Authorization Controls
Learn how to start using authorization controls.
An authorization control limits spending by certain users at specific merchants. You can limit spending at a single merchant or a group of merchants, and you can limit spending by a single user, users with a particular card product, or all users.
You can block spending at all merchants by default and then allow it at specific merchants, or you can allow spending at all merchants by default and block it at specific merchants.
Limit where a user can transact to a single merchant or a group of merchants. If multiple authorization controls apply to the same user, the limits from all controls are combined.

Flow

Authorization controls flow
The rules are applied top-down.
post
https://issuing-api.dlocal.com/issuing-authorization/controls
Create authorization control

The Control object

Attributes
Example Object
Property
Description
uuid
Control unique identifier (autogenerated).
name
Authorization control name.
description
Authorization control description.
type_of_control
“ALLOW” or “DENY”.
active
Indicates whether the authorization control is active.
country
Account owner’s country code. ISO 3166-1 alpha-2-code.
account_id
Specify an account_id to apply the authorization control.
card_id
Specify an card_id to apply the authorization control.
mcc
Merchant Category Code, Identifies the type of goods or services provided by the merchant. You can also specify a range like "0001-9999". A comma-separated list of Merchant Category Codes. E.g. ["0123", "2224-2230", "3876"]. Merchant category code list.
mid
MID (Merchant ID). The unique identification number of a merchant. You can also specify a range like "0001-9999". A comma-separated list of merchant identifiers. E.g. ["123456789012345", "000123456789012", "123456789012"].
start_time
Time the control starts (UTC). ISO8601 Datetime with Timezone. Eg 2020-07-12T13:46:28.629Z
finish_time
Time the control finishes (UTC). ISO8601 Datetime with Timezone. Eg 2020-07-12T13:46:28.629Z
{
"uuid": "1",
"name": "patricia in valentine`s day",
"description": "This is a control for Mexican country for glossary category, card id and account id of Patricia in valentine's day, and merchant walmart",
"type_of_control": "ALLOW",
"active": true,
"country": [
"MX"
],
"account_id": [
"ISGA-4-7e8b8ab5e20d48b1888e90bd4065a21a"
],
"card_id": [
"ISGC-4-108t8abqe20d48b1888r90bd4065a21b"
],
"mcc": [
"7"
],
"mid": [
"4"
],
"start_time":2022-14-02T00:00:00Z”,
"finish_finish":2022-15-02T00:00:00Z”
}

Merchant category code list

MCCs.xlsx
27KB
Binary

Example Request

{
"name": "patricia in valentine`s day",
"description": "This is a control for Mexican country for glossary category, card id and account id of Patricia in valentine's day, and merchant walmart",
"type_of_control": "ALLOW",
"active": true,
"country": [
"MX"
],
"account_id": [
"ISGA-4-7e8b8ab5e20d48b1888e90bd4065a21a"
],
"card_id": [
"ISGC-4-108t8abqe20d48b1888r90bd4065a21b"
],
"mcc": [
"7"
],
"mid": [
"4"
],
"start_time":2022-14-02T00:00:00Z”,
"finish_finish":2022-15-02T00:00:00Z”
}
get
https://api.dlocal.com/issuing-authorization/controls
List all the authorization controls
get
https://api.dlocal.com/issuing-authorization/controls/{uuid}
Retrieve a authorization control
put
https://api.dlocal.com/issuing-authorization/controls/{uuid}
Update authorization control
All of the fields will be updated.

Example Request

{
"name": "patricia in valentine`s day",
"description": "this is a control for mexican country for glossary category, card id and account id of Patricia in valentine's day, and merchant walmart",
"type_of_control": "ALLOW",
"active": true,
"country": [
"MX"
],
"account_id": [
"ISGA-4-7e8b8ab5e20d48b1888e90bd4065a21a"
],
"card_id": [
"ISGC-4-108t8abqe20d48b1888r90bd4065a21b"
],
"mcc": [
"7"
],
"mid": [
"4"
],
"start_time":2022-14-02T00:00:00Z”,
"finish_finish":2022-15-02T00:00:00Z”
}
delete
https://api.dlocal.com/issuing-authorization/controls/{uuid}
Delete authorization control
Copy link
On this page
Flow
post
Create authorization control
The Control object
Merchant category code list
Example Request
get
List all the authorization controls
get
Retrieve a authorization control
put
Update authorization control
Example Request
delete
Delete authorization control