PCI ata Security Standards - REST API vs SOAP API

Chris Chang

Hello All,

I am trying to figure out if it is possible to pull donation related data from the API. I noticed the REST API documentation lists “to maintain PCI ata security standards for credit card transactions, you must call this method directly from the client's browser and never proxy the call through an external server”. Does this apply to the SOAP API as well?

Mainly I want to create a Matillion job (ETL tool) to automatically run API calls to pull donation data and transform it for analysis. Matillion runs on an Azure VM which I believe counts as an external server in this case. I am not specifically pulling credit card transactions but I believe the data I want is in the same endpoint

Best,

Chris

Erik Leaver

@Chris Chang The donate REST API is designed for gift processing (creating gifts). I don't think there is a REST call to get gifts (other than sustaining which is for applications that change existing sustaining gifts). You should be able to get the gifts with the SOAP API without any issues. You won't be retrieving any card or token information with the SOAP API.

Chris Chang

Hi @Erik Leaver,

Thank you for your advice. We have been able to retrieve the Donation and DonationCampaign endpoints though we are having trouble with the TransactionSummary endpoint. We are receiving a generic error when we try the following queries:

select * from TransactionSummary limit 50
select * from TransactionSummary where date = 2024-08-01 limit 50

We have successfully queried other records so we know the general structure is working but the TransactionSummary endpoint keeps throwing us that error.

Best,

Chris

Erik Leaver

@Chris Chang TransactionSummary is not something that can be queried by itself. It is an embedded type that can be targeted when calling on Constituent

It pulls the data from the constituent record under "Transaction Information"

See:

FirstTransaction

Type TransactionSummary.

LastTransaction

Type TransactionSummary.

A transaction summary of this Constituent's most recent monetary transaction.

LargestTransaction

Type TransactionSummary.

A transaction summary of this Constituent's largest monetary transaction.