OpenAPI
SDKs
Tools
Native 3DS for Secure Fields
Secure Fields now supports native 3D Secure (3DS) authentication, allowing web merchants to handle 3DS challenges directly within their own checkout page. This eliminates full-page redirects and keeps customers in the merchant’s environment throughout the entire payment flow.What’s new?
- In-page challenge handling: Secure Fields includes built-in logic to intercept 3DS challenge requirements and trigger a modal or inline challenge directly on the page instead of redirecting the user.
- 3DS2 support: The integration is fully optimized for 3DS2, supporting frictionless flows, browser-based fingerprinting, and step-up challenges.
- Consistent backend: This feature uses the same Checkout Sessions infrastructure as the native mobile 3DS SDKs, ensuring consistent 3DS data management across web and mobile platforms.
- Custom styling: Customize the appearance of the 3DS challenge container to match your site’s design.
How it works
Upgrade your Secure Fields integration to initialize a 3DS component, which automatically handles the hidden fingerprinting iFrame and the visible challenge window. For a full walk-through and code samples, see the guide on implementing 3DS with Secure Fields.New anti-fraud connector: Riskified
Gr4vy now integrates with Riskified, a fraud prevention platform that uses machine learning and behavioral analytics to provide real-time approve or decline decisions for e-commerce transactions.Route transactions through Riskified before authorization, with decisions mapped directly into Gr4vy’s Flow engine so you can automatically accept, reject, or flag transactions based on Riskified’s assessment.What’s new?
- Real-time decision mapping: Riskified’s
approvedecision maps toacceptin Gr4vy;declineresults in an immediate reject. - Transaction lifecycle sync: Gr4vy keeps Riskified synchronized with the full transaction lifecycle, including refunds and voids. Enable the “Limited Actions” flag to restrict updates to initial transaction processing only.
- Device fingerprinting: Pass a
session_idas ananti_fraud_fingerprintvia the API to improve decision accuracy when using Riskified’s Beacon technology. - Enhanced data pass-through: Supports detailed
cart_items(mapped to Riskifiedline_items) and custom merchant-defined data.
Recurring Pix payments via dLocal
The dLocal Pix connector now supports recurring payments through Pix Automático, Brazil’s central bank standard for automated, scheduled Pix transactions. Merchants can now offer subscriptions, memberships, and automated billing using the speed of Pix combined with a recurring billing model.What’s new?
- Pix Automático support: Full integration with the official recurring Pix flow required for automated bank transfers in Brazil.
- Standard recurring flags: Use Gr4vy’s existing recurring payment flags to initiate and manage Pix Automático mandates.
- Asynchronous mandate setup: The system handles initial mandate creation and provides the redirect or QR code for the customer to authorize the recurring setup in their banking app.
- Status synchronization: Webhook handlers have been updated to process Pix Automático mandate and recurring capture status updates from dLocal.
How it works
Include the relevant recurring payment flags in your transaction request. Gr4vy coordinates the mandate setup with dLocal and returns the data needed to guide the customer through the one-time bank authorization. Once authorized, subsequent payments are processed automatically.For technical guidance on parameters and mandate management, see the dLocal Pix documentation.Pix via Adyen
The Adyen connector now supports Pix, Brazil’s premier instant payment system. Merchants can offer this high-conversion, QR-code-based payment method to Brazilian customers through their existing Adyen integration.What’s new?
- Native Pix integration: Process Pix transactions through the standard Adyen connector by selecting the Pix payment method type.
- QR code and copy-and-paste support: The integration generates Pix QR codes and dynamic “Copy and Paste” keys delivered to the buyer during checkout.
- Automated status updates: Adyen webhook handlers have been updated to manage the asynchronous nature of Pix, automatically transitioning transactions from pending to captured once the customer completes the transfer.
- Refund support: Standard refund operations are supported for full transaction lifecycle management.
How it works
Enable Pix by adding the Pix payment method to your Adyen connector settings in the Gr4vy dashboard and updating your routing rules. When creating a transaction for a buyer in Brazil, set the currency toBRL and provide the buyer’s tax ID (CPF/CNPJ) where required.Pix Automático (recurring payments) is not yet supported for the Adyen Pix connector. This release covers one-off instant transfers only.
Bre-B and Capitec via dLocal
The dLocal connector now supports Bre-B and Capitec as new alternative payment methods, allowing merchants to further localize their payment offering in the regions where dLocal operates.What’s new?
- Bre-B: A popular local payment method now available through the dLocal integration.
- Capitec: South Africa’s widely used Capitec payment method is now supported for one-off transactions.
