Release Notes
1.
2.
3.
Types of changes
Latest
1.20.0 - 2026-09-28
🔖 Network token creation in charges and pre-authorizations
"networkToken" in the capabilities array of the request of Charge, Tokenless charge, Pre-authorization or Tokenless pre-authorization.network object with wallet, walletId, isNetworkToken, tmsMaskedCardNumber, tmsLastFourDigits, tmsBin and tmsIntegration, so you can identify that Kushki created the network token. For a full explanation of both ways to use network tokens, see Network Tokens.ℹ️ Availability: Colombia, under Kushki's acquiring. Network token creation is enabled on demand through a commercial agreement. Not every transaction is tokenized this way even with the agreement active: check the networkobject in each response.
⚠️ Supported operations: verification, reauthorization and capture do not support networkTokenincapabilities.
🔖 network object in charge and pre-authorization responses
network object now groups two independent sets of fields in a single object: the Card on File fields (scheme, transactionIdentifier), returned when the request includes franchiseTransactionCode in capabilities, and the network token fields, returned when it includes networkToken. You can receive one set, both or none, depending on the values sent in capabilities.Previous release notes
1.19.0 - 2026-09-02
🔖 Fraud Alerts Endpoint
from and to with optional brand, country, fraud_type and merchant_id filters, or by transaction identifier, using transaction_arn or transaction_reference. Results are paginated with page and limit.Private-merchant-id header, and use the merchant_id field to scope the query to specific branches.⚠️ Availability: this report is only available for transactions made with VISA and MASTERCARD cards, and only for Kushki's acquiring.
ℹ️ Date range limit: queries are limited to a maximum of 12 months from the current date, and fromandtomust use the exact formatYYYY-MM-DDThh:mm:ss.
1.18.3 - 2026-06-04
fullResponse v3 — Create a recurring charge
"fullResponse": "v3". This version extends the details object in the response with additional subscription data, including validationTicketNumber — the ticket number of the validation charge executed at subscription creation.v3, the Get recurring charge info endpoint also returns validationTicketNumber in its response.⚠️ V3 response stability: The v3response may include new or deprecated fields without prior notice. Always handle unexpected or missing fields gracefully.
1.18.2 - 2026-05-12
🇨🇴 Bre-B Transfer Payouts — Colombia (Beta)
accountType): KI (national ID), KP (mobile number), KE (email), KA (alphanumeric alias), KM (merchant code).⚠️ Beta access: Available only for Colombia merchants with the Bre-B processor configured on their MID. To request access, contact your account executive. Sending Bre-B key types without the processor configured returns HTTP 400.
1.18.0 - 2026-04-17
🔖 Platform Status Endpoint
🔖 Subscription Transactions Endpoint
start, end, and size query parameters to scope results to a specific billing period.🔖 Settlement Query Endpoint
startDate, endDate, page, and limit body parameters to scope results to a specific period. Authentication via the private-merchant-id header is required.1.17.2 - 2026-04-07
🔖 New POS Device Fields in Get Transaction List V2
pos_details:pos_user: Device operator username.pos_friendly_name: Friendly display name of the terminal.pos_serial: Device serial number.pos_type: Physical device type. Possible values: COUNTERTOP, MPOS, SMARTPOS, SELF_SERVICE, OTHER.pos_connectivity: Network connectivity type. Possible values: GPRS, WIFI, ETHERNET, DIAL_UP, OTHER.These fields are only returned in card present transactions if they were sent in the original request.
1.17.1 - 2026-03-31
🔖 Transaction Identifier (TID) in Payments API
"franchiseTransactionCode" in the new capabilities array in your charge or preAuth request.capabilities is not sent, transactionIdentifier is not returned in the response — the feature is fully opt-in.charge, tokenlessCharge, preAuth, tokenlessPreAuth.network.transactionIdentifieris only present in the response whenfranchiseTransactionCodewas included in the request'scapabilitiesarray.
1.17.0 - 2026-03-20
What's new
🔄 Query Chargebacks
POST /data/v1/chargebacks/search — Returns a paginated list of chargebacks associated with the authenticated merchant.transaction_date or request_date (up to a 3-month window; only one date filter can be sent at a time).chargeback_status, country_name, chargeback_type, and chargeback_ticket_code.fields parameter.deadline_representation_date — calculated as request_date + 15 calendar days.deadline_resolution_date — calculated as request_date + 120 calendar days.risk_level — urgency indicator (HIGH, MEDIUM, LOW) based on days remaining until the representation deadline.📤 Request Chargeback Export
POST /data/v1/chargebacks/export — Initiates the asynchronous generation of a chargeback export file.fields as the search endpoint.POST notification to each configured URL with the S3 download link.file_url — pre-signed S3 URL to download the export file.expiration_timestamp — Unix timestamp (13 digits) indicating when the URL expires.request — the original request body sent to the export endpoint (excluding webhooks).private-merchant-id header. Applies to all countries and covers both card present and card not present transactions.1.16.8 - 2026-01-21
Updates
💳 Card Charge V2 / Tokenless Charge / Pre-authorization V2 / Tokenless Pre-authorization
network Objectscheme and the transactionIdentifier.transactionMode is set to initialRecurrence.messageFields ObjectmessageFields depending on the card brand when the initialRecurrence condition is met:f62.f2 (derived from field 62, subfield 2).f63 and f15.f63.💳 Preauth for COF
1.
