

Updated

  • RECO operation timing recommendation for business day closure.
  • Mapping of MDpay MPI mdStatus for Visa cards.
  • In the Authorisation response codes table, code 164 Decline, Fraud/Security violation is mapped to Response code (Visa) 83.

Deprecated

  • Apple Pay purchase scenarios are deprecated, standard SMS and DMS scenarios should be used.

Release 2.23. - 07.10.2026

Fixed

  • Internal technical improvements.

Release 2.22. – 09.09.2026

Added

  • New object rules to the Limit schema to support rules limits.
  • New Card limit - SL_LIMIT0S00000100000000000001 - Single spending geo switch.

Deprecated Endpoint

The following v1 endpoints have been marked as Deprecated in API SPACE and should no longer be used:

  • GET /v1/api/clients Get client list

Release 1.26. - 22.07.2026

Added

Updated

Release 2.21. - 17.06.2026

Added

  • New endpoint GET /v2/api/clients. This request allows users to retrieve clients’ details filtered by specific parameters. This endpoint will replace v1 endpoint Get clients list, which will be deprecated starting with 2.22 release.
  • New endpoint GET /v2/api/trustlist/{ppan} This request allows users to retrieve the current list of trusted merchants for a specific card.
  • New endpoint POST /v2/api/trustlist/{ppan} This request allows users to add a specific merchant to trusted merchants list for a specific card.
  • New endpoint POST /v2/api/trustlist/{ppan}/remove This request allows users to remove a specific merchant from the trusted merchants list for a specific card.

Deprecated Endpoints

The following v1 endpoints have been marked as Deprecated in API SPACE and should no longer be used:

  • GET /v1/api/cards/{ppan} Get card information
  • GET /v1/api/clients/{clientId} Search client by ID

Release 2.20. - 06.05.2026

Added

  • New endpoint GET /v2/api/cards/{ppan} This request allows users to get card information with available balance. This endpoint will replace existing v1 Get Card Information, which will be deprecated starting from 2.21. release.
  • New endpoint GET /v2/api/clients/{clientID} The request allows users to receive clients data by using a specific client ID number. This endpoint will replace existing v1 Search client by ID, which will be deprecated starting from 2.21. release.
  • Improved API SPACE documentation for the Order Card and Create Card V2 endpoints to clearly indicate which field data is not stored in the database.

Deprecated Endpoint

  • POST /v1/api/cards/card-data1 Get sensitive card information 1

Release 1.25. - 17.04.2026

Updated

  • QCash payments improved in line with Mastercard requirements
  • Mandated usage of payment_purpose data field for OCT and AFT transactions to/from Visa cards issued in Saudi Arabia
  • Payment detail usage for Tokenized wallet payments
  • Mastercard authorisation downgrade section
  • Information about Mastercard TLID
  • Field length and format for payouts (OCT) and fundings (AFT)

Changed

  • In OCT AA payment specific detail section to support new Visa BAI ‘LA’ for OCT transactions as well to support cryptocurrency as transaction purpose for Mastercard payouts

Added

  • Tokenized Click To Pay payment support introduced

Release 2.19. - 25.03.2026

Added

  • New endpoint GET /v2/api/cards/{ppan}/card-data7 This request allows users to retrieve sensitive card information, such as the PIN code for a specific PPAN in encrypted format. This endpoint will replace the existing Get Sensitive Information 1 endpoint, which will be deprecated starting from 2.20. release.
  • New endpoint GET /v2/api/accounts/{cardAccount} The request allows users to retrieve detailed information about a specific client's account, including its current balance, status and currency.
  • New endpoint POST /v2/api/accounts/{cardAccount}/state The request allows users to manage the transition of the card account from an active state to permanent closure.

Release 2.18. - 11.02.2026

Added

  • New endpoint POST /v2/api/cards/{ppan}/duplicate The request allows users to duplicate a virtual card to create a physical card while retaining the same card details for eligible card products.
  • New endpoint GET /v2/api/limits/{ppan}/used The request allows users to get used values for the corresponding limit on the card.
Table of Contents