{"activeVersionTag":"latest","latestAvailableVersionTag":"latest","collection":{"info":{"_postman_id":"e8252741-7ce3-4212-878a-f77a4c4a35dd","name":"Corpay Cross-Border API Documentation v1.8","description":"Corpay Cross-Border API uses HATEOAS (Hypertext As The Engine Of Application State) framework. This means every response not only provides the requested data but also includes relevant links. This provides a link on the current resource as well as all actions that can be taken from there.\n\nResponse to APIs, once authenticated, are displayed in the following model where content and errors are provided in the appropriate lists. Links always contain a `SELF` link to the current endpoint, and any additional links, depending on the state of the resource. For example, a beneficiary object can be viewed and modified.\n\n``` json\n  {\n    \"content\": {},\n    \"errors\": [],\n    \"links\": [\n        {\n            \"rel\": \"self\",\n            \"uri\":   \"https://crossborder.corpay.com/api/{endpoint}\",\n            \"method\": {POST GET or PUT}\n        }\n    ]\n  }\n\n ```\n\n# Upcoming Updates\n\nStay informed about our upcoming API changes and enhancements. We’ll announce these updates as they become available. If you have any questions, please contact your **Corpay Account Manager**.\n\n- For a more detailed preview of what’s coming, please visit the [Upcoming Updates](https://cb.corpay.com/api-resources-documentation/#coming-change) page.\n    \n- For full details on enhancements and sample responses, please visit the [API Release Notes](https://cb.corpay.com/api-resources-documentation/#API-release) page.\n    \n\n**Estimated release timelines shared here are subject to change**. We’ll keep you informed as we progress.\n\n### IP Whitelisting\n\n**ETA: Q1 2026**\n\nWe are enhancing IP Whitelisting to improve security, flexibility, and performance across our API services.\n\n**Key updates include**:\n\n- Whitelisting at both **client** and **partner** levels\n    \n- Support for **IPv4**, **IPv6**, and **valid CIDR** **ranges** (for example, 192.0.2.0/24)\n    \n- Removal of SQL LIKE syntax (wildcards such as % will no longer be supported)\n    \n- **Improved access control** with cached authentication for faster performance\n    \n\n### Confirmation of Payee (CoP) and Verification of Payee (VoP)\n\n**ETA: Q1 2026**\n\nUK and EU payment regulatory bodies have introduced new name-checking protocols requiring banks, financial institutions, and payment service providers like Corpay to validate that payee details are correct and exactly match the associated bank account information. On **Corpay's internal workflow**, we have now enabled:\n\n- **UK’s Confirmation of Payee (CoP) protocol** for all incoming and outgoing GBP payments made via FPS, Bacs, and CHAPS.\n    \n- **EU’s Verification of Payee (VoP) protocol** for all incoming and outgoing EUR payments made via SEPA Credit Transfer (CT) or SEPA Instant eligible BICs (for clients whose payment accounts are governed under our Ireland entity and its branches).\n    \n\nWe are now **integrating CoP and VoP protocols into our REST API workflows.** Key updates include:\n\n- Migration to updated versions of our existing beneficiary creation endpoints.\n    \n- Introduce new verification endpoints.\n    \n\nWe'll keep you informed about the new endpoints and sample responses as we roll out the updates.\n\n**Note**: **CoP** and **VoP** **are regulatory mandates, not optional services**. These checks are enforced at the regulatory level, and **no exceptions are permitted**. Please direct any questions to your Corpay representative.\n\n### Beneficiary Rules (Template Guide) Endpoint Update\n\n**ETA: Q2 2026**\n\nAn updated version of the [GET Beneficiary Rules](https://apidocscrossborder.corpay.com/#ddfb9ee3-d7e9-4c55-9b22-b796569b5695) endpoint will be released. Key updates include:\n\n- Introduce new endpoints - `api/template-guide-rules` and `api/{clientCode}/{clientDivisionId}/template-guide-rules`\n    \n- The API response will now return a list of accepted region values based on the specified `destinationCountry` and `bankCountry` parameters, ensuring compliance when creating or editing beneficiaries via the [POST Create/Edit Bene](https://apidocscrossborder.corpay.com/#36685106-4a23-48e8-b518-d98d869dbc85).