Re-authorization (Async)

In addition to the sync body, this operation accepts events_webhook_url and omit_card — set omit_card: true to skip card presentation.

Returns 200 with a TERMINAL_ACKNOWLEDGED event as soon as the terminal accepts the payment intent. That acknowledgement is not the transaction result — the outcome, and every intermediate state, arrives as a POST to the events_webhook_url you supply. Omit the URL and the transaction still runs, but you never learn how it ended.

🚧 Beta — Early Access
This API is in early access. Endpoints, parameters, and response structures
may change without prior notice. Do not deploy to production without
coordinating with the Kushki integration team.

What you encrypt

The body you send is the encrypted envelope. This is the plaintext object you encrypt — the field contract, not what travels on the wire:

{
    "amount": {
        "iva": 0,
        "subtotal_iva": 0,
        "subtotal_iva0": 0
    },
    "client_transaction_id": "a1b2c3d4-1234-5678-abcd-000000000001",
    "transaction_reference": "1524e838-8270-4b9e-9929-58f3f892bfca",
    "omit_card": false
}

omit_card is optional and applies to capture, re_authorization and void, in sync and async — the six combinations. With true the terminal completes the operation without asking for the card again, which is what makes the hotel check-out case work.

See Authentication and request encryption for the derivation chain and the seven steps.

application/json

Accepted by the terminal. Returns a TERMINAL_ACKNOWLEDGED event immediately — this is not the transaction result. The outcome arrives via webhook.

Bodyapplication/json

curl --location 'https://api-uat.kushkipagos.com/terminal/v1/SN71652/async/re_authorization' \ --header 'Authorization: Basic 9f2c4e1b7a63d8f05c2e9b41a7d3086fbe15c4d29a7e0b38f6c1d52a94e7b3c0' \ --header 'timestamp: 1748476800' \ --header 'Content-Type: application/json' \ --data '{ "data": "a3f14c7e9b02d85fbc1e46a9d370f28b:9e0d7f21c4a8b653e17d902fac48b5d6e83c1704a9f26db8" }'

{ "event_id": "c08211a1-344c-4f1c-850b-41e33fb08cca", "previous_status": "", "occurred_at": "2026-08-03T20:53:34.859Z", "status": "TERMINAL_ACKNOWLEDGED", "merchant_id": "20000000103802320000", "client_transaction_id": "c5a3f3be-9d6f-4d39-8af5-58dbb589af79", "terminal": { "serialNumber": "TJ54241P20911", "model": "P2SE-BPKT", "wifiMac": "", "room": "3.0.10" }, "operation": { "type": "charge", "amount": { "extraTaxes": { "airportTax": 0, "iac": 0, "ice": 0, "travelAgency": 0 }, "iva": 0, "subtotalIva": 0, "subtotalIva0": 12000 }, "clientTransactionId": "c5a3f3be-9d6f-4d39-8af5-58dbb589af79", "eventsWebHook": "https://api.negocio.mx/webhook/terminal-events", "metadata": { "customerEmail": "user@example.com", "device": "SUNMI-P3", "reference": "ORD-20240317-001" } } }

🚧 Beta — Early Access

What you encrypt

Callbacks

transactionEvents

Request

Responses

Re-authorization (Async)

🚧 Beta — Early Access#

What you encrypt#

Callbacks

transactionEvents

Request

Responses

🚧 Beta — Early Access

What you encrypt