Create an account enrollment for agent-executed commerce

curl -X POST https://apisandboxm.americanexpress.com/payments/digital/v1/agentic-commerce/enrollments \
     -H "Authorization: Bearer <token>" \
     -H "agentId: agentId" \
     -H "trackingId: trackingId" \
     -H "Content-Type: application/json" \
     -d '{
  "account": {
    "cid": "1234",
    "expiryMonth": "12",
    "expiryYear": "2030",
    "panNumber": "122000000000003",
    "type": "CARD_NUMBER"
  },
  "agent": {
    "agentName": "NexusAI",
    "llmPlatform": "OPEN_AI",
    "llmVersion": "gpt-4.1"
  },
  "risk": {
    "account": {
      "accountAndCardNameMatch": "YES",
      "accountRiskScore": "3",
      "actionChannel": "WEB",
      "agentAccountLocale": "en-US",
      "distinctBillingLastNameCount": "2",
      "emailTenure": 5,
      "fpanSource": "USERINPUT",
      "mostRecentAccountPaymentMethodChangeActivity": 24,
      "panTenureOnFile": 25,
      "recentSecurityActivity": "30"
    },
    "device": {
      "browserUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
      "deviceCountry": "US",
      "deviceId": "565266",
      "devicePlatform": "IOS",
      "deviceRiskScore": "4",
      "deviceTenure": 26,
      "ipAddress": "192.168.1.1",
      "location": {
        "latitude": "+025.3191",
        "longitude": "-084.0606"
      },
      "tlsFingerprint": "771,4865-4866-4867-49195-49196-49199-49200,0-11-10-35-16-5-13-18-51,29-23-24,0"
    },
    "metadata": {
      "additionalProperty": "string",
      "ipReputation": "low_risk"
    }
  },
  "termsAndConditions": {
    "acceptanceTs": "2026-03-18T14:32:45Z",
    "version": "v2.1"
  },
  "user": {
    "accountId": "user-12345",
    "billingAddress": {
      "addressLine1": "300 Juniper Lane",
      "addressLine2": "Apt 4B",
      "city": "New York",
      "country": "US",
      "postalCode": "12345",
      "state": "NY"
    },
    "email": "someone@example.com",
    "firstName": "Jane",
    "lastName": "Jones",
    "userEmailHash": "5e884898da28047151d0e56f8dc6292773603d0d6aabbddc9b3e5f5c5a5a5a5a",
    "userPhoneNumberHash": "a3f5c2e9d4b7c1a8f6e2d3c4b5a6978877665544332211ffeeddccbbaa998877"
  }
}'

{
  "accountMetadata": {
    "cardArt": {
      "cardArtUrl": "string",
      "foregroundColor": "string"
    },
    "displayPanNumber": "string",
    "paymentAccountReference": "string",
    "productName": "string"
  },
  "availableChallenges": {
    "0": {
      "issuerSurface": {
        "authenticationToken": "string",
        "url": "string"
      },
      "type": "ISSUER_SURFACE"
    }
  },
  "enrollmentId": "string",
  "enrollmentStatus": "PENDING_STEP_UP",
  "issuer": {
    "issuerContactNumber": "string",
    "issuerLogoUrl": "string",
    "issuerName": "string",
    "issuerTermsUrl": "string"
  },
  "stepUpAuthenticationRequired": "YES",
  "stepUpSessionId": "string"
}

Enrolls an account for agent-executed commerce. This API supports a two-phase enrollment flow when additional verification is required.

The initial call is used to submit enrollment details for validation and risk assessment.
If the response indicates that step-up authentication is required, call the enrollments API again with the issued enrollmentId and step-up verification result to complete enrollment.

Authentication

AuthorizationBearer

OAuth 2.0 client credentials. Exchange your API key and secret for a bearer token, then send it as Authorization: Bearer <token>.

Request

A request to initiate or complete an enrollment. The request payload is JWE-encrypted on the wire.

The initial request used for account validation and risk assessment (before step-up authentication).objectRequired

The initial request used for account validation and risk assessment.

The follow-up request used to complete enrollment after step-up authenticationobjectRequired

The Follow-up request used to complete enrollment after step-up authentication.

Response

Successful response

The response returned when enrollment is pending additional authentication. Includes details required to complete step-up verification.object

The response returned when enrollment is pending additional authentication. Includes details required to complete step-up verification.

The response returned after enrollment is successfully completed following step-up authentication. Includes account details associated with the enrollment.object

The response returned after enrollment is successfully completed following step-up authentication. Includes account details associated with the enrollment.

Errors

400

Bad Request Error

401

Unauthorized Error

404

Not Found Error

422

Unprocessable Entity Error

500

Internal Server Error

Authentication

Headers

Request

Response

Errors