Skip to main content
POST
/
forward
Forward card data
curl --request POST \
  --url https://sandbox.hellgate.io/forward \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --header 'x-destination-url: <x-destination-url>' \
  --header 'x-hellgate-token: <x-hellgate-token>' \
  --data '{}'
{}

Authorizations

​
X-API-Key
string
header
required

Headers

​
x-hellgate-token
string<uuid>
required

The ID of the Hellgat e token to use for the request.

​
x-destination-url
string<uri>
required

The target URL to which the request shall be forwarded.

Only allowed target URLs by the merchant can be request.

Body

The payload the caller wants to forward to the third party provider.

To securely handle and inject sensitive cardholder data, predefined templates can be used. These templates help structure and standardize the data injection process while

ensuring compliance with security and regulatory requirements.

PlaceholderTypeDescription
{{ account_number }}stringThe full account number
{{ cardholder_name }}stringThe name of the cardholder
{{ expiration_year }}numberFour digit expiration year
{{ expiration_month }}numberTwo digit expriation month
{{ security_code }}stringThe security code - if present

Placeholder of type number can be unwrapped from the standard string representation.

Response

Success response

The response from the third party provider.