# MerchantNetworkTokenBinding

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

Per-merchant network token provider binding. Persisted as an element of
`Merchant.NetworkTokenBindings`.

## Fields
- `providerName` (string): Which network token provider this entry binds the merchant to, by the provider's registered name. Compared case-insensitively. A null or blank provider is treated as no binding at all. (nullable, max length 64)
- `isEnabled` (boolean): Whether this provider is switched on for this merchant. When `false` or null, the selector does not return this binding even though the row exists. (nullable)
- `credentialSource` ([ProviderCredentialSource](https://devportal.signapay-sbx.winkpg.io/docs/api/models/ProviderCredentialSource.md)): Whose provider account the merchant's tokens live in. Null reads as `Gateway`. (nullable)
  Values:
  - `Gateway`: The gateway's own provider account. The binding stores no credential of its own: the values are filled in at read time from the host-scoped provider settings, and the merchant surfaces never carry them. This is what a null credential source reads as, which is the safe default: a half-completed row cannot accidentally claim to hold the merchant's own contract.
  - `Merchant`: The merchant's own provider account. The binding carries the credentials, with every secret value held as ciphertext and stripped on any read that leaves the server.
- `fieldValues` (array<[NetworkTokenBindingFieldValue](https://devportal.signapay-sbx.winkpg.io/docs/api/models/NetworkTokenBindingFieldValue.md)>): The provider-declared configuration values for this merchant, keyed by the setting names the provider declares. Conditional: When FieldValues is not null. (nullable)
  Fields of each item:
  - `key` (string): The provider setting name this value belongs to, matching a setting field definition the provider's contributor declares. Compared case-insensitively. (nullable)
  - `value` (string): The configured value. Ciphertext at rest whenever `isSecret` is `true`, and `null` on every read that leaves the server. (nullable)
  - `isSecret` (boolean): Whether `value` is credential material, and so held encrypted and stripped on read. (nullable)
  - `isConfigured` (boolean): Whether a secret value is stored, set on reads so an operator can tell a configured secret from an empty one without the value ever being sent. (nullable)
- `providerAccountId` (string): The provider's account or organization id for this merchant, when the provider keys tokens by one. Not a secret. (nullable, max length 128)
- `usageMode` ([NetworkTokenUsageMode](https://devportal.signapay-sbx.winkpg.io/docs/api/models/NetworkTokenUsageMode.md)): How far the merchant uses network tokens. Null reads as `ProvisionOnly`. (nullable)
  Values:
  - `ProvisionOnly`: Provision and maintain network tokens for the merchant's stored cards, but keep charging the card number.
  - `ProvisionAndCharge`: Provision network tokens and charge them in place of the card number where a processor supports it.
- `enabledNetworks` (array<string>): The card networks to provision tokens for, by the names in `NetworkTokenNetworks`. Null reads as Visa and Mastercard. (nullable)

## See also

- [All documentation](https://devportal.signapay-sbx.winkpg.io/llms.txt): the machine-readable index of every public page on this site.