\n    \n- A new optional `routingCode` parameter will support accurate beneficiary rule retrieval for **CAD (Canada)**, addressing issues caused by varying account number digit lengths across Canadian banks and institutions.\n    \n\nWe'll keep you informed about the new endpoints and sample responses as we roll out the updates.\n\n### Multi-Currency Accounts (MCA) Reporting Enhancements\n\n**ETA: Q2 2026**\n\nTo improve our MCA reporting, we'll introduce **new bank-style statements** via an **MCA Statement endpoint**, which will eventually replace the existing [GET Multi-Currency Accounts History](https://apidocscrossborder.corpay.com/#45182788-f835-4b84-8054-3b50f670f262) endpoint. Both endpoints will run in parallel during the transition period to support integration updates. We'll keep you informed about the detailed specifications, sample responses, and API deprecation timelines as we roll out the updates.\n\n# Release Notes\n\nCorpay Cross-Border's suite of API services and functionality is continuously growing in which we deploy multiple releases throughout the year. To discover what's new with Corpay's API, you can read our [What's New](https://apidocscrossborder.corpay.com/#7cf5b90c-3b0b-4ca8-9c3b-b4a8cc51e4a3) section that detail the most recent API enhancements and updates.\n\n# Common Terms\n\n<ul><li><div><b>Client Code</b> - A unique 6-digit client identifier for each client account. Used in all endpoints as part of URL.</div></li><li><div><b>Partner ID</b> - Links multiple client accounts together. Used during authentication procedure.</div></li><li><div><b>Client Integration ID</b>- Unique beneficiary ID that you can use in other endpoints.</div></li><li><div><b>Payment </b>- Outgoing cashflow to a beneficiary.</div></li><li><div><b>Settlement</b> - Incoming cashflow to Corpay.</div></li><li><div><b>MCA </b>- Multi-Currency Accounts (Formerly known as FXBalance/CLIAB)</div></li></ul>\n\n# Base URL\n\n| **ENVIRONMENT** | **URL** |\n| --- | --- |\n| Production | [https://crossborder.corpay.com](https://crossborder.corpay.com) |\n| Sandbox | [https://crossborder.beta.corpay.com](https://crossborder.beta.corpay.com) |\n\nThe documentation for each endpoint displays the HTTP method and the end path. Before you submit the request, you need to prepend the base path to get the full resource URL. All endpoints referenced in the documentation require the following base path: [https://crossborder.corpay.com](https://crossborder.corpay.com).\n\n**Note:** Depending on the stage of your implementation, the base path may be slightly different. For staging, pre-production, QA, and testing, use [https://crossborder.beta.corpay.com](https://crossborder.beta.corpay.com) to point to the Beta environment.\n\nCurly braces are used as a placeholder and indicate the type of value that you need to supply. For instance, where you see {clientCode} in the resource, you need to replace that string with your client code.\n\nFor example, in the documentation, endpoints look similar to this:\n\n`GET /api/{clientCode}/0/benes/{beneID}`\n\nWhen you add the base path, your client code, and any parameters, the result is a well-formed REST URL that looks something like this:\n\n`GET https://crossborder.corpay.com/api/123456/0/benes/jsmith321`\n\n# Response Codes\n\nMost of the endpoints include examples for both successful and unsuccessful responses. In the Example Request, click the downward arrow beside the response code to view additional examples.\n\nCorpay Cross-Border uses conventional HTTP response codes to indicate the success or failure of an API request.\n\n<table><tbody><tr><th>Response Code</th><th>Description</th></tr><tr><td><div>2<i>xx</i></div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td><td><div>Success.