# Versioning and change log This log details any breaking and non-breaking API changes we have released for our Hosted Payment Pages (HPP). Info Make yourself familiar with our [non-breaking change definition](/products/reference/api-principles#breaking-and-non-breaking-changes) to ensure a resilient integration. ## Versioning log Our HPP API is currently on version 1. We will record any upcoming breaking changes here. ## Change log (non-breaking changes) #### Allowing MIT setup (14 July 2025) details summary More details You can now submit ["subscription" payments](/products/hosted-payment-pages/openapi/) allowing you to setup for future recurring Merchant Initiated Transactions through our [Payments API](/products/payments/). #### Additional functionality (09 June 2025) details summary More details We have released a number of features: * `settlement.auto` - Allows you to disable auto settlement following a successful authorization. * `threeDS.type` - Allows you to "disable" 3DS on a per transaction basis. * `fraud.type` - Allows you to "disable" FraudSight on a per transaction basis. * `cancelOn.cvcNotMatched` - Allows you to control skip auto-cancel behavior for CVC mismatch on a per transaction basis. * `locale` - Allows you specify supported locales, so that payment pages can load up in the specified language. * `hostedCustomization` - Additional CSS properties that allow you specify customization. * `hostedProperties` - Properties that allow you specify functionality. #### Payment query link in response (04 June 2025) details summary More details You now receive a payment query `href` in [your response](/products/hosted-payment-pages/openapi/other/create#other/create/response&c=200) which allows you to check the status of the payment and follow on with the appropriate next actions. #### New Payment Page Designer (10 March 2025) details summary More details We have released a new version of our [Payment Page Designer](/products/hosted-payment-pages/customization), making customizations to your checkout pages more intuitive and easier to navigate. #### New downStreamReference in webhook (25 June 2024) details summary More details You now receive a `downStreamReference` in your payment [webhooks](/products/hosted-payment-pages/webhooks). You can use this reference for reconciliation purposes, as it directly maps to the Payment ID shown in your Worldpay reports. #### Restructured event tokenCreated (08 May 2024) details summary More details We have renamed: * `createdAt` to `eventTimestamp` * `notificationId` to `eventId` * `data` to `eventDetails` From ``` { "eventType": "tokenCreated", "notificationId": "ff8b7423-6907-4e54-8063-558d26dfa1ed", "eventCount": 1, "version": "2.0", "createdAt": "2024-01-19T20:40:30.037Z", "data": { "transactionReference": "3368e96a-58a2-4c79-9065-ab697d386732", "tokenCreatedAt": "2024-01-19T20:49:30Z", "tokenPaymentInstrument": { "type": "card/tokenized", "href": "https://try.access.worldpay-bsh.securedataplatform.com/tokens/eyJrIjoxLCJkIjoia0gvT2xpdDV3WnpOZG1GTWpwemtXckVkRHdJSjFNQzR5VkE5NHhYUldzYz0ifQ" }, "tokenId": "9925760692793807595", "description": "Token Description", "tokenExpiryDateTime": "2028-01-19T20:49:30Z", "namespace": "SHOPPER_ID_1234567890", "schemeTransactionReference": "000000000000020005060720116005060", "paymentInstrument": { "type": "card/masked", "cardNumber": "4444********1111", "cardHolderName": "Sherlock Holmes", "cardExpiryDate": { "month": 1, "year": 2025 }, "bin": "444433", "brand": "VISA", "fundingType": "credit", "countryCode": "US", "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } } } } ``` To ``` { "eventType": "tokenCreated", "notificationId": "27e63cba-1f98-44d3-946d-afb6aca3d5e5", "createdAt": "2024-05-07T18:20:12.111Z", "eventTimestamp": "2024-04-23T18:51:28Z", "eventId": "124179fe-7490-4128-b4f4-016bc0588b73", "eventDetails": { "transactionReference": "Testing123", "tokenCreatedAt": "2024-04-23T18:51:28Z", "tokenPaymentInstrument": { "type": "card/tokenized", "href": "https://try.access.worldpay-bsh.securedataplatform.com/tokens/eyJrIjoxLCJkIjoibHdJNmQxN01QQ096Rm9QZzhBMS9TK3lqV21QdjBEUk9ORkRqMnRMeTMvUT0ifQ" }, "tokenId": "9981080858023992994", "description": "Created token without payment on 2024-04-23", "tokenExpiryDateTime": "2024-04-30T18:51:27Z", "paymentInstrument": { "type": "card/masked", "cardNumber": "4622********0875", "cardHolderName": "Sherlock Holmes", "cardExpiryDate": { "month": 1, "year": 2025 }, "bin": "462294", "brand": "VISA", "fundingType": "credit", "countryCode": "GB", "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } } } } ``` #### Additional IPs (07 March 2024) details summary More details We have added additional IPs for outgoing traffic. You must whitelist [all of our IPs](/products/hosted-payment-pages/webhooks#network-access) on your Web Application Firewall (WAF) to allow webhooks to be received by 8th April 2024. The new IP addresses are: ``` 3.11.50.124 3.11.213.43 3.14.190.43 3.121.172.32 3.125.11.252 3.126.98.120 3.139.153.185 3.139.255.63 13.200.51.10 13.200.56.25 13.232.151.127 34.236.63.10 34.253.172.98 35.170.209.108 35.177.246.6 52.4.68.25 52.51.12.88 108.129.30.203 ``` #### Token support (02 January 2024) details summary More details You can now save your customer's card details for future use by [creating a token](/products/hosted-payment-pages/setup-a-payment#sav-a-card). #### New conditional field in request (15 October 2023) details summary More details You can now submit the `expiry` in a request. This allows you to configure the duration your customer can access the payment link. An example of when you might use this, is issuing invoices or putting a hold time on an order.