---
title: "Tokenization"
method: POST
path: "/tokenize"
tags: ["Payment"]
---

# Tokenization

`POST /tokenize`

## Headers

- `X-Request-ID` string

## Request body

- object
  - `number` string, required — Full card number
  - `expirationYear` string, required — The expiry year of the card
  - `expirationMonth` string, required — The expiry month of the card
  - `cvv` string — The final three digits printed on the back of the card
  - `cardHolder` string — The cardholder full name
  - `zip` string — Postal code

## Response `201`

Created

- object
  - `token` string, uuid — A unique one-time token that stores sensitive payment details
  - `expireAt` integer — Token expiration date. The token is valid for 30 minutes from the moment of its creation

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error

---

[API](https://skmtc.dev/centrobill/apis/centrobill-payment-api.md) · [All operations](https://skmtc.dev/centrobill/apis/centrobill-payment-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/centrobill/centrobill-payment-api/revisions/d0334aeb55ce/schema)
