Get Card Transactions

POST /openapi/v1/transaction/card

Retrieve the list of payment transactions made by card swipe (VISA, NAPAS, etc.) within a specified time range.

Payload before encryption:

{
  "from_date": "2026-01-07 00:00:00",
  "to_date": "2026-01-07 23:59:59",
  "limit": 10,
  "page": 1
}

Field	Type	Required	Description
from_date	string	✅	Start time (YYYY-MM-DD HH:MM:SS)
to_date	string	✅	End time (YYYY-MM-DD HH:MM:SS)
limit	number	✅	Number of records per page
page	number	✅	Page number (starting from 1)

cURL

curl --location '<base_url>/openapi/v1/transaction/card' \
  --header 'Partner-Code: YOUR_PARTNER_CODE' \
  --header 'Content-Type: application/json' \
  --header 'Authorization: Bearer eyJhbGciOiJSUzI1NiIsI…' \
  --data '{
  "data": ENCRYPTED_PAYLOAD
}'

Python

import requests

url = "<base_url>/openapi/v1/transaction/card"

payload = {"data": "ENCRYPTED_PAYLOAD"}
headers = {
    "Partner-Code": "YOUR_PARTNER_CODE",
    "Content-Type": "application/json",
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsI…",
}

response = requests.post(url, headers=headers, json=payload)
print(response.text)

Go

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	url := "<base_url>/openapi/v1/transaction/card"
	body := strings.NewReader(`{"data":"ENCRYPTED_PAYLOAD"}`)

	req, _ := http.NewRequest("POST", url, body)
	req.Header.Set("Partner-Code", "YOUR_PARTNER_CODE")
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer eyJhbGciOiJSUzI1NiIsI…")

	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()

	result, _ := io.ReadAll(resp.Body)
	fmt.Println(string(result))
}

JavaScript

const response = await fetch("<base_url>/openapi/v1/transaction/card", {
  method: "POST",
  headers: {
    "Partner-Code": "YOUR_PARTNER_CODE",
    "Content-Type": "application/json",
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsI…",
  },
  body: JSON.stringify({ data: "ENCRYPTED_PAYLOAD" }),
});

const result = await response.text();
console.log(result);

Request

Headers

Name	Required	Description
Partner-Code	✅	Merchant identifier code (provided by TCONNECT)
Content-Type	✅	application/json
Authorization	✅	Bearer <access_token>

Body

Field	Type	Required	Description
data	string	✅	AES-256-CBC encrypted payload as Hexadecimal

Response

200 — Card transaction list

Field	Type	Description
data	array	List of transactions
data[].order_id	string	Order ID
data[].card_no	string	Card number (masked, e.g. 1234****5678)
data[].request_amount	string	Transaction amount (VND)
data[].card_type	string	Card type (e.g. VISA, NAPAS)
data[].payment_type	string	Transaction type
data[].retrieval_ref_no	string	Transaction reference code
data[].original_transaction_date	string	Transaction date and time
pagination.page	integer	Current page
pagination.limit	integer	Records per page
pagination.total_items	integer	Total number of records
pagination.total_pages	integer	Total number of pages