</div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td></tr><tr><td><div>4<i>xx</i></div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td><td><div><p>Client error. This is usually due to missing or incorrect information, for example, a missing or incorrect parameter or value.</p><ul><li><p>401 - Authorization issue. This usually means that the authorization token has expired and you need to refresh it.</p></li><li><p>410 - Rate resource expired. Due to currency fluctations, quotes are valid for a very limited period of time. When you get a 410 error, it means that the rate resource you're trying to use has expired and you need to generate a new quote.</p></li></ul></div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td></tr><tr><td><div>5<i>xx</i></div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td><td><div>Server error. If the error persists, contact Corpay Tier 2 support.</div><div contenteditable=\"false\"><div><div><div></div></div></div><div></div></div></td></tr></tbody></table>","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","isPublicCollection":true,"owner":"5203630","collectionId":"e8252741-7ce3-4212-878a-f77a4c4a35dd","publishedId":"UVR4PAbY","public":true,"publicUrl":"https://apidocscrossborder.corpay.com","privateUrl":"https://go.postman.co/documentation/5203630-e8252741-7ce3-4212-878a-f77a4c4a35dd","customColor":{"top-bar":"3D1628","right-sidebar":"3D1628","highlight":"981239"},"documentationLayout":"classic-double-column","customisation":null,"version":"8.10.1","publishDate":"2022-03-16T13:35:01.000Z","activeVersionTag":"latest","documentationTheme":"light","metaTags":{},"logos":{}},"statusCode":200},"environments":[],"user":{"authenticated":false,"permissions":{"publish":false}},"run":{"button":{"js":"https://run.pstmn.io/button.js","css":"https://run.pstmn.io/button.css"}},"web":"https://www.getpostman.com/","team":{"logo":"https://res.cloudinary.com/postman/image/upload/t_team_logo_pubdoc/v1/team/f84e91beeed52b49e0b74ef188a2cac41879104095b6690d6b8310911d684583","favicon":"https://res.cloudinary.com/postman/image/upload/v1755021485/team/92111f83f155295abbce8e0e0ebe2317.ico"},"isEnvFetchError":false,"languages":"[{\"key\":\"csharp\",\"label\":\"C#\",\"variant\":\"HttpClient\"},{\"key\":\"csharp\",\"label\":\"C#\",\"variant\":\"RestSharp\"},{\"key\":\"curl\",\"label\":\"cURL\",\"variant\":\"cURL\"},{\"key\":\"dart\",\"label\":\"Dart\",\"variant\":\"http\"},{\"key\":\"go\",\"label\":\"Go\",\"variant\":\"Native\"},{\"key\":\"http\",\"label\":\"HTTP\",\"variant\":\"HTTP\"},{\"key\":\"java\",\"label\":\"Java\",\"variant\":\"OkHttp\"},{\"key\":\"java\",\"label\":\"Java\",\"variant\":\"Unirest\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"Fetch\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"jQuery\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"XHR\"},{\"key\":\"c\",\"label\":\"C\",\"variant\":\"libcurl\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Axios\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Native\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Request\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Unirest\"},{\"key\":\"objective-c\",\"label\":\"Objective-C\",\"variant\":\"NSURLSession\"},{\"key\":\"ocaml\",\"label\":\"OCaml\",\"variant\":\"Cohttp\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"cURL\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"Guzzle\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"HTTP_Request2\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"pecl_http\"},{\"key\":\"powershell\",\"label\":\"PowerShell\",\"variant\":\"RestMethod\"},{\"key\":\"python\",\"label\":\"Python\",\"variant\":\"http.client\"},{\"key\":\"python\",\"label\":\"Python\",\"variant\":\"Requests\"},{\"key\":\"r\",\"label\":\"R\",\"variant\":\"httr\"},{\"key\":\"r\",\"label\":\"R\",\"variant\":\"RCurl\"},{\"key\":\"ruby\",\"label\":\"Ruby\",\"variant\":\"Net::HTTP\"},{\"key\":\"shell\",\"label