Returns daily transaction authorization records in XML format for each merchant, including terminal number, masked card PAN, authorization response, authorized amount, and terminal entry mode.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
TransAuth Authorization Export Data
The TransAuth export file contains the authorization records for every payment transaction attempt processed by each merchant. It captures both approvals and declines, along with the terminal, card, POS condition, and issuer response details. Use this file to audit authorization flows, support dispute representment with authorization evidence, and identify declined transaction patterns.
Endpoint
GET /download/YYYYMMDD/TransAuth
Authentication
Basic HTTP Authentication required.
Encode username:password in Base64 and pass in the Authorization header:
Authorization: Basic {base64(username:password)}
When to use
Use this file when you need to verify that an authorization was obtained for a specific transaction (critical for chargeback disputes), audit the terminal entry modes and POS condition codes that were sent to the network, or investigate authorization declines by response code. The ApprovalCode field is required when responding to retrieval requests from card networks.
Query Parameters
None. The file is identified by the date path segment (YYYYMMDD) and delivered via SFTP.
Response
200 OK — Returns XML content with the following structure:
XML Hierarchy: Merchant > TransAuths > TransAuth
<Merchant> fields:
| Field | Type | Description |
|---|---|---|
MID | string | Merchant identifier (unique account number) |
<TransAuth> fields:
| Field | Type | Description |
|---|---|---|
TerminalNumber | string | Identifier of the terminal where the authorization was initiated |
PrimaryAccountNumber | string | Masked card PAN (e.g. 000000xxxxxxxxx0000) |
CountryCode | string | ISO 3166-1 numeric country code (populated for Visa and Mastercard; empty if not provided) |
TransactionDateTime | datetime | Exact date and time the authorization request was submitted (GMT, YYYY-MM-DD HH:MM:SS) |
PosConditionCode | string | POS condition code: 00 = normal, 01 = cardholder not present, 05 = card not present, 08 = mail/phone order, 59 = e-commerce, 71 = key-entered (magnetic stripe unreadable) |
CardType | string | Card network: Visa, MasterCard, Amex, Discover, Jcb, PayPal, Debit, Unknown, Other |
AuthorizationResponse | string | Issuer response code: 00 = approved; any other value = decline or exception |
VendorId | string | Authorization processor/vendor used to route the request (e.g. Vital) |
AuthorizedAmount | decimal | Amount approved by the issuer in dollars |
CardExpirationDate | string | Card expiration date in MMYY format; zeroed to 0000 in export for PCI compliance |
ApprovalCode | string | Authorization approval code returned by the card issuer |
TerminalEntryMode | string | Card capture method: 01 = manual, 02 = magnetic stripe, 05 = chip/EMV, 07 = contactless |
<Merchant>
<MID>9180000000001234</MID>
<TransAuths>
<TransAuth>
<TerminalNumber>0001</TerminalNumber>
<PrimaryAccountNumber>414100xxxxxxxxx0555</PrimaryAccountNumber>
<CountryCode>840</CountryCode>
<TransactionDateTime>2026-05-27T14:22:00</TransactionDateTime>
<PosConditionCode>00</PosConditionCode>
<CardType>Visa</CardType>
<AuthorizationResponse>00</AuthorizationResponse>
<VendorId>Vital</VendorId>
<AuthorizedAmount>142.50</AuthorizedAmount>
<CardExpirationDate>0000</CardExpirationDate>
<ApprovalCode>412649</ApprovalCode>
<TerminalEntryMode>07</TerminalEntryMode>
</TransAuth>
<TransAuth>
<TerminalNumber>0001</TerminalNumber>
<PrimaryAccountNumber>536759xxxxxxxxx6473</PrimaryAccountNumber>
<CountryCode />
<TransactionDateTime>2026-05-27T15:10:00</TransactionDateTime>
<PosConditionCode>00</PosConditionCode>
<CardType>MasterCard</CardType>
<AuthorizationResponse>00</AuthorizationResponse>
<VendorId>Vital</VendorId>
<AuthorizedAmount>225.00</AuthorizedAmount>
<CardExpirationDate>0000</CardExpirationDate>
<ApprovalCode>072795</ApprovalCode>
<TerminalEntryMode>05</TerminalEntryMode>
</TransAuth>
</TransAuths>
</Merchant>Error Codes
| Code | When it happens |
|---|---|
| 400 | Malformed date format in URL path |
| 401 | Invalid or missing Basic Auth credentials |
| 403 | User does not have permission for this operation |
| 404 | No TransAuth file found for the specified date |
| 500 | Internal server error |
Common Mistakes
- Treating
AuthorizationResponse: 00as the only valid outcome — other codes indicate specific decline reasons and should be mapped to the card network's response code table for proper interpretation. - Assuming
AuthorizedAmountequals the final settled amount — the settled amount may differ if a tip was added after authorization, or if a partial capture was used. - Using
CardExpirationDatefor cardholder verification — it is always zeroed out (0000) in the export for PCI compliance. - Overlooking
PosConditionCode— an incorrect code can cause interchange downgrades or shift fraud liability; validate that codes in this file match the actual transaction environment. - Confusing
TerminalEntryMode: 01(manual key entry) performance issues — manual entry carries higher fraud risk and typically incurs higher interchange and chargeback liability.
Related Endpoints
GET /download/YYYYMMDD/Transactions— settled transaction records; useApprovalCodeto cross-referenceGET /download/YYYYMMDD/TransactionsExtendedData— extended card type withPS2000TransactionIdentifierGET /download/YYYYMMDD/Chargeback—AuthCodein chargeback records maps toApprovalCodehere
Example
curl -X GET "https://hq.staging.netevia.dev/download/20260528/TransAuth" \
-H "Authorization: Basic $(echo -n 'username:password' | base64)"