Validate the data of a card stored in an e-wallet.
| Environment | Method | Endpoint |
|---|---|---|
| Sandbox | post | https://apisandbox.cieloecommerce.cielo.com.br/2/zeroauth |
| Production | post | https://api.cieloecommerce.cielo.com.br/2/zeroauth |
The response always indicates whether the card can be authorized at the moment. This information only means that the card is valid for transactions, but does not indicate that a specific amount will be authorized.
The fields returned in the response depend on the validation result. The following table shows all possible fields.
If the response is negative, do not submit the card for authorization.Submit the card for authorization only if the Zero Auth verification response code is positive.
Parameters returned in the card validation response for e-wallet:
| Field | Description | Type | Size |
|---|---|---|---|
Valid | Card Status:
| Boolean | |
ReturnCode | Return code | Text | 2 |
ReturnMessage | Return message | Text | 255 |
Payment.IssuerTransactionId | Transaction identifier generated by the card brand, returned in the Zero Auth response. Zero Auth does not receive this field in the request. Store the value to send it, as mandatory, in subsequent recurring credit and debit transactions. In scheduled recurrence, the field is sent automatically in subsequent transactions. See more details in Card Brand Identifiers. | string | 30 |
Payment.TransactionLinkId | Unique identifier (TLID) generated by Mastercard and returned in the Zero Auth response. Zero Auth does not receive this field in the request. Store the original value to send it, together with the IssuerTransactionId, in subsequent MIT transactions. See more details in Card Brand Identifiers.Format: 22 alphanumeric characters (A–Z, a–z), case-sensitive, and may include hyphens (-) and underscores (_). | string | 22 |
TLID Mastercard
The Transaction Link Identifier (TLID), sent and returned in the TransactionLinkId field, is a unique identifier generated by the Mastercard card brand during a CIT transaction, used to link the related MIT transactions. The TLID applies to the Zero Auth response (response only) and to credit card, debit card, and merchant recurrence transactions.
For Mastercard, send IssuerTransactionId and TransactionLinkId together in MIT transactions: both parameters are mandatory.
| Phase | Date | Description |
|---|---|---|
| Phase 1 | Current | Availability of the TransactionLinkId in the responses of card validation by Zero Auth, credit card payment creation, debit card payment creation, and in the query by PaymentId. |
| Phase 2 | Starting October 23, 2026 | Required inclusion of the TransactionLinkId in the request (MIT). |
See more details in Card Brand Identifiers.