Merchant Account API Documentation – Cybersource (Barclays PLC)
This API allows merchants to process transactions using Cybersource via Barclays PLC.
Base URL:
🔗 Test Environment: https://ebctest.cybersource.com/
📌 Authentication:
- API authentication is handled via HTTP Signature or JWT (JSON Web Token).
- You must obtain an API Key & Shared Secret from Cybersource.
- Send credentials in the request header.
1. Authentication
1.1 HTTP Signature Authentication
To authenticate API requests, include the following headers:
Headers:
2. API Endpoints
2.1 Create Payment Request
🔹 Endpoint:
🔹 Request Example:
🔹 Response Example:
2.2 Capture Payment
🔹 Endpoint:
🔹 Request Example:
🔹 Response Example:
2.3 Refund Payment
🔹 Endpoint:
🔹 Request Example:
🔹 Response Example:
3. Error Handling
Cybersource returns standard HTTP status codes along with an error response in JSON format.
| HTTP Status | Meaning | Description |
|---|---|---|
200 | Success | Request processed successfully |
201 | Created | Resource successfully created |
400 | Bad Request | Invalid input parameters |
401 | Unauthorized | Invalid authentication credentials |
403 | Forbidden | Merchant account not allowed to perform this operation |
404 | Not Found | Resource does not exist |
500 | Internal Server Error | Cybersource system error |
🔹 Error Response Example:
4. Testing & Sandbox Environment
Use the following test card numbers to simulate transactions:
| Card Type | Number | Expiry Date | CVV |
|---|---|---|---|
| Visa | 4111111111111111 | 12/26 | 123 |
| MasterCard | 5555555555554444 | 12/26 | 123 |
| Amex | 371449635398431 | 12/26 | 1234 |
Test Environment Base URL: https://ebctest.cybersource.com/
5. Webhooks
Merchants can receive real-time notifications on payment events. Configure webhook URLs in your Cybersource merchant dashboard.
🔹 Webhook Event Types:
- payment.authorized – Payment successfully authorized
- payment.refunded – Refund processed
- payment.failed – Payment failed
🔹 Webhook Payload Example:
6. Support & Contact
For technical support, contact:
📧 Email: [email protected]
📌 Notes:
- This API is designed for Barclays merchants using Cybersource.
- Ensure API keys are securely stored and rotated periodically.
- Use the test environment before deploying to production.