initialRecurrenceReference field in the preauth v1 endpoint, which allows linking a subsequent fund reservation (subsequentRecurrence) with its initial transaction.1.16.7 - 2025-12-12
Updates
🧾 💳 Card token requests / Tokenless charge / Pre-authorization without token / Token for subscriptions endpoints
mvv: The 10-digit Merchant Verification Value assigned by Visa.1.16.5 - 2025-10-27
1.16.1 - 2025-09-01
Idempotency now available in Online Payments
Idempotency-Key header to help you safely retry requests without the risk of processing the same transaction twice. This is especially useful in cases of timeouts, network issues, or client retries.Where it works
1.15.8 - 2025-06-18
Changes to the get transaction list V2 endpoint
bin_card, last_four_digits.external_reference_id. Available only for card transactions. This is a unique transaction ID generated by the merchant. Click here for further information.1.15.6 - 2025-04-16
New 3DS 100% API Authentication Option
iframe is now supported for the authValidation parameter in the token request of the 3DS 100% API authentication flow.iframe, merchants can embed the authentication experience directly into their website or app, avoiding redirections. It is the merchant's responsibility to listen for iframe events to determine the result of the authentication and trigger the appropriate actions./chargebacks) has also been removed from the public API documentation.1.15.4 - 2025-02-05
New Release: Get Transactions List v2 🚀
What's New?
✅ Enhanced Filtering – Allows filtering by pay-ins and pay-outs for more granular insights.
✅ Optimized Pagination – Returns transactions in descending order, displaying the most recent ones first.
1.15.3 - 2025-02-07
External reference ID now supported in card payments and voids
externalReferenceId in the services: Make a charge or deferred charge, Create payment (tokenless), Void a transaction, Refund a transaction, Authorize payments, Preauthorization (tokenless), and Capture an authorized payment. This will be also returned in the responses of those endpoints, even if the transaction is declined.externalReferenceId has been include in the response of the get transaction list service v1.Metadata object now supported in voids and refunds.
1.15.2 - 2024-11-14
1.15.1 - 2024-08-28
Transfiya now available in Colombia for transfer out (Beta phase)
accountType= NC has been added in the Transfer out token request.1.15.0 - 2024-05-02
Tokenless operations
CIT, MIT and MAC codes for Kushki Acquirer
citMit.s84, within the messageFields object of the single charge or pre-authorization responses.New parameter added Transaction ARN
transaction_arn has been added to the response in the get transaction list service. Only applies to the Kushki Acquirer model and it may take 1 business day to be reflected.1.14.1 - 2024-02-29
New ERRORS category
ERRORS. Error catalog is now Kushki API errors and ISO error catalog is now ISO errors.Presenting the new format for changes in documentation
Added -> NEWChanged -> IMPROVEMENTSFixed -> FIXUpdated specificationVersion for external 3D Secure authentication engines
threeDomainSecure schema description about 3D Secure version 1 support.Important notice about support for version 1 of 3D Secure!
NOTE: 3DS version 1 will no longer be supported after October 2022. Merchants will need to migrate to version 2 of the protocol to avoid any impact on their transactions.
Important notice about support for version 1 of 3D Secure!
NOTE: Support for 3D Secure 1.0.2 and related technology ended in October 2022. Merchants will need to migrate to version 2 of the protocol to avoid any impact on their transactions.
specificationVersion field in the same model. Now, the allowed values are 2.0.0 and 2.2.0.{
"title": "threeDomainSecure",
"type": "object",
"properties": {
"specificationVersion": {
"description": "3DS protocol version to implement\n\n**NOTE: 3DS version 1 will no longer be supported after October 2022. Merchants will need to migrate to version 2 of the protocol to avoid any impact on their transactions.**",
"type": "string",
"enum": [
"1.0.2",
"2.0.0"
],
"minLength": 5,
"maxLength": 5,
"pattern": "[1-2].[0-9].[0-9]"
}
},
"required": [ "specificationVersion"]
}{
"title": "threeDomainSecure",
"type": "object",
"properties": {
"specificationVersion": {
"description": "3DS protocol version to implement\n\n**NOTE: Support for 3D Secure 1.0.2 and related technology ended in October 2022. Merchants will need to migrate to version 2 of the protocol to avoid any impact on their transactions.**",
"type": "string",
"enum": [
"2.0.0",
"2.2.0"
],
"minLength": 5,
"maxLength": 5,
"pattern": "[1-2].[0-9].[0-9]"
}
},
"required": [ "specificationVersion"]
}1.0.2 of specificationVersion has been deprecated and replaced by version 2.2.0. All references to the previous version in the documentation have been updated.The side menu has been restructured by categories for better navigation
🖼️ Pending asset migration: this section originally embedded 3 screenshots ( Kushki-api-reference-category.png,schemas-category.png,errors-category.png) via relative Stoplight paths (../../assets/images/...), which don't resolve in Apidog. Re-upload these images to Apidog's asset library and re-embed them with the resulting URLs.
1.14.0 - 2024-01-29
binCard property to binInfo schema.url field in response type 200 for a required 3D Secure authentication.authValidation and callbackUrl fields in the request for 3D Secure authentication.GL - K322 - Autenticación fallida - Sin validación de seguridad of type 400 in the response for a failed 3D Secure authenticationamount, binInfo, created, merchantId, requestAmount, transactionStatus, transactionType properties in 400 type responses.isoErrorCode within details object for declined transactions in Kushki acquiring model.isoErrorCode within details object for declined transactions in Kushki acquiring model.CARD ASYNC - Authorize payments, CARD ASYNC - Capture payments, ASYNC CARD RECURRING CHARGES - Authorize payments and ASYNC CARD RECURRING CHARGES - Capture an authorized payment services in the services by country table.isoErrorCode within details object for declined transactions in Kushki acquiring model.isoErrorCode field.CARD - Void a transaction endpoint to add information about partial voids.CARD - Refund a transaction endpoint to add information about partial refunds.Modified at 2026-10-08 17:23:18