Wallets

Provision a card into a digital wallet and manage it once it is there.

No endpoint in this corpus provisions a card into Apple Pay, Google Pay, Samsung Pay or a bank's own wallet. Wallet provisioning depends on tokenisation, which is also not yet exposed.

Operations0DomainWalletsStateplannedAPIs0

What the platform does have

A token service integration with 7 operations, documented under Tokenisation. It manages tokens that already exist and keeps the provider in step when the card underneath changes.

GroupWhat it does
Token lifecyclesuspendTokenAsync, resumeTokenAsync, deleteTokenAsync
Token querygetTokenStatusAsync, searchTokensAsync
Card managementnotifyCardUpdateAsync, replaceCardAsync

Every card also carries a shadowCardNumber — the platform's own reference, safe to store and to log. That is a token in the storage sense and is what most operations are keyed by. It is not a network token and no wallet accepts it.

What is missing

Provisioning. Nothing in the published set creates a token or pushes a card into Apple Pay, Google Pay, Samsung Pay or a bank's own wallet. The seven operations above all take a token identifier as input — they assume the token exists.

  • No operation starts an in-app or push provisioning flow.
  • No operation returns the card-on-file data a wallet SDK needs.
  • No operation reports which wallets a card is already in. searchTokensAsync searches the provider's tokens, not the wallets.
  • There is no wallet-side event: nothing tells you a cardholder added or removed a card.

What a bank does today

Provisioning is arranged directly with the scheme's token service and the wallet, outside this platform. Once a token exists, the operations above are how the card issuer keeps it correct — suspend it with the card, delete it on closure, and notify the provider on reissue so the token survives a new PAN.

The reissue case is the one worth planning for.

notifyCardUpdateAsync and replaceCardAsync exist precisely because a card that is replaced without telling the provider leaves a live token pointing at a dead card. Whatever handles provisioning, that call is on this side.