Mastercard ISO 8583 over mTLS TCP

Caution

Status: placeholder — full guide to follow. Scheme-specific Mastercard details are not yet documented.

What is supported today

Mastercard shares the Visa listener’s mTLS trust and framing, but the same runtime limitations apply — and SME has not yet reached parity with SVE:

• Client-initiated authorization over this listener is not available (#538). SMP has no inbound framing loop routing fintech-initiated 0100 / 0200 frames to SME; unsolicited inbound bytes are logged and discarded.
• Mastercard structured REST routes are not available. A request with network: mastercard returns 501 until SME structured support lands. The Visa server-first REST round trip has its own open limitation, described on the Visa transport.
• Mastercard scheme fidelity — MTIs, DE 48 PDS handling, message content — is still being brought to parity with the Visa engine. SME’s SHE cryptographic integration is registration-only today (#539), so PIN and EMV crypto operations are not yet exercised on this path.

See Visa ISO 8583 over mTLS TCP for the full connection and wire contract that both listeners share.

Endpoint

tcp.switchbench.com:11013          # prod
test-tcp.switchbench.com:11013     # test

Port 11013 routes to the Mastercard network engine (SME); the client certificate selects the tenant, as on the Visa listener.

Transport

This listener uses the same mTLS client-certificate trust and 2-byte big-endian length-prefix framing as Visa. See Visa ISO 8583 over mTLS TCP for the full connection and wire contract.

Both directions of trust are identical to Visa: your client certificate chains to the Switchbench client CA root, and you verify SMP’s server certificate against the separate Switchbench server CA root. See Before you begin — Server trust root and Verify the handshake, substituting port 11013.

Mastercard-specific details — MTIs, DE 48 PDS handling, message content — are not yet documented; SME reaches parity with SVE as separate work.

Errors and rejections

The connection-level rejections are the same as on the Visa listener — see Visa — Errors and rejections. The product check is per listener: port 11013 checks the mastercard product, not visa.

Condition	Result
Organization has no active trial or subscription for Mastercard (checked when the connection is established, and re-checked while it is open)	Connection dropped before any frame is read, or closed on the next idle re-check; no frames are delivered until the product is entitled again