---
title: "Creates payment account by using a PCI proxy credit card token"
method: POST
path: "/booking/v0-nsfw/payment-accounts/by-pci-credit-card-token"
tags: ["PaymentAccount"]
---

# Creates payment account by using a PCI proxy credit card token

`POST /booking/v0-nsfw/payment-accounts/by-pci-credit-card-token`

## Request

- Base URL: `https://api.apaleo.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.apaleo.com/booking/v0-nsfw/payment-accounts/by-pci-credit-card-token`
- Auth: OAuth 2
  - Implicit: `https://identity.apaleo.com/connect/authorize`
  - Scopes: `payment-accounts.manage`, `admin`

<br>You must have this scope: 'payment-accounts.manage'.<br>For fine-grained clients, you must have this permission: 'core.payment_accounts.create'.

## Headers

- `Idempotency-Key` string

## Request body

- CreatePciCreditCardTokenPaymentAccountRequest
  - `target` PaymentAccountTargetModel, required
    - `type` 'Booking' | 'Reservation', required: Payment account target type
    - `id` string, required: Booking or reservation id
  - `propertyId` string, required: The id of the property which configuration (e.g. currency) is used to create payment account. For reservation payment accounts should match the reservation property.
  - `tokenType` 'PciProxy' | 'Payrails', required: The type of the token and the token provider
  - `creditCardToken` string, required: PCI credit card token to be used to authorize the payment account
  - `cvcToken` string, nullable: PCI CVC token to be used to authorize the payment account
  - `payerEmail` string, email, nullable: The payer e-mail address
  - `cardHolder` string, required: The credit card holder name
  - `expiryMonth` string, required: The credit card expiry month
  - `expiryYear` string, required: The credit card expiry year
  - `isVirtual` boolean: Indicates if the payment account is a virtual credit card
  - `retryWithoutCvcOnCvcError` boolean: Retry payment account creation without CVC if cvc error happened. Retry happens only if CvcToken is passed.

## Response `201`

Created

- PaymentAccountCreatedModel
  - `id` string, required: Created payment account id

## Other responses

- `400`: Bad request.
- `401`: You are unauthorized.
- `403`: Forbidden.
- `404`: The Request-URI could not be found.
- `415`: Unsupported media type.
- `422`: Validation errors in the request body or query params.
- `499`: Client closed request.
- `500`: An unexpected error occurred.
- `503`: The server is currently unavailable. Please try later.

---

[API](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work.md) - [All operations](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work/llms.txt) - [OpenAPI document](https://skmtc.dev/apaleo/apis/apaleo-booking-api-not-safe-for-work/revisions/a1b6a2f6b879?raw)