> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.mangopay.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.mangopay.com/_mcp/server. # API - October 1, 2026 ## Added ### Extended Preauthorization feature to rename Deposit Preauthorizations Mangopay has re-released its 30-day preauthorization feature under the new name of Extended Preauthorizations. The previous use of the term "deposit" was for convenience only and does not constitute a traditional banking deposit under applicable banking regulations, including the EU Capital Requirements Directive (Directive 2013/36/EU) or the Deposit Guarantee Schemes Directive (Directive 2014/49/EU). Accordingly, these funds are not covered by any statutory deposit protection schemes, and Mangopay does not operate as a licensed banking institution. > **Note** > > **Note – Update to Extended Preauthorization before end of 2027** > > Platforms who have integrated the Deposit Preauthorization for cards or PayPal need to update their integration to the new Extended Preauthorization endpoints before the end of 2027, at which point the legacy endpoints will be decommissioned and no longer function. > > The Extended Preauthorization feature is a like-for-like renaming of the legacy Deposit Preauthorization – the behavior is otherwise unchanged. The full list of new endpoints is: * [POST Create a Card Extended Preauthorization](/api-reference/extended-preauthorizations/create-card-extended-preauthorization) * [POST Create a PayPal Extended Preauthorization](/api-reference/extended-preauthorizations/create-paypal-extended-preauthorization) * [GET View an Extended Preauthorization](/api-reference/extended-preauthorizations/view-extended-preauthorization) * [PUT Cancel an Extended Preauthorization](/api-reference/extended-preauthorizations/cancel-extended-preauthorization) * [GET List Extended Preauthorizations for a Card](/api-reference/extended-preauthorizations/list-extended-preauthorizations-card) * [GET List Extended Preauthorizations for a User](/api-reference/extended-preauthorizations/list-extended-preauthorizations-user) * [GET List Transactions for an Extended Preauthorization](/api-reference/transactions/list-transactions-extended-preauthorization) * [POST Create an Extended Preauthorized PayIn](/api-reference/extended-preauthorizations/create-extended-preauthorized-payin) Eight new [webhook event types](/webhooks/event-types#extended-preauthorizations) are available, mirroring the deprecated Deposit Preauthorization events: * `EXTENDED_PREAUTHORIZATION_CREATED` * `EXTENDED_PREAUTHORIZATION_FAILED` * `EXTENDED_PREAUTHORIZATION_PAYMENT_WAITING` * `EXTENDED_PREAUTHORIZATION_PAYMENT_VALIDATED` * `EXTENDED_PREAUTHORIZATION_PAYMENT_FAILED` * `EXTENDED_PREAUTHORIZATION_PAYMENT_CANCEL_REQUESTED` * `EXTENDED_PREAUTHORIZATION_PAYMENT_CANCELED` * `EXTENDED_PREAUTHORIZATION_PAYMENT_EXPIRED` The pay-in object captured against an Extended Preauthorization returns the new `ExtendedPreauthorizationId`, which your platform must rely on for the new feature. Regardless of which endpoint was used to capture the preauthorized funds, the pay-in object returns both the `ExtendedPreauthorizationId` and the now-deprecated `DepositId` containing the same unique identifier. The prefix of the unique identifier allows you to determine the endpoint used to create the preauthorization: * `ext_auth_wt_` – [POST Create a Card Extended Preauthorization](/api-reference/extended-preauthorizations/create-card-extended-preauthorization) or [POST Create a PayPal Extended Preauthorization](/api-reference/extended-preauthorizations/create-paypal-extended-preauthorization) * `deposit_wt_` – [POST Create a Card Deposit Preauthorization](/api-reference/deposit-preauthorizations/create-card-deposit-preauthorization) or [POST Create a PayPal Deposit Preauthorization](/api-reference/deposit-preauthorizations/create-paypal-deposit-preauthorization) ## Changed ### Deposit Preauthorization feature deprecated The Deposit Preauthorization endpoints and webhook events are deprecated in favor of their Extended Preauthorization equivalents. **Warning – Update to Extended Preauthorization before end of 2027** Platforms who have integrated the Deposit Preauthorization for cards or PayPal need to update their integration to the new [Extended Preauthorization](#extended-preauthorization-feature-to-rename-deposit-preauthorizations) endpoints before the end of 2027, at which point the legacy endpoints will be decommissioned and no longer function. The [Extended Preauthorization](#extended-preauthorization-feature-to-rename-deposit-preauthorizations) feature is a like-for-like renaming of the legacy Deposit Preauthorization – the behavior is otherwise unchanged. * [POST Create a Card Deposit Preauthorization](/api-reference/deposit-preauthorizations/create-card-deposit-preauthorization) * [POST Create a PayPal Deposit Preauthorization](/api-reference/deposit-preauthorizations/create-paypal-deposit-preauthorization) * [GET View a Deposit Preauthorization](/api-reference/deposit-preauthorizations/view-deposit-preauthorization) * [PUT Cancel a Deposit Preauthorization](/api-reference/deposit-preauthorizations/cancel-deposit-preauthorization) * [GET List Deposit Preauthorizations for a Card](/api-reference/deposit-preauthorizations/list-deposit-preauthorizations-card) * [GET List Deposit Preauthorizations for a User](/api-reference/deposit-preauthorizations/list-deposit-preauthorizations-user) * [GET List Transactions for a Deposit Preauthorization](/api-reference/transactions/list-transactions-deposit-preauthorization) * [POST Create a Deposit Preauthorized PayIn](/api-reference/deposit-preauthorizations/create-deposit-preauthorized-payin) The following [webhook event types](/webhooks/event-types#deposit-preauthorizations-deprecated) are also deprecated: * `DEPOSIT_PREAUTHORIZATION_CREATED` * `DEPOSIT_PREAUTHORIZATION_FAILED` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_WAITING` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_VALIDATED` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_FAILED` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_CANCEL_REQUESTED` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_CANCELED` * `DEPOSIT_PREAUTHORIZATION_PAYMENT_EXPIRED` In the pay-in object captured against a Deposit Preauthorization, the `DepositId` is deprecated in favor of the new `ExtendedPreauthorizationId`, which contains the same unique value (see above).