Quick Links

Respond to Alerts in Chargeback Management

Alert response options include an automated response from us to the partner that sent the alert, manually entered responses in Chargeback Management, or in an API response sent to us.

Generate an API Key

In Kount 360, after you have activated your organization, you can generate API keys to send data securely to Equifax. Only users with the Owner role permissions can generate, delete, or edit API keys.

Caution

You must have an initialized client before you can create an API key.

  1. Sign in to Kount 360.

    There are two integration environments: sandbox and production. Only integrate into our sandbox environment if you are integrating a pre-production environment without production data for testing.

  2. Select Admin, and then Product Configuration.
  3. In System Settings, select API Keys.

    All initialized clients display.

  4. For the client you want to create an API key, select Generate API Key.

    The new API key is generated. A prompt displays with the ability to copy the API key and add a description.

  5. Copy the API key, and then store it in a secure location.

    Note

    The API key is not provided again. You must store it in a secure location for future reference. If the API key is compromised or lost, create a new API key and delete the compromised one.

  6. Enter a description detailing the store used for the API key, and then select Confirm.

API keys are organized under each client on the API Keys page. Expand the client to view your API keys, the descriptions, and when client details were created.

Create a Bearer Token

After you have provisioned your API credentials in the portal, retrieve a temporary bearer token to authenticate calls to the Kount 360 API. Provide the API key in an HTTP POST to a specific login.equifax.com URL.

With a successful exchange, the returned JSON provides a special bearer token, which is the access_token property. The exchange also provides an expiration date, the expires_in property, provided in seconds until expiration. The API to retrieve the bearer token depends on if you are calling the sandbox or production environment.

The values are:

Sandbox

Auth Server URL:

https://login-uat.equifax.com/as/token

API Service Host:

https://api-sandbox.kount.com

Production

Auth Server URL:

https://login.equifax.com/as/token

API Service Host:

https://api.kount.com

After obtaining the bearer token, use it to authenticate requests to the Kount 360 API. Include the token in the Authorization header of your HTTP API request, prefixed with Bearer {bearer token}.

To prevent authentication issues, refresh the token before it expires. Tokens issued by login.equifax.com expire after 20 minutes, but client credentials remain valid unless revoked. Minimize calls to the /token endpoint by implementing token expiration handling in your customer applications. Always check if a token has expired before requesting a new one, as excessive calls to the /token endpoint could result in rate limiting.

Responding to Ethoca or Verifi Alerts with the Alerts Actions API

When you receive an Alert notification for Ethoca or Verifi, you can send your response back to Ethoca or Verifi with the Alert Action API. Initiate a new HTTP call to the Alerts Actions endpoint for the appropriate environment:

Alerts Actions API URL

Sandbox API endpoint

https://api-sandbox.kount.com/kff/alerts/actions

Production API endpoint

https://api.kount.com/kff/alerts/actions

HTTP Method

Method: POST

Current API Reference

Example Request Payload

This example shows a request payload for submitting alert actions to Ethoca and Verifi. Include one action object for each alert response.

   {
    "actions": [
        {
            "id": "bebf622e-3706-4e21-8707-e2beadb7e5e7",
            "statusCode": "REFUNDED"
        }
    ]
}

This table describes the fields that can be included in each action object.

Field Required Notes
id Required Equifax unique identifier provided in the Alert.
status code Required Status code to return with the action for alerts (see table for valid codes).

Valid status codes are listed in the Valid Status Code Values table. Each status code represents a complete alert outcome. Unlike the legacy Alerts Actions API, the current version does not require a separate action value to indicate the alert disposition.

Status Code Description
REFUNDED Full Refund Issued: A full refund was issued on this transaction or voided the transaction prior to settlement.
PARTIALLY_REFUNDED Refund Previously Issued: The transaction was refunded prior to receiving the alert.
NOT_REFUNDED No Refund Issued: Did not issue a refund; allow to advance to a chargeback.
PREVIOUSLY_REFUNDED Refund Previously Issued: The transaction was refunded prior to receiving the alert.
DUPLICATE Duplicate Alert: The transaction has already received another alert from another provider.
DISPUTE_RECEIVED Already a Chargeback: A chargeback was issued on this transaction prior to receiving the alert.
TRANSACTION_DECLINED Declined Transaction/Failed Authorization: The transaction was declined; no refund was required.
TRANSACTION_HAS_3DS 3DS Authentication: This transaction was authenticated by 3D Secure; no refund was required.
TRANSACTION_NOT_FOUND Not Found: The transaction could not be found in CRM or gateway.
REFUND_FAILED Unable to Issue Refund: The refund was declined for this transaction.
Was this article helpful?
0 out of 0 found this helpful