# Versioning and change log

This log details any breaking and non-breaking API changes we have released for our Hosted Payment Pages (HPP).

Info
Make yourself familiar with our [non-breaking change definition](/access/products/reference/api-principles#breaking-and-non-breaking-changes) to ensure a resilient integration.

## Versioning log

Our HPP API is currently on version 1. We will record any upcoming breaking changes here.

## Change log (non-breaking changes)

#### Allowing MIT setup (14 July 2025)

details
summary
More details
You can now submit ["subscription" payments](/access/products/hosted-payment-pages/openapi) allowing you to setup for future recurring Merchant Initiated Transactions through our [Payments API](/access/products/payments/).

#### Additional functionality (09 June 2025)

details
summary
More details
We have released a number of features:

* `settlement.auto` - Allows you to disable auto settlement following a successful authorization.
* `threeDS.type` - Allows you to "disable" 3DS on a per transaction basis.
* `fraud.type` - Allows you to "disable" FraudSight on a per transaction basis.
* `cancelOn.cvcNotMatched` - Allows you to control skip auto-cancel behavior  for CVC mismatch on a per transaction basis.
* `locale` - Allows you specify supported locales, so that payment pages can load up in the specified language.
* `hostedCustomization` - Additional CSS properties that allow you specify customization.
* `hostedProperties` - Properties that allow you specify functionality.


#### Payment query link in response (04 June 2025)

details
summary
More details
You now receive a payment query `href` in [your response](/access/products/hosted-payment-pages/openapi/other/create#other/create/response&c=200) which allows you to check the status of the payment and follow on with the appropriate next actions.

#### New Payment Page Designer (10 March 2025)

details
summary
More details
We have released a new version of our [Payment Page Designer](/access/products/hosted-payment-pages/customization), making customizations to your checkout pages more intuitive and easier to navigate.

details
summary
2024
#### New downStreamReference in webhook (25 June 2024)

details
summary
More details
You now receive a `downStreamReference` in your payment [webhooks](/access/products/hosted-payment-pages/webhooks).

You can use this reference for reconciliation purposes, as it directly maps to the Payment ID shown in your Worldpay reports.

#### Restructured event tokenCreated (08 May 2024)

details
summary
More details
We have renamed:

* `createdAt` to `eventTimestamp`
* `notificationId` to `eventId`
* `data` to `eventDetails`


From


```
{
  "eventType": "tokenCreated",
  "notificationId": "ff8b7423-6907-4e54-8063-558d26dfa1ed",
  "eventCount": 1,
  "version": "2.0",
  "createdAt": "2024-01-19T20:40:30.037Z",
  "data": {
    "transactionReference": "3368e96a-58a2-4c79-9065-ab697d386732",
    "tokenCreatedAt": "2024-01-19T20:49:30Z",
    "tokenPaymentInstrument": {
      "type": "card/tokenized",
      "href": "https://try.access.worldpay.com/tokens/eyJrIjoxLCJkIjoia0gvT2xpdDV3WnpOZG1GTWpwemtXckVkRHdJSjFNQzR5VkE5NHhYUldzYz0ifQ"
    },
    "tokenId": "9925760692793807595",
    "description": "Token Description",
    "tokenExpiryDateTime": "2028-01-19T20:49:30Z",
    "namespace": "SHOPPER_ID_1234567890",
    "schemeTransactionReference": "000000000000020005060720116005060",
    "paymentInstrument": {
      "type": "card/masked",
      "cardNumber": "4444********1111",
      "cardHolderName": "Sherlock Holmes",
      "cardExpiryDate": {
        "month": 1,
        "year": 2025
      },
      "bin": "444433",
      "brand": "VISA",
      "fundingType": "credit",
      "countryCode": "US",
      "billingAddress": {
        "address1": "221B Baker Street",
          "address2": "Marylebone",
          "address3": "Westminster",
          "postalCode": "NW1 6XE",
          "city": "London",
          "state": "Greater London",
          "countryCode": "GB"
      }
    }
  }
}
```

To


```
{
    "eventType": "tokenCreated",
    "notificationId": "27e63cba-1f98-44d3-946d-afb6aca3d5e5",
    "createdAt": "2024-05-07T18:20:12.111Z",
    "eventTimestamp": "2024-04-23T18:51:28Z",
    "eventId": "124179fe-7490-4128-b4f4-016bc0588b73",
    "eventDetails":
    {
        "transactionReference": "Testing123",
        "tokenCreatedAt": "2024-04-23T18:51:28Z",
        "tokenPaymentInstrument":
        {
            "type": "card/tokenized",
            "href": "https://try.access.worldpay.com/tokens/eyJrIjoxLCJkIjoibHdJNmQxN01QQ096Rm9QZzhBMS9TK3lqV21QdjBEUk9ORkRqMnRMeTMvUT0ifQ"
        },
        "tokenId": "9981080858023992994",
        "description": "Created token without payment on 2024-04-23",
        "tokenExpiryDateTime": "2024-04-30T18:51:27Z",
        "paymentInstrument":
        {
            "type": "card/masked",
            "cardNumber": "4622********0875",
            "cardHolderName": "Sherlock Holmes",
            "cardExpiryDate":
            {
                "month": 1,
                "year": 2025
            },
            "bin": "462294",
            "brand": "VISA",
            "fundingType": "credit",
            "countryCode": "GB",
            "billingAddress": {
                "address1": "221B Baker Street",
                "address2": "Marylebone",
                "address3": "Westminster",
                "postalCode": "NW1 6XE",
                "city": "London",
                "state": "Greater London",
                "countryCode": "GB"
            }
        }
    }
}
```

#### Additional IPs (07 March 2024)

details
summary
More details
We have added additional IPs for outgoing traffic. You must whitelist [all of our IPs](/access/products/hosted-payment-pages/webhooks#network-access) on your Web Application Firewall (WAF) to allow webhooks to be received by 8th April 2024. The new IP addresses are:


```
3.11.50.124
3.11.213.43
3.14.190.43
3.121.172.32
3.125.11.252
3.126.98.120
3.139.153.185
3.139.255.63
13.200.51.10
13.200.56.25
13.232.151.127
34.236.63.10
34.253.172.98
35.170.209.108
35.177.246.6
52.4.68.25
52.51.12.88
108.129.30.203
```

#### Token support (02 January 2024)

details
summary
More details
You can now save your customer's card details for future use by [creating a token](/access/products/hosted-payment-pages/setup-a-payment#sav-a-card).

details
summary
2023
#### New conditional field in request (15 October 2023)

details
summary
More details
You can now submit the `expiry` in a request. This allows you to configure the duration your customer can access the payment link.

An example of when you might use this, is issuing invoices or putting a hold time on an order.