--- title: New trusted vault origin signal in Payments Apps API description: Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field for credit card payment and verification requests. Payment apps can use it... canonical: https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: New trusted vault origin signal in Payments Apps API | daily.dev og:description: Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field for credit card payment and verification requests. Payment apps can use it... og:url: https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt og:image: https://api.daily.dev/og/posts/4zbV12BTT.png og:image:alt: New trusted vault origin signal in Payments Apps API og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # New trusted vault origin signal in Payments Apps API **[Shopify Developer changelog](https://daily.dev/sources/shopifychangelog)** · 2 min read · 0 upvotes · 0 comments ## Summary Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field for credit card payment and verification requests. Payment apps can use it to avoid rejecting a payment or verification for missing CVV alone, though a CVV may still be present. The field appears in both encrypted card and verification payloads, outside the encrypted details. It requires API version 2027-01 or later and explicit Shopify enablement; changing the API version alone does not activate it. No production migration is required yet, but developers should test true, false, and absent values, with and without CVV, and repeat the cases for verification requests if applicable. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I handle missing CVV for credit card payments in Shopify's Payments Apps API version 2027-01? Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field that signals a card came from a vault Shopify trusts. When true, payment apps should not reject the payment or verification for missing CVV alone, though a CVV may still be present. When false or absent, existing CVV rules apply. Fraud checks and 3-D Secure authentication should continue regardless. _Developers tracking Shopify payment API changes can follow release details like this on daily.dev._ ### Do I need to enable or change my Shopify app's API version to receive the trusted vault origin field? Yes, the extension must use API version 2027-01 or later, but that alone is not enough. Shopify must separately enable the field for the app; changing the API version does not activate it. Shopify omits the field on earlier API versions, when it hasn't enabled the field for the app, or when it has no value to send. _Teams planning Shopify integration upgrades can keep up with API versioning rules on daily.dev._ ## Similar posts on daily.dev - [Card deposit endpoint now requires mTLS certificate](https://daily.dev/posts/card-deposit-endpoint-now-requires-mtls-certificate-qpg2m8gwf) · Shopify Developer changelog · 0 upvotes · 0 comments - [Venmo and PayPal are now treated as separate payment methods](https://daily.dev/posts/venmo-and-paypal-are-now-treated-as-separate-payment-methods-yxckhgwx7) · Shopify Developer changelog · 0 upvotes · 0 comments - [The latest updates to Google Pay](https://daily.dev/posts/the-latest-updates-to-google-pay-kr4pn3lrp) · Google Developers · 0 upvotes · 0 comments - [How agents, digital wallets, and trust are rewriting checkout](https://daily.dev/posts/how-agents-digital-wallets-and-trust-are-rewriting-checkout-gvwrzm282) · Stripe · 1 upvotes · 0 comments --- Tags: [#architecture](https://daily.dev/tags/architecture), [#shopify](https://daily.dev/tags/shopify), [#fraud-detection](https://daily.dev/tags/fraud-detection), [#payment-processing](https://daily.dev/tags/payment-processing) [View this post on daily.dev](https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"New trusted vault origin signal in Payments Apps API","url":"https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt"},"datePublished":"2026-10-30T16:04:44.160Z","dateModified":"2026-10-30T16:05:08.348Z","description":"Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field for credit card payment and verification requests. Payment apps can use it...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a5b9f0de82c011d79696b4f6b99b7364?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a5b9f0de82c011d79696b4f6b99b7364?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Shopify Developer changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Shopify Developer changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/aefcb5d2c1ca4b45b5d2256b9e2a9cc3","url":"https://daily.dev/sources/shopifychangelog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"architecture,shopify,fraud-detection,payment-processing","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Shopify Developer changelog","item":"https://daily.dev/sources/shopifychangelog"},{"@type":"ListItem","position":3,"name":"New trusted vault origin signal in Payments Apps API"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/new-trusted-vault-origin-signal-in-payments-apps-api-4zbv12btt#faq","mainEntity":[{"@type":"Question","name":"How do I handle missing CVV for credit card payments in Shopify's Payments Apps API version 2027-01?","acceptedAnswer":{"@type":"Answer","text":"Shopify's Payments Apps API 2027-01 release candidate adds an optional Boolean field that signals a card came from a vault Shopify trusts. When true, payment apps should not reject the payment or verification for missing CVV alone, though a CVV may still be present. When false or absent, existing CVV rules apply. Fraud checks and 3-D Secure authentication should continue regardless. Developers tracking Shopify payment API changes can follow release details like this on daily.dev."}},{"@type":"Question","name":"Do I need to enable or change my Shopify app's API version to receive the trusted vault origin field?","acceptedAnswer":{"@type":"Answer","text":"Yes, the extension must use API version 2027-01 or later, but that alone is not enough. Shopify must separately enable the field for the app; changing the API version does not activate it. Shopify omits the field on earlier API versions, when it hasn't enabled the field for the app, or when it has no value to send. Teams planning Shopify integration upgrades can keep up with API versioning rules on daily.dev."}}]} ```