# cardholderAuthentication on POST /xml/v1/request.api is deprecated

Authorize.net API deprecated POST /xml/v1/request.api, body parameter cardholderAuthentication without giving a shutdown date yet.

The body parameter cardholderAuthentication on POST /xml/v1/request.api has been deprecated without a shutdown date. The provider states that this field should not be used. Subsequent calls that continue to rely on this parameter will fail.

## What to use instead

Stop sending cardholderAuthentication, including authenticationIndicator and cardholderAuthenticationValue, in transaction requests.

- API: Authorize.net API (api.authorize.net)
- Kind: Endpoint removal
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `POST /xml/v1/request.api`, `body parameter cardholderAuthentication`
- Source: [Announcement](https://developer.authorize.net/api/reference/index.html)
- Verified: October 26, 2026, against Authorize.net API's own pages
- Page: https://www.okapi.bot/providers/authorize-net-api/breaking-changes/cardholderauthentication-on-post-xml-v1-request-api-is-deprecated/

## Authorize.net API's words

> cardholderAuthentication | Important: This field is deprecated and should not be used.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent