Understand Mastercard Digital Enablement Service (MDES) tokenization concepts including provisioning flow and token cryptogram usage

Steps

1. Register as a token requestor with Mastercard and obtain a Token Requestor ID; Mastercard provides sandbox and production onboarding documentation through their developer portal
2. Initiate tokenization by submitting a Tokenize request to MDES with the PAN, expiry, cardholder billing address, and your TRID; MDES performs a risk assessment and may require ID&V
3. On successful provisioning, MDES returns a token (DPAN), token expiry, and a token unique reference (TUR) that can be used to manage the token lifecycle
4. For each transaction, request a token cryptogram (DSRP — Digital Secure Remote Payments cryptogram) from MDES using the token and transaction-specific data (amount, currency, date); include this in the authorization as the UCAF/AAV field
5. Token lifecycle management operations (suspend, resume, delete, get token status) are performed via dedicated MDES API endpoints using the TUR as the identifier
6. MDES sends lifecycle notifications to the token requestor's registered notification URL when token status changes occur (e.g., issuer-initiated suspension)