---
title: "Create a vault token"
method: POST
path: "/v1/vault/payment_sources"
---

# Create a vault token

`POST /v1/vault/payment_sources`

Create a new vault payment token representing user’s payment information.

## Headers

- `x-user-secret-key` string, required
- `Content-Type` string, required

## Request body

- object
  - `token` string, required — One-time token returned from the PowerBoard widget with all the payment source information
  - `first_name` string — Customer's first name
  - `last_name` string — Customer's last name
  - `email` string — The customer's email address
  - `phone` string — The customer's phone number
  - `address_line1` string — Customer's address line 1
  - `address_line2` string — Customer's address line 2
  - `address_state` string — Customer's address state
  - `address_country` string — Customer's address country
  - `address_city` string — Customer's address city
  - `address_postcode` string — Customer's address postcode
  - `vault_type` 'session' | 'permanent' — The type of vault token you wish to create. Available values: 'permanent' or 'session'
  - `type` string — Type of payment source, i.e. card
  - `card_number` string — The card number
  - `expire_month` string — The card expiration month, i.e. 08
  - `expire_year` string — The card expiration year, i.e. 2025
  - `card_ccv` string — The card ccv number
  - `store_ccv` string — A flag to be able to use a CCV value for the initial transaction

## Response `200`

200

- object
  - `status` integer
  - `error` unknown
  - `resource` object
    - `type` string
    - `data` object
      - `vault_token` string
      - `type` string
      - `company_id` string
      - `card_name` string
      - `card_number_last4` string
      - `card_number_bin` string
      - `card_scheme` string
      - `status` string
      - `expire_month` integer
      - `expire_year` integer
      - `created_at` string
      - `updated_at` string
      - `_source_ip_address` string
      - `vault_ccv_stored` boolean
      - `vault_type` string