Skip to main content
POST
cURL
Stores card details and returns a token to use in place of the card on later charges (pass it as card_token). Returns HTTP 200 on v4 and 201 Created on v5; the body is the same. merchant_guid is returned at the top level, outside card. Tokens expire after first use unless attached to a customer.
uuid
The card token.
string
Visa, MasterCard, AmericanExpress, DinersClub, Jcb, Discover, BankCard or Unknown.
string
Middle digits masked.

Authorizations

Authorization
string
header
required

Basic Authorization header using the Bearer scheme.

Body

card[name]
string | null
card[number]
string | null
card[expiry_month]
integer<int32>
card[expiry_year]
integer<int32>
merchant_guid
string | null
card_token
string<uuid> | null
key_id
integer<int32>
card_type
integer<int32> | null

Response

200

OK