Xendit Sandbox — Operator Card-on-File

Standalone TEST harness · Payment Session (SAVE, card_on_file_type=RECURRING) → token → off-session charge. Raw responses shown verbatim.

1 · Create card-link session idle

session_type=SAVE saves the card without charging (no RM 1 hold needed). Use PAY_AND_SAVE + amount to compare.

2 · Link a card on Xendit’s hosted page

Open the hosted page above, enter a Xendit test card, complete linking. Xendit then POSTs payment_session.completed to /webhook (validated via x-callback-token).

3 · Captured token none

Polls /state. The webhook must reach this app (set the webhook URL in the Xendit test dashboard to <this-host>/webhook).

Captured token
Last webhook

4 · Off-session charge idle

Charges the captured token via POST /v3/payment_requests — the P0 question: does the documented token actually charge off-session?