From 1330d0b47220c91347ad99d5c78e34bf23949d23 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Sat, 26 Sep 2026 08:18:10 +0000 Subject: [PATCH] docs: add changelog entry for PIN management APIs The PIN management endpoints (set-pin, set-pin-url, pin/unblock) were added in bf17b3fe but had no changelog entry. This documents the three new endpoints, the pinStatus field on Card, pinTargetOrigin config option, and CARD.PIN_STATUS_CHANGE webhook. Co-Authored-By: Claude Opus 4.5 --- mintlify/changelog.mdx | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/mintlify/changelog.mdx b/mintlify/changelog.mdx index ae18fa347..85837876c 100644 --- a/mintlify/changelog.mdx +++ b/mintlify/changelog.mdx @@ -47,6 +47,26 @@ card data never crosses your servers. `Card.cardCapabilities` gains to work for every card with no integration. See [Digital wallet tokenization](/cards/card-management/digital-wallet-tokenization). +## Let cardholders set, change, and unblock PINs + +Three new endpoints manage online PINs on cards: + +- `GET /cards/{id}/set-pin-url` returns a temporary URL for a secure PIN-entry iframe. The + cardholder enters their PIN inside the iframe, so the plaintext PIN never reaches your + servers or Grid's. Configure `cardConfigs.pinTargetOrigin` through `PATCH /platform/config` + before requesting a URL. +- `POST /cards/{id}/set-pin` accepts an encrypted PIN block when you operate your own + PIN-entry UI. Build the block in the client with the published + [PIN encryption public key](/keys/pin-encryption-public-key.pem.txt), so the PIN never + reaches your servers either. +- `POST /cards/{id}/pin/unblock` clears a blocked PIN without changing it. + +`Card` gains `pinStatus`: `NOT_SET`, `OK`, or `BLOCKED`. Three consecutive incorrect entries +block a PIN until you clear it with `POST /cards/{id}/pin/unblock` or replace it with either +PIN-entry flow. A new `CARD.PIN_STATUS_CHANGE` webhook fires when Grid's saved status changes. + +See [Card PINs](/cards/card-management/pins). + ## Card refunds, declines, and voids report distinct outcomes Three card-statement corrections to `CardTransaction`: