Skip to main content

Testing & sandbox data 🛎️

Direct Payment API

Test cards, values, and request rules for the sandbox environment. This page covers the data referenced in the Quickstart's test payment, laid out here in full for reference as you build.

Test cards​

BrandPANTypical use
Mastercard5341260000000056Debit / sale tests
Visa4236080000000125Alternate brand

Use expiry 12/2033, any holder name, and test CVC 987 — unless your certification script specifies otherwise.

Amounts​

Send amounts as integers in the currency's minor unit: 10101 means 101.01 EUR. For zero-decimal currencies like JPY, send the full amount directly: 1000 means 1000 JPY.

Core request rules​

A few rules govern how a card payment request is structured:

  • Debit (the card pays the merchant) — the card is the sender, and the merchant is receiver.configuration_id.
  • Credit (the merchant pays the card) — the card is the receiver, and the merchant is sender.configuration_id.
  • CVC always goes in custom_data.authentication.cvc, kept separate from the other card fields.
  • Channel — use channel: ecommerce for card-not-present flows.
  • Routing — use routing.payment_flow: credit_card for card payments.