Validate card with Zero Auth

Simulate an authorization to check if the card is currently valid.

EnvironmentMethodEndpoint
Sandboxhttps://apisandbox.cieloecommerce.cielo.com.br/1/zeroauth/
Productionhttps://api.cieloecommerce.cielo.com.br/1/zeroauth/

The example on this page is valid for sending the card with open data (not tokenized).

ℹ️

Important

  • To enable Zero Auth, contact the Cielo support team. If the API returns error code 323, contact Support to enable the functionality;
  • If the API returns error 389 – Registration Restriction, contact the commercial manager to check if the service is correctly enabled; if it is, the response indicates that this attempt cannot be validated due to Cielo's internal criteria. We recommend trying another card to complete the validation;
  • To simulate authorization scenarios, check the Zero Auth documentation in sandbox.

If the response is negative, do not submit the card for authorization.

Submit the card for authorization only if the Zero Auth verification response code is positive.


ℹ️

Tokenized Visa Card Verification Transactions

Starting on 04/17/2026, it will be required to send the cryptogram in card verification transactions using tokenization with the Visa card brand:

  • Send the DPAN (token) in the Card.CardNumber field;
  • Send the cryptogram in the Card.SecurityCode field.

TLID Mastercard

The Transaction Link Identifier (TLID) is a unique identifier generated by the Mastercard card brand during a transaction. It is used to ensure continuity between related transactions.

PhaseDescription
Phase 1TransactionLinkId returns in the responses of card validation by Zero Auth, credit card payment creation, debit card payment creation, and in the query by PaymentId.
Phase 2Required inclusion of the TransactionLinkId in the request (MIT) starting October 10 2026.

See more details in Card Brand Identifiers.


Body Params
string
required

Defines the type of card used:

CreditCard
DebitCard

If not sent, CreditCard is the default. Size: 255.

string
required

Card Number. Send the card token for tokenized Visa card verification. Size: 16.

string
required

Cardholder's name, printed on the card. Size: 25.

string
required

Expiration date. Size: 7.

string
required

Card Security code.
Send the card cryptogram here for tokenized Visa card verification. Size: 4.

boolean
required

Defines if the card must be tokenized.

string
required

Card brand:
Visa
Master
ELO. Size: 10.

string

Conditional obligation Card Token in API E-commerce Cielo. Size: 36.

CardOnFile
object
Headers
string
required
Defaults to 8937bd5b-9796-494d-9fe5-f76b3e4da633

Store identifier in Cielo. Size: 36. This documentation provides a default MerchantKey to allow testing in the sandbox, but you can also provide the enabled MerchantKey during the deployment process.

string
required
Defaults to XKGHUBSBKIRXKAVPSKWLVXYCLVJUGTNZLIHPUSYV

Public Key for Double Authentication in Cielo. Size: 40 This documentation provides a default MerchantId to allow testing in the sandbox, but you can also provide the enabled MerchantId during the deployment process.

Responses

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json