How it works
Both methods follow the standard dLocal redirect flow for authorization. Enable Bre-B and Capitec by updating your dLocal connector settings in the Gr4vy dashboard and adding the new methods to your active routing rules.Capitec support in this release is limited to one-off transactions. Recurring payment support is scheduled to be added in a future update.
Klarna via Nuvei
Gr4vy now supports Klarna through the Nuvei connector, giving merchants another processing route for Klarna’s Buy Now, Pay Later (BNPL) and instant payment options.What’s new?
- Klarna payment options: Support for Pay in 30 days, Pay in 3 installments, and Financing through the Nuvei gateway.
- European coverage: Available across supported European markets where both Klarna and Nuvei operate.
- Dashboard configuration: Configure Klarna via Nuvei directly in the connector settings within the Gr4vy dashboard.
Date-time range picker
A new, flexible date-time range picker is now available across the Insights (Authentication and Authorization tabs) and Transactions dashboards. This update replaces the previous fixed-range options (Last 24 hours, 7 days, 30 days) and the legacy date picker with a fully customizable date range selector.What’s new?
- Custom date range controller: A new date range controller at the top of the dashboard pages lets you define any custom start and end date and time to filter your view.
- Simplified transaction filtering: Date columns in the Transactions table and Reports now function primarily for sorting. The new top-level controller handles all date filtering.
- Precise Insights windows: You are no longer limited to “Last 24 hours” or “Last 7 days.” Select the exact time window relevant to your investigation.
Why it matters
Investigating specific incidents requires precision. Previously, fixed ranges made it difficult to pinpoint the exact moment an issue occurred. This update gives analysts and operations teams the accuracy they need for deep-dive investigations and alert response.Who is it for?
This feature is designed for analysts, operations teams, and users investigating specific monitoring alerts or transaction anomalies.Online Banking Czech Republic via Adyen
The Adyen connector now supports Online Banking Czech Republic as a new alternative payment method. This payment option lets customers pay directly from their bank account using their familiar online banking experience.Online Banking Czech Republic is a widely used local bank transfer method for one-off purchases. Offering it helps you meet local payment expectations and makes it easier for Czech customers to complete a purchase without using a card.For details on setup, see the Adyen Online Banking Czech Republic documentation.Idempotency for refunds, voids, and captures
You can now use idempotency with post-authorization operations. The/refunds, /voids, and /captures endpoints support the standard Idempotency-Key header so you can safely retry requests without creating duplicate financial actions.What’s new
- Idempotency header support: The
/refunds,/voids, and/capturesendpoints acceptIdempotency-KeyforPOSTrequests. - Safe retries and duplicate protection: When you retry with the same key and payload, Gr4vy returns the cached response instead of reprocessing the financial operation.
- Consistent error handling: Reusing a key with a different payload returns a validation error, matching core transaction behavior.
How it works
Send a uniqueIdempotency-Key header with your POST request. If a timeout occurs, resend the exact same request with the same key. Gr4vy returns the stored result without calling the payment processor again.For implementation guidance, see Idempotent Requests.Pay by bank orchestration with Plaid
Gr4vy is introducing bank transfer orchestration, combining Plaid Link for secure account connection and bank account details collection with flexible processing options. Merchants can now process via Plaid Transfer or route payments through another PSP that supports Plaid-linked accounts (for example, Adyen), while keeping a single Plaid Link flow across processors.This release lets you launch pay-by-bank with a unified customer experience while choosing the best processing rail for each transaction. The integration supports Plaid’s verification and risk features, including Identity, Identity Match, Signal, and Balance Check, so you can tune risk and compliance without changing your checkout flow.Recurring payments are supported, allowing you to securely save a bank account from the first payment and reuse it for future charges.To get started, configure the Plaid connection in the dashboard and follow the Plaid integration guide.Issuer installments support for Embed & payment links
Merchants can now specify aninstallment_count field when initializing a payment flow across all frontend integration methods, including Embed (Web), payment links, and the native Mobile SDKs (Android, iOS, and React Native). This field complements the existing issuer installments capabilities, allowing merchants to pass the desired number of installments directly to the transaction.The installment_count is handled as a pass-through field that gets captured and associated with the resulting transaction. This provides greater flexibility for businesses that manage installment calculations outside of the Gr4vy UI but still require the data to be orchestrated seamlessly through the platform.This update does not add any installment selection UI to Embed. The field is intended to be set programmatically by the merchant based on their own business logic or previous user selections, and is passed through to the backend without altering the visual checkout experience.
3DS sandbox simulator
A powerful new 3DS sandbox simulator allows merchants to mock 3D Secure responses in the sandbox environment without relying on external 3DS servers.What’s new?
