Webhooks Implementation Guide

This guide provides information about the Webhooks feature that you can include in your system:

Multiple security options. For example, server security policy and digital signature verification.

Multiple possible workflows based on the security policy you choose.

The process for setting up and using the feature.

Conventions: These special statements are used in this document:

IMPORTANT

An Important
statement contains information essential to successfully completing a task or learning a concept.

WARNING

A Warning
contains information or instructions, which, if not heeded, can result in a security risk, irreversible loss of data, or significant cost in time or revenue or both.
Related Documentation: Refer to the Technical Documentation Portal for more technical documentation:

https://developer.cybersource.com/docs.html

Visit the Cybersource documentation hub to find additional technical documentation.
Customer Support: For support information about any service, visit the Support Center:

http://support.cybersource.com

Limited Availability Release

This document provides information about the limited availability release of the Webhooks REST API.

Recent Revisions to This Document

24.07

This revision contains only editorial changes and no technical updates.

24.06

Added a response to a successful request for testing a webhook notification with the Token Management Service. See Triggering a Test Webhook Notification Using the Token Management Service.

24.05

Products and Events: Removed support for Virtual Terminal product events. See Product and Event Types.

24.04

Products and Events: Removed support for Secure Acceptance product events. See Product and Event Types.
Troubleshooting: Removed section on including port number 443 or 8443 in the webhook and health check URLs. See Troubleshooting Webhook Subscriptions and Health Check URL.; Added a section in including HTTPS in the webhook and health check URLs. See Troubleshooting Webhook Subscriptions.

24.03

Removed section on storing certificates for OAuth with JWT.

24.02

Updated product event types and descriptions. See Product and Event Types.

VISA Platform Connect: Specifications and Conditions for Resellers/Partners

The following are specifications and conditions that apply to a Reseller/Partner enabling its merchants through

Cybersource for Visa Platform Connect (“VPC”) processing

. Failure to meet any of the specifications and conditions below is subject to the liability provisions and indemnification obligations under Reseller/Partner’s contract with Visa/Cybersource.

Before boarding merchants for payment processing on a VPC acquirer’s connection, Reseller/Partner and the VPC acquirer must have a contract or other legal agreement that permits Reseller/Partner to enable its merchants to process java.io.PrintWriter@4f880a4f payments with the acquirer through the dedicated VPC connection and/or traditional connection with such VPC acquirer.

Reseller/Partner is responsible for boarding and enabling its merchants in accordance with the terms of the contract or other legal agreement with the relevant VPC acquirer.

Reseller/Partner acknowledges and agrees that all considerations and fees associated with chargebacks, interchange downgrades, settlement issues, funding delays, and other processing related activities are strictly between Reseller and the relevant VPC acquirer.

Reseller/Partner acknowledges and agrees that the relevant VPC acquirer is responsible for payment processing issues, including but not limited to, transaction declines by network/issuer, decline rates, and interchange qualification, as may be agreed to or outlined in the contract or other legal agreement between Reseller/Partner and such VPC acquirer.

DISCLAIMER: NEITHER VISA NOR CYBERSOURCE WILL BE RESPONSIBLE OR LIABLE FOR ANY ERRORS OR OMISSIONS BY THE VISA PLATFORM CONNECT ACQUIRER IN PROCESSING TRANSACTIONS. NEITHER VISA NOR CYBERSOURCE WILL BE RESPONSIBLE OR LIABLE FOR RESELLER/PARTNER BOARDING MERCHANTS OR ENABLING MERCHANT PROCESSING IN VIOLATION OF THE TERMS AND CONDITIONS IMPOSED BY THE RELEVANT VISA PLATFORM CONNECT ACQUIRER.