Card On File (COF) - Required for Stored Credentials
Action Required: If you store customer payment information for recurring billing or future use, you must now include COF parameters in your charge requests.
- Card On File Guide
- New Required Parameters:
cof: Set to"C"(customer present) or"M"(merchant-initiated)cof_sched: Set to"Y"(scheduled recurring) or"N"(one-time/unscheduled)cof_perm: Optional, set to"Y"if customer gave explicit permission
- When to Use: Any transaction using saved payment methods, subscriptions, or recurring billing
- Non-compliance Risk: Transaction declines and potential penalties
ACH Account Validation
New Feature: Real-time validation of bank account information during tokenization (iStream gateway).
- ACH Validation Guide
- What’s New: Runner.js tokenization responses now include
risk_infoobject with validation results - Decision Codes:
A(Accept),W(Warning),D(Decline) - Action: Check
risk_info.decisionbefore processing ACH transactions
Hosted Payment Pages - Edit Endpoint
New API Endpoint: Edit existing hosted payment pages without recreating them.
- PUT
/api/v1/hpp/{hpp_client_id}: Update HPP properties dynamically - Use Cases: Modify amounts, lock settings, customer information, or optional fields
- Note: Merchant ID (
cc_mid) cannot be changed after creation
Runner.js - Complete Integration Examples
Documentation Enhancement: Added full copy-paste examples for each gateway.
- New Gateway Examples:
- Cardpointe: Complete implementation with charge processing
- Cybersource: Custom field selectors and styling
- Payroc: Full validation and error handling
- ACH (iStream/Fiserv): Bank account tokenization with validation
- What’s Included: HTML forms, initialization code, tokenization workflow, and backend integration
API Updates
- order_id Parameter: Now auto-generated if not provided (previously required)
- Swagger Spec: Improved formatting and consistency across all endpoints