- Mock 3DS API Endpoints: A new set of API endpoints (
/three-ds-scenarios) allow merchants to define, manage, and order custom rules for 3DS outcomes. - Flexible Condition Matching: Instead of relying solely on card numbers, merchants can now trigger specific 3DS scenarios based on various transaction properties:
- Buyer Details: Match on first name, last name, or email address.
- Transaction Data: Match on amount or
external_identifier. - Payment Data: Match on specific card numbers or BINs.
- Custom Outcomes: For every rule, merchants can specify the enrollment status and the specific authentication result (for example, Y for successful, C for challenge required).
- Challenge Flow Support: The simulator fully supports mocking the challenge handshake, ensuring a complete end-to-end integration test.
Why it matters
Testing 3DS in sandbox has historically been a point of friction. Traditional simulators often rely on specific card numbers that can clash with BIN services or downstream PSP test cards, forcing merchants to choose between testing 3DS or testing their processor.This simulator decouples 3DS testing from external providers. By allowing triggers based on billing data (like a specific email address), merchants can easily automate a wide variety of test scenarios—from friction-free approvals to step-up challenges—without needing to manage complex sets of test card numbers.How it works
The simulator operates on a rule-based logic within the Gr4vy sandbox:- Register Rules: Use the
/three-ds-scenariosendpoint to register a rule. For example, you could create a rule where any transaction with the emailchallenge@example.comtriggers a 3DS challenge. - Process Transaction: When a transaction is processed in sandbox, Gr4vy checks for any matching mock rules.
- Simulated Response: If a match is found, the simulator generates the mock 3DS data (including mock CAVV and ECI) and returns it. If no rule matches, the system falls back to the default sandbox behavior.
Availability and limitations
The 3DS sandbox simulator is available exclusively in the sandbox environment. These endpoints and rules do not function in production to ensure live transaction security.Please note the following current limitations:- Hosted 3DS Flow Only: The simulator is currently optimized for use with the hosted 3DS implementation.
- Checkout Sessions Support: Support is not yet available for 3DS performed via Checkout Sessions (used by the Native Mobile SDK). This is because the native 3DS SDK requires specific, proprietary initialization values to handle the native challenge flow that are not yet generated by the simulator.
New connector: Ecommpay (card)
The connector ecosystem has expanded with the addition of Ecommpay, a leading international payment service provider. This new connector enables merchants to process global card payments through Ecommpay’s robust gateway.What’s new?
- Ecommpay Card Support: Merchants can now process credit and debit card transactions directly through Ecommpay using their existing credentials.
- Full Transaction Lifecycle: The connector supports the complete range of card operations, including authorizations, captures (delayed and partial), voids, and refunds.
- Advanced Data Support: To meet the needs of travel and hospitality merchants, the connector includes support for airline-specific data and cart items. This ensures that detailed transaction information is passed through to the processor for better risk management and reporting.
- Instrument Flexibility: In addition to standard PAN transactions, the connector supports modern payment instruments including Network Tokens, Apple Pay, and Click to Pay.
- Recurring Payments: Support for recurring payment flags is included, enabling merchants to manage subscription-based or installment payment flows seamlessly.
Why it matters
This connector was developed to support the travel and hospitality industry’s payment processing needs. Given the complexities of this industry, having a connector that natively handles airline data and recurring flags is essential for maintaining high authorization rates and accurate financial records.The Ecommpay connector meets the high standards required for large-scale airline operations and is now available to all merchants looking to leverage Ecommpay’s global reach and specialized features.How it works
To use this connector, merchants can select Ecommpay from the connector list in the Gr4vy dashboard. Once the required credentials (available via the Ecommpay merchant dashboard) are entered, transactions can be routed to Ecommpay using standard routing rules. The connector also supports webhooks for asynchronous updates, ensuring that transaction states remain synchronized across both platforms.Webhook retry improvements
Webhook delivery infrastructure has been enhanced with advanced isolation and retry capabilities to provide even greater reliability for mission-critical integrations.What’s new?
- Enhanced Isolation: Webhook endpoints now benefit from advanced isolation architecture, ensuring optimal delivery performance at scale.
- Optimized Retries: Refined retry logic maintains delivery attempts over a 7-day window with intelligent exponential back-off.
- Zero Data Loss: Enhanced queue management ensures webhook integrity is maintained even during extended endpoint maintenance or downtime.
Why it matters
Webhooks are the backbone of asynchronous payment processing. This infrastructure enhancement ensures:- Consistent Performance: The webhook endpoints receive notifications with consistent, predictable delivery performance.
