On This Page
FILTER BY TAG

How to Set Up REST

This overview lists the tasks you must complete in order to set up your
Cybersource
 account for sending and receiving REST API messages using JSON Web Token (JWT) messaging.
You can choose from these set up methods:
  • JWT messaging using a
    P12 certificate
    .
  • JWT messaging using a
    shared secret key pair
    .
  • JWT messaging using the
    REST Client SDK
    .

Figure:

Set Up Your
Cybersource
 Account
If you are using a custom integration, follow these steps. Step 1: Create a test account. Step 2: Choose and create your security type using a P12 certificate or shared secret key pair. Step 3: Construct a message with JSON Web Tokens. Step 4: Enable Message-Level Encryption (MLE). Step 5: Test your setup. Step 6: Go live. If you are using an SDK integration, follow these steps. Step 1: Create a test account. Step 2: Choose and create your security type using a P12 certificate or shared secret key pair. Step 3: Import an SDK that constructs messages using JSON Web Tokens and Message-Level Encryption. Step 5: Test your setup. Step 6: Go live.
To set up JSON web token messaging using
P12 certificates
, see Set Up a JSON Web Token Message Using P12 Certificates.
To set up JSON web token messaging using
shared secret key pairs
, see Set Up a JSON Web Token Message Using Shared Secret Key Pairs.
To set up JSON web token messaging using the
REST Client SDK
, see Set Up a JSON Web Token Message Using the REST SDK.

HTTP Signature Security (Deprecating)

You also have the option to set up your
Cybersource
 account for sending and receiving messages using HTTP signature security.
WARNING
By
September 2026
, all merchants using HTTP signature messaging must migrate to JSON Web Token (JWT) messaging in order to support message-level encryption (MLE). You risk transaction failures if you do not implement this update. If you are setting up your system to be REST-compliant for the first time,
Cybersource
 recommends using JWT messaging.
To set up HTTP signature messaging, see Set Up an HTTP Signature Message.
RELATED TO THIS PAGE