Developer Hub

Integrate 3DS Authentication

Add EMV 3-D Secure to your checkout in minutes. Choose the JavaScript SDK for a drop-in solution, or use the Direct API for complete control over the authentication flow.

Sandbox

api-sandbox.3dsintegrator.com

Test with sample cards, no real charges

Production

api.3dsintegrator.com

Live authentication with real issuers

Getting Started

Quick Start Guide

Go from zero to authenticated in five steps.

STEP 01

Get Credentials

Get your API key from your PAAY dashboard. Enable Domain Matching and/or Pass in JWT for security.

STEP 02

Choose Integration

Use the JS SDK for a drop-in solution with minimal code, or the Direct API for full control over every step.

STEP 03

Set Up Sandbox

Point to api-sandbox.3dsintegrator.com and use our test cards to validate your integration.

STEP 04

Authenticate

Submit card data, handle device fingerprinting, and poll for the issuer's authentication decision.

STEP 05

Go Live

Switch your base URL to production. Same API, same code. Just a different endpoint.

Reference

Key Resources

Test Cards

30+ test cards across Visa, Mastercard, Amex, and Discover for all authentication scenarios.

Visa Frictionless4005 5192 0000 0004
Visa Challenge4012 0000 3333 0026
Visa Failed4009 3488 8888 1881
MC Frictionless5555 3412 4444 1115
MC Challenge5100 0600 0000 0002
Amex Frictionless3700 0000 0000 002
Read more

Authentication (JWT)

JWT is optional by default. Enable "Pass in JWT" in your dashboard for server-side token control.

AlgorithmHS256
Issuer (iss)3dsinetegrator_Auth...
Audience (aud)Your API Key
Expiry5 minutes
Read more

Status Codes

The authentication result status tells you whether the cardholder was verified.

YAuthenticated
NNot Authenticated
CChallenge Required
AAttempted
UUnavailable
RRejected
Read more

Device Fingerprinting

The ACS collects browser fingerprint data via a hidden iframe before making its risk decision.

TriggermethodURL in response
MethodHidden iframe POST
Timeout10 seconds
RequiredBefore polling results
Read more

Challenge Flow

When the issuer requires additional verification, a challenge iframe is presented to the cardholder.

TriggerStatus "C" in results
MethodVisible iframe POST
Datacreq → acsURL
ResultRe-poll after completion
Read more

Data Only / Data Share

Send enriched data to issuers without triggering a challenge. Improve approval rates and fraud scoring.

VisaStatus I, ECI 07
MastercardStatus U, ECI 04
CAVVReturned on success
Liability ShiftNo
Read more

3RI (Recurring / COF)

Authenticate merchant-initiated transactions like recurring billing, subscriptions, and card-on-file.

Use CasesRecurring, COF, MOTO
CardholderNot present
Auth MethodOAuth + Bulk API
Liability ShiftYes (Y/A)
Read more

Live Demo

See 3DS authentication in real-time. Enter a test card and watch every step of the flow.

Try it now
PAAY

Ready to Get Started?

Contact our team for API credentials and integration support. We'll have you authenticating in no time.