MIT Batch Authorization
:::warning Rate limits Please review our <a href="/guides/rate-limits">rate limits</a> before you begin your implementation. ::: Create multiple MIT (Merchant-Initiated Transaction) authorizations in a single request. Each entry mirrors the single MIT endpoint and is processed asynchronously, supporting partial success across the batch. Each transaction is processed individually, if the transaction passes initial validation then a transaction is created for background processing and a `transaction` is returned. If the initial validation fails, instead an `error` is returned. You will receive one callback for each individual transaction. You’ll receive the outcome of each payment on the `notificationUrl` you provide within the request, making it the primary way to track the result of these payments. [Webhooks](/api/create-webhook) can be used separately if you need broader, system-wide updates. Use a MIT authorization when the customer has agreed to let the merchant charge them automatically. For example, monthly subscription payments must be handled using MIT. MIT is not suitable when the customer starts the payment themselves, like clicking a “Pay Now” button. For more information about the differences between CIT (Customer-Initiated Transaction) and MIT, see our <a href="/get-started/core-concepts">Core Concepts</a> page. All MIT transactions are processed <b>asynchronously</b> and cannot run in real time. Most are completed within a few seconds, but ePay does not guarantee processing times. Some payment methods, such as Vipps MobilePay, may take several days to complete, depending on the method’s processing rules. When you match the returned transaction results back to your original batch request, the transaction order is preserved from request to response. This means you can always correlate each result to the original request item by using the array index. You can also provide a `reference` on each transaction in your request. When present, the same `reference` value is included in the returned result for that transaction, which gives you an explicit way to link results back to your own records. If you choose to rely on `reference` for correlation, make sure you send `transaction.reference` for every transaction in the batch. Otherwise, use the array index as the correlation key. If you want to offer your customers the ability to store their cards for faster checkout in the future, you must use CIT transactions. In such cases, you are required to provide a <code>customerId</code> when creating the payment. This ID links the stored card to the customer and enables quick-checkout functionality in future sessions. *We recommend a minimum timeout of 10 seconds.*
Authorization
BearerAuth In: header
Header Parameters
Ensures that a request can be safely retried without causing duplicate operations. Typically used for actions like payment creation and operations such as refund and void to prevent accidental double processing. - If a response is replayed due to using the same key, the response will include the header `Idempotent-Replayed: true`. - Idempotency keys are scoped by **[Key, Endpoint, HTTP Verb]**; the same key on a different endpoint or method will not replay the original response. - Responses are cached for **24 hours**. After that, the cache is cleared, so idempotency is only guaranteed within 24 hours of the initial request.
Request Body
application/json
MIT batch authorization request payload.
TypeScript Definitions
Use the request body type in TypeScript.
Batch payload for creating multiple MIT transactions in one request.
Ordered list of MIT transaction requests that will be processed asynchronously.
1 <= items <= 500Response Body
application/json
application/json
application/json
application/json
MIT Authorization
Batching and Rate limits ePay strongly recommends merchants to implement the MIT Batch Authorization endpoint over the single MIT authorization endpoint. Please review our rate limits before you begin your implementation. A MIT (Merchant-Initiated Transaction) is a payment initiated by the merchant, typically based on a previously established agreement, such as a subscription. You’ll receive the outcome of the payment on the notificationUrl you provide within the request, making it the primary way to track the result of this payment. Webhooks can be used separately if you need broader, system-wide updates. Use a MIT authorization when the customer has agreed to let the merchant charge them automatically. For example, monthly subscription payments must be handled using MIT. MIT is not suitable when the customer starts the payment themselves, like clicking a “Pay Now” button. For more information about the differences between CIT (Customer-Initiated Transaction) and MIT, see our Core Concepts page. All MIT transactions are processed asynchronously and cannot run in real time. Most are completed within a few seconds, but ePay does not guarantee processing times. Some payment methods, such as Vipps MobilePay, may take several days to complete, depending on the method’s processing rules. If you want to offer your customers the ability to store their cards for faster checkout in the future, you must use CIT transactions. In such cases, you are required to provide a customerId when creating the payment. This ID links the stored card to the customer and enables quick-checkout functionality in future sessions. We recommend a minimum timeout of 5 seconds.
MOTO Authorization
PCI-DSS Compliance As this endpoint receives raw payment data, the integrator is required to provide documentation for PCI-DSS compliance before access can be granted. This endpoint creates and processes an online MOTO transaction and returns the authorization result in the response. This is typically used within the travel industry, where it is more common for customers to provide their card info over the phone when booking a vacation. This can be used by merchants to automate authorizations when receiving card info from brokers such as hotels.com and booking.com. We recommend a minimum timeout of 60 seconds.