\":\"Shell\",\"variant\":\"Httpie\"},{\"key\":\"shell\",\"label\":\"Shell\",\"variant\":\"wget\"},{\"key\":\"swift\",\"label\":\"Swift\",\"variant\":\"URLSession\"}]","languageSettings":[{"key":"csharp","label":"C#","variant":"HttpClient"},{"key":"csharp","label":"C#","variant":"RestSharp"},{"key":"curl","label":"cURL","variant":"cURL"},{"key":"dart","label":"Dart","variant":"http"},{"key":"go","label":"Go","variant":"Native"},{"key":"http","label":"HTTP","variant":"HTTP"},{"key":"java","label":"Java","variant":"OkHttp"},{"key":"java","label":"Java","variant":"Unirest"},{"key":"javascript","label":"JavaScript","variant":"Fetch"},{"key":"javascript","label":"JavaScript","variant":"jQuery"},{"key":"javascript","label":"JavaScript","variant":"XHR"},{"key":"c","label":"C","variant":"libcurl"},{"key":"nodejs","label":"NodeJs","variant":"Axios"},{"key":"nodejs","label":"NodeJs","variant":"Native"},{"key":"nodejs","label":"NodeJs","variant":"Request"},{"key":"nodejs","label":"NodeJs","variant":"Unirest"},{"key":"objective-c","label":"Objective-C","variant":"NSURLSession"},{"key":"ocaml","label":"OCaml","variant":"Cohttp"},{"key":"php","label":"PHP","variant":"cURL"},{"key":"php","label":"PHP","variant":"Guzzle"},{"key":"php","label":"PHP","variant":"HTTP_Request2"},{"key":"php","label":"PHP","variant":"pecl_http"},{"key":"powershell","label":"PowerShell","variant":"RestMethod"},{"key":"python","label":"Python","variant":"http.client"},{"key":"python","label":"Python","variant":"Requests"},{"key":"r","label":"R","variant":"httr"},{"key":"r","label":"R","variant":"RCurl"},{"key":"ruby","label":"Ruby","variant":"Net::HTTP"},{"key":"shell","label":"Shell","variant":"Httpie"},{"key":"shell","label":"Shell","variant":"wget"},{"key":"swift","label":"Swift","variant":"URLSession"}],"languageOptions":[{"label":"C# - HttpClient","value":"csharp - HttpClient - C#"},{"label":"C# - RestSharp","value":"csharp - RestSharp - C#"},{"label":"cURL - cURL","value":"curl - cURL - cURL"},{"label":"Dart - http","value":"dart - http - Dart"},{"label":"Go - Native","value":"go - Native - Go"},{"label":"HTTP - HTTP","value":"http - HTTP - HTTP"},{"label":"Java - OkHttp","value":"java - OkHttp - Java"},{"label":"Java - Unirest","value":"java - Unirest - Java"},{"label":"JavaScript - Fetch","value":"javascript - Fetch - JavaScript"},{"label":"JavaScript - jQuery","value":"javascript - jQuery - JavaScript"},{"label":"JavaScript - XHR","value":"javascript - XHR - JavaScript"},{"label":"C - libcurl","value":"c - libcurl - C"},{"label":"NodeJs - Axios","value":"nodejs - Axios - NodeJs"},{"label":"NodeJs - Native","value":"nodejs - Native - NodeJs"},{"label":"NodeJs - Request","value":"nodejs - Request - NodeJs"},{"label":"NodeJs - Unirest","value":"nodejs - Unirest - NodeJs"},{"label":"Objective-C - NSURLSession","value":"objective-c - NSURLSession - Objective-C"},{"label":"OCaml - Cohttp","value":"ocaml - Cohttp - OCaml"},{"label":"PHP - cURL","value":"php - cURL - PHP"},{"label":"PHP - Guzzle","value":"php - Guzzle - PHP"},{"label":"PHP - HTTP_Request2","value":"php - HTTP_Request2 - PHP"},{"label":"PHP - pecl_http","value":"php - pecl_http - PHP"},{"label":"PowerShell - RestMethod","value":"powershell - RestMethod - PowerShell"},{"label":"Python - http.client","value":"python - http.client - Python"},{"label":"Python - Requests","value":"python - Requests - Python"},{"label":"R - httr","value":"r - httr - R"},{"label":"R - RCurl","value":"r - RCurl - R"},{"label":"Ruby - Net::HTTP","value":"ruby - Net::HTTP - Ruby"},{"label":"Shell - Httpie","value":"shell - Httpie - Shell"},{"label":"Shell - wget","value":"shell - wget - Shell"},{"label":"Swift - URLSession","value":"swift - URLSession - Swift"}],"layoutOptions":[{"value":"classic-single-column","label":"Single Column"},{"value":"classic-double-column","label":"Double Column"}],"versionOptions":[],"environmentOptions":[{"value":"0","label":"No Environment"}],"canonicalUrl":"https://apidocscrossborder.corpay.com/view/metadata/UVR4PAbY"}