# Simulate step-up send passcode

**POST** `/simulate/issuing/cards/tokens/{card_token_id}/step-up/send-passcode`

Simulate Visa's send passcode callback for a sandbox card token, after retrieving step-up methods. Column fires the
`issuing.card_token.send_passcode` webhook with a simulated one-time passcode and moves the token to
`pending_authentication`.

Pass one of the returned method identifiers as `otp_method_identifier` to choose where the passcode goes. When it is
omitted, an available method is selected automatically.

### Path Parameters

- `card_token_id` `string` _(required)_ — Unique identifier for the card token.

### Body Parameters

- `otp_method_identifier` `string` — Identifier of the step-up method to deliver the passcode to, as returned by the step-up
  retrieve-methods endpoint. When omitted, an available method is selected automatically.

**Request**

```shell
curl 'https://api.column.com/simulate/issuing/cards/tokens/<card_token_id>/step-up/send-passcode' \
  -XPOST \
  -u :<YOUR API KEY> \
  -H 'Content-Type: application/json' \
  -d '{
  "otp_method_identifier": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6"
}'
```

**Response 200**

```json
{
  "otp_method_identifier": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6",
  "otp_method_type": "sms",
  "passcode": "123456"
}
```