Save card: complete 3DS

Completes card saving after 3DS and returns the card token.

Call the method when Save card returned pg_3ds = 1 and the client has completed 3DS.

Sign the request with the secret key: see Sync API Overview.

Open pg_3d_acsurl for the client with an HTTP POST form: pass MD = pg_3d_md, PaReq = pg_3d_pareq and TermUrl.
The client is returned to TermUrl after 3DS.

3DS flow

Errors

The HTTP status is always 200; the error is returned in pg_error_code and pg_error_description.

`pg_error_code`	When	What to do
`94031`	`pg_payment_id` is not passed or not found.	Pass `pg_payment_id` from the Save card response.
`1100`	The signature is missing or invalid.	Check the signature with the secret key.
`1101`	`pg_merchant_id` is not found. The response is not signed.	Check the merchant ID.
`10004`	The client has not completed 3DS.	Call the method after the client returns to `TermUrl`.
`110691`	Card saving is not waiting for 3DS: 3DS is not required or is already completed.	Get the card with List saved cards.
Other codes	The payment system declined the card, for example the client failed 3DS.	See Error codes.

Request example

Required fields only. pg_sig is calculated with the secret key test_secret_key.
Line breaks in the body are added for readability: send the body as one line.

Responses

🟢200Success

application/xml

Bodyapplication/xml

Example

<?xml version="1.0" encoding="utf-8"?>
<response>
    <pg_payment_id>763</pg_payment_id>
    <pg_order_id>cs-1792492338</pg_order_id>
    <pg_status>ok</pg_status>
    <pg_card_mask>4400-44XX-XXXX-4444</pg_card_mask>
    <pg_card_token>ef58ff1a-d610-4344-ae6a-3f4d5af893d3</pg_card_token>
    <pg_datetime>2026-10-20T10:32:29+00:00</pg_datetime>
    <pg_salt>ZtpsQIFVMeHFOgsO</pg_salt>
    <pg_sig>21c42a82428c63ac85cb30cc342ef76c</pg_sig>
</response>

🟢200Error

Save card: complete 3DS

3DS flow#

Errors#

Request example#

Request

Responses

3DS flow

Errors

Request example