- Automatic Recovery: Failed deliveries are intelligently retried without any manual intervention required.
- Scale with Confidence: Build robust integrations knowing the webhook infrastructure can handle high volume and complex delivery scenarios.
How it works
The enhanced infrastructure automatically manages webhook delivery with intelligent isolation and retry scheduling. Each endpoint operates independently with optimized delivery queues, ensuring reliable notification delivery even during peak transaction volumes.Transaction search by buyer external ID
The search feature within the Gr4vy Dashboard has been enhanced to allow merchants to locate transactions using a buyer’s external identifier.What’s new?
- Expanded Search Index: The transaction search index now includes the
buyer.external_identifierfield. - Unified Search Experience: Merchants can now enter this external system ID directly into the main search box in the Transactions dashboard to find the associated records.
Why it matters
This update was developed to support merchants who often rely on external system IDs to manage their support and operational workflows.Previously, locating a specific transaction using an identifier from a third-party CRM or internal database required manual cross-referencing or technical intervention. By indexing thebuyer.external_identifier, support teams can now immediately pull up transactions using the IDs they are already working with, significantly reducing friction and speeding up resolution times.How it works
No configuration changes are required. When a merchant enters a string into the Transaction search box, the system automatically checks for matches against thebuyer.external_identifier in addition to existing searchable fields like transaction ID or buyer name. This ensures that any transaction associated with a buyer who has an external ID is easily discoverable.Payment lifecycle graph
A new Sankey graph visualization has been introduced to the dashboard homepage. This dynamic chart provides a complete view of the payment lifecycle throughout the system, complementing the recent homepage updates.What’s new?
The Sankey graph is now integrated directly into the dashboard homepage, providing a dynamic visual representation of transaction flows through the payment lifecycle.Why it matters
Understanding the flow of payments through various stages—from initiation to settlement or failure—can be complex when looking at raw numbers alone. The Sankey graph offers an immediate, visual representation of transaction health. It allows you to easily spot drop-offs, analyze conversion flows, and understand volume distribution across your payment ecosystem at a glance.How it works
- Visual Flow: It visualizes the path of transactions based on the merchant’s data, showing how payments move through different states.
- Health Check: It serves as a visual health check, allowing you to quickly identify bottlenecks or unexpected patterns in your transaction lifecycle.
Who is it for?
This feature is designed for all dashboard users, especially those monitoring payment health, conversion analysts, and operations teams looking for quick visual insights into their payment pipeline.Native 3DS for mobile
A major advancement in mobile payment capabilities has been introduced: native 3D Secure (3DS) support for Mobile SDKs, powered by an enhanced Checkout Sessions backend.What’s new?
This release represents a coordinated effort across frontend and backend teams to modernize the 3DS experience:- Native Mobile 3DS Integration: A native 3DS SDK has been integrated into native iOS and Android SDKs, allowing merchants to handle the 3DS challenge entirely within their native app UI, eliminating jarring web-view redirects.
- Checkout Sessions 3DS Extension: The Checkout Sessions API has been extended to support 3DS authentication independently of a transaction, with new internal endpoints providing the necessary data to kick off the 3DS flow directly on the client side.
- 3DS at Vaulting: Merchants can now perform 3DS authentication at the time of vaulting a card, ensuring payment methods are authenticated and “transaction-ready” before a buyer even reaches the final checkout step.
Why it matters
Previously, 3DS on mobile relied on a “redirect-to-web” flow where users were forced into a web-view experience to complete their bank’s challenge. This created friction, inconsistent branding, and a disjointed user journey.By moving to a native 3DS flow, merchants can now provide a premium, high-conversion experience:- Total UI Control: Merchants can maintain their app’s theme and look-and-feel throughout the entire payment process.
- Seamless Transitions: No more switching between native code and web views; the entire challenge happens in-app.
- Reduced Friction: Authenticating cards during vaulting simplifies the final checkout, as the 3DS requirement is handled upfront.
How it works
The process is now a unified client-server handshake:- Store: The mobile app stores card data securely in a Checkout Session.
- Authenticate: The app calls the new Checkout Sessions 3DS endpoint to retrieve the data needed for the native challenge.
- Challenge: The Native Mobile SDK uses the native 3DS integration to handle any challenge with the buyer’s bank.
- Finalize: The resulting 3DS data is stored back in the Checkout Session, which can then be used to create a successful, authenticated transaction server-side.
Custom 3DS authentication amounts
The ability for merchants to specify a 3D Secure (3DS) authentication amount that is different from the actual transaction authorization amount has been introduced.What’s new?
