Card On File (COF) - Required for Stored Credentials

Action Required: If you store customer payment information for recurring billing or future use, you must now include COF parameters in your charge requests.

  • Card On File Guide
  • New Required Parameters:
    • cof: Set to "C" (customer present) or "M" (merchant-initiated)
    • cof_sched: Set to "Y" (scheduled recurring) or "N" (one-time/unscheduled)
    • cof_perm: Optional, set to "Y" if customer gave explicit permission
  • When to Use: Any transaction using saved payment methods, subscriptions, or recurring billing
  • Non-compliance Risk: Transaction declines and potential penalties

ACH Account Validation

New Feature: Real-time validation of bank account information during tokenization (iStream gateway).

  • ACH Validation Guide
  • What’s New: Runner.js tokenization responses now include risk_info object with validation results
  • Decision Codes: A (Accept), W (Warning), D (Decline)
  • Action: Check risk_info.decision before processing ACH transactions

Hosted Payment Pages - Edit Endpoint

New API Endpoint: Edit existing hosted payment pages without recreating them.

  • PUT /api/v1/hpp/{hpp_client_id}: Update HPP properties dynamically
  • Use Cases: Modify amounts, lock settings, customer information, or optional fields
  • Note: Merchant ID (cc_mid) cannot be changed after creation

Runner.js - Complete Integration Examples

Documentation Enhancement: Added full copy-paste examples for each gateway.

  • New Gateway Examples:
    • Cardpointe: Complete implementation with charge processing
    • Cybersource: Custom field selectors and styling
    • Payroc: Full validation and error handling
    • ACH (iStream/Fiserv): Bank account tokenization with validation
  • What’s Included: HTML forms, initialization code, tokenization workflow, and backend integration

API Updates

  • order_id Parameter: Now auto-generated if not provided (previously required)
  • Swagger Spec: Improved formatting and consistency across all endpoints