Tokenization

Tokenization swaps the card data for a secure token (card_token). You keep the token — never the number — and charge again without the buyer retyping the card.

POST/api/v1/bank/wallet/tokenization/

Tokenizes a card associated with a wallet and merchant.

Request

POST /bank/wallet/tokenization/
Authorization: Bearer <token>
Content-Type: application/json

{
  "wallet_uuid": "00000000-0000-0000-0000-000000000000",
  "merchant_uuid": "9a1e2b3c-4d5f-6789-abcd-ef0123456789",
  "card_holder_name": "JOAO DA SILVA",
  "card_number": "4111111111111111",
  "card_expiry_month": "12",
  "card_expiry_year": "2030",
  "card_cvv": "123"
}

Response

{
  "card_token": "tok_9a1e2b3c4d5f6789",
  "reused": false,
  "card_brand": "visa",
  "card_last4": "1111",
  "card_token_status": "success"
}

Charge with a token

With the token in hand, create a charge without sending the card data — the platform completes the rest with the tokenized data:

Charge with card_token

POST /bank/wallet/charge/
Authorization: Bearer <token>
Content-Type: application/json

{
  "wallet_uuid": "00000000-0000-0000-0000-000000000000",
  "description": "Token charge",
  "installment_value": 49.90,
  "currency": "BRL",
  "type_charge": "credit_card",
  "card_token": "tok_9a1e2b3c4d5f6789",
  "webhook_url": "https://your-store.com/webhook/charge"
}