- Decoupled Authentication Amounts: Merchants can now trigger a 3DS challenge for a total amount that exceeds the amount being authorized in the immediate transaction.
- New API Syntax: A new field,
three_d_secure.amount, has been added to the/transactionsrequest, allowing merchants to set the desired authentication value. The API returns the same field to confirm the amount used for the 3DS handshake. - Validation Guards: To ensure processing integrity, the system returns a client-side validation error (HTTP 4xx, for example
422 Unprocessable Entity) if a merchant attempts to authenticate for an amount lower than the transaction amount.
Why it matters
This feature supports complex scenarios such as travel bookings where a customer’s total cart comprises multiple services—airfare, insurance, and airport transfers—that may need to be authorized separately against different merchant accounts (merchant IDs).Previously, merchants were forced to authenticate for the exact amount of the first transaction, which could lead to friction or re-authentication requirements for subsequent charges in the same session.With this update, merchants can authenticate the customer for the full cart total in one go. The resulting 3DS payload can then be applied to the first authorization and safely reused for subsequent, smaller authorizations without requiring the customer to complete another challenge.How it works
When a merchant creates a transaction, they can include thethree_d_secure.amount object:- Authentication: Gr4vy passes this custom amount to the 3DS provider/directory server.
- Authorization: The payment processor receives only the standard
amountdefined for that specific transaction. - Reuse: The 3DS data returned in the response (CAVV, ECI, etc.) remains valid for the higher authenticated amount, allowing the merchant to pass this data to other providers or ancillary services via vault forwarding.
Inbound webhooks visibility
A new feature provides merchants with complete visibility into asynchronous updates received from external systems by surfacing inbound webhooks as distinct events within the Dashboard.What’s new?
- Webhook Event Logs: Every incoming webhook received from a Payment Service Provider (PSP) or external system is now surfaced as a distinct transaction event on the transaction timeline.
- Payload Inspection: Merchants can inspect the raw headers and body of the inbound webhook directly from the Dashboard.
- Intelligent Transaction Linking: The system automatically identifies and links incoming callbacks to the correct transaction. To maintain a clean audit trail, events are only created when a definitive match to an existing transaction is found.
Why it matters
Previously, asynchronous interactions—such as a PSP notifying Gr4vy of a status change—were processed in the background without being explicitly logged in the transaction view. This “visibility gap” made it difficult for merchants to verify if a callback was actually received or to diagnose why a transaction state hadn’t updated as expected.By surfacing these inbound webhooks, merchants gain:- Self-Service Debugging: Teams can now verify webhook delivery and inspect payloads directly, without reaching out to support or checking internal logs.
- Full Audit Trail: Every transaction lifecycle is now fully transparent, covering both the requests Gr4vy sends out and the updates received back.
- Faster Issue Resolution: Technical teams can quickly identify malformed payloads or mismatched references that might prevent a transaction from updating correctly.
How it works
When an external provider sends a notification to a Gr4vy webhook listener:- Ingestion: Gr4vy processes the incoming request and attempts to resolve it to a specific Transaction ID.
- Event Creation: If a match is found, a new transaction event is added to the Transaction Detail view.
- Review: In the Events section of the Dashboard, you can click the event to view the full details of the webhook, including the exact data received from the provider.
Wero via Nuvei
Support for Wero, a new European digital wallet and instant payment solution, has been added via integration with Nuvei. This addition allows merchants to offer a unified, bank-backed payment method across key European markets.What is Wero?
Wero is a digital wallet and instant payment scheme developed by the European Payments Initiative (EPI), a consortium of major European banks and payment service providers.- The Unified Solution: Wero is designed to be the preferred, unified European alternative to non-European providers like Visa, Mastercard, and PayPal.
- Bank-Backed: It is heavily promoted by major banks across Europe as a secure, instant, and frictionless way to handle person-to-person (P2P), online shopping, and physical store payments.
- Instant Payments: Leveraging the SEPA Instant Credit Transfer scheme, Wero ensures that funds are transferred in real-time between bank accounts.
Why it matters
For merchants, Wero offers a unique competitive advantage by tapping into a payment method that European consumers are being actively encouraged to use by their own banks. It reduces reliance on international card schemes while providing a high-speed, secure checkout experience.European roll-out timeline
Wero is being rolled out in phases across the European Union:- Live Now (Late 2024 - Early 2025): Already operational in Belgium, Germany, and France.
- Upcoming (2026): Scheduled to go live in the Netherlands and Luxembourg.
- Future Outlook: Wero aims to become the “go-to” digital wallet for all instant payments across Europe, expanding its footprint as more banks join the initiative.