PCI Subscription Creation Endpoint

The PCI flow is available only to merchants who have achieved PCI compliance and can securely handle credit card information.

Endpoint

POST https://cc-api-stg.directa24.com/v3/subscriptions

Process

1. Merchant collects payment details directly from customer

2. Merchant submits complete subscription request including credit card data

3. System processes payment and creates subscription immediately

4. API returns subscription confirmation directly in the response

Request Example

{
  "invoice_id": "INV123456",
  "amount": 70.00,
  "currency": "BRL",
  "country": "BR",
  "payer": {
    "id": "PAYER123",
    "document": "123456789",
    "document_type": "CPF",
    "email": "[email protected]",
    "first_name": "John",
    "last_name": "Doe"
  },
  "description": "Premium Subscription",
  "subscription": {
    "start_date": "2025-01-01",
    "plan": "MONTHLY",
    "plan_unit": 1,
    "auto_renewal": false
  },
  "credit_card": {
    "cvv": "123",
    "card_number": "4111111111111111",
    "expiration_month": "12",
    "expiration_year": "25",
    "holder_name": "John Doe"
  },
  "client_ip": "192.168.1.1",
  "back_url": "https://example.com/back",
  "success_url": "https://example.com/success",
  "error_url": "https://example.com/error",
  "notification_url": "https://example.com/notify"
}

Create a new subscription with credit card details

post

This endpoint allows PCI merchants to create a new subscription with direct credit card details.

Header parameters

Content-Typestring · default: "application/json"required

Media type of the body sent to the API.

X-Datestring · date-timerequired

ISO8601 Datetime with Timezone (yyyy-MM-dd'T'HH:mm:ssZ)

X-Loginstringrequired

Merchant X-Login API Key.

Authorizationstringrequired

Authorization control hash.

X-Idempotency-Keystringoptional

Unique idempotency key for ensuring that the same request is not processed more than once.

Body

invoice_idstringrequired

Unique identifier for the invoice

Example: INV123456

amountnumber · doublerequired

Amount to be charged for the subscription

Example: 70

currencystringrequired

Three-letter currency code (ISO 4217)

Example: BRL

countrystringrequired

Two-letter country code (ISO 3166-1 alpha-2)

Example: BR

payerobjectrequired

descriptionstringoptional

Description of the subscription

Example: Premium Subscription

subscriptionobjectrequired

credit_cardobjectrequired

client_ipstringoptional

IP address of the client

Example: 192.168.1.1

back_urlstring · urioptional

URL to redirect after payment process

Example: https://example.com/back

success_urlstring · urioptional

URL to redirect after successful payment

Example: https://example.com/success

error_urlstring · urioptional

URL to redirect after failed payment

Example: https://example.com/error

notification_urlstring · urioptional

URL to send payment status notifications

Example: https://example.com/notify

Responses

application/json

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://cc-api-stg.directa24.com/v3/subscriptions' \
  --header 'Content-Type: application/json' \
  --header 'X-Date: 2025-04-01T23:00:17.505Z' \
  --header 'X-Login: text' \
  --header 'Authorization: text' \
  --data '{
    "invoice_id": "INV123456",
    "amount": 70,
    "currency": "BRL",
    "country": "BR",
    "payer": {
      "id": "PAYER123",
      "document": 123456789,
      "document_type": "CPF",
      "email": "[email protected]",
      "first_name": "Roberto",
      "last_name": "Carlos"
    },
    "description": "Premium Subscription",
    "subscription": {
      "start_date": "2025-01-01",
      "plan": "MONTHLY",
      "plan_unit": 1,
      "auto_renewal": false
    },
    "credit_card": {
      "cvv": "123",
      "card_number": "4111111111111111",
      "expiration_month": "12",
      "expiration_year": "25",
      "holder_name": "John Doe"
    },
    "client_ip": "192.168.1.1",
    "back_url": "https://example.com/back",
    "success_url": "https://example.com/success",
    "error_url": "https://example.com/error",
    "notification_url": "https://example.com/notify"
  }'

200

400

422

503

200

{
  "subscription_id": 358
}

Subscription created successfully

Successful Response Structure

Field	Type	Description	Example
subscription_id	Integer	Unique identifier of the created subscription	1234

Example response

{
  "subscription_id": 358
}

Error Response Structure

Field	Type	Description	Example
code	Integer	Error code indicating the type of error	400
description	String	Human-readable description of the error	"Invalid input data"
type	String	Machine-readable error type identifier	"VALIDATION_ERROR"

Bad Request - Invalid input data

{
  "code": 400,
  "description": "Invalid input data",
  "type": "VALIDATION_ERROR"
}

Unprocessable Entity - Validation error

{
  "code": 422,
  "description": "Validation error",
  "type": "VALIDATION_ERROR"
}

Service Unavailable - Error creating subscription

{
  "code": 503,
  "description": "Error creating subscription",
  "type": "SERVICE_ERROR"
}

Subscription Plans

The following subscription frequencies are supported:

Plan	Description
DAILY	Recurring billing every day
WEEKLY	Recurring billing every week
MONTHLY	Recurring billing every month
ANNUALLY	Recurring billing every year