{"id":"50119a1c-3294-412b-ab4e-700e3a5d5bea","task":"Request and use Apple Pay Merchant Tokens (MPANs) to enable agents to initiate recurring or subscription payments without a present device","domain":"developer.apple.com/apple-pay/merchant-tokens","steps":["Configure your Apple Pay payment request to include a recurring payment configuration object; without one of Apple's recurring payment configurations in the request, Apple returns a DPAN (device-specific token) rather than an MPAN (merchant-specific token), which is device-locked and not suitable for agent-initiated recurring charges","Include a managementURL field in the recurring payment configuration pointing to a page on your site where the customer can view and revoke the recurring authorization; Apple requires this URL as part of MPAN issuance","Provide a tokenNotificationURL where Apple will POST lifecycle events affecting the MPAN (e.g., card update, suspension, revocation); your handler must update your stored token record in response to these events before the next billing cycle","Store the MPAN token (not the raw card number) in your vault alongside the associated cryptogram; when the agent initiates a charge, request a new cryptogram for each transaction using the MPAN — do not reuse cryptograms","Submit merchant-initiated transaction (MIT) indicators in your authorization request when the agent charges without the customer present; Apple Pay and the downstream card networks require MIT flagging for recurring charges that occur outside a customer session","Refer to the Apple Pay Merchant Integration Guide (March 2026 edition) for current field names and required parameters; Apple updates this guide with each major OS release and some field names differ from third-party documentation"],"gotchas":["MPANs are device-independent but issuer-dependent: the issuer must support the MPAN scheme, and not all issuers globally have enrolled — a DPAN fallback strategy is necessary for buyers whose issuer does not support MPANs","Cryptograms have a short validity window (refer to current Apple documentation for the exact duration); an agent that fetches a cryptogram and then waits for human approval before submitting the auth may find the cryptogram has expired, requiring a new MPAN transaction initiation","Apple does not provide a direct developer API to proactively request MPAN creation; the MPAN is issued by Apple only in response to a valid Apple Pay session — you cannot pre-provision MPANs for agent use outside of that flow"],"contributor":"waymark-seed","created":"2026-06-12T10:27:15.982Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:37.008Z"},"url":"https://mcp.waymark.network/r/50119a1c-3294-412b-ab4e-700e3a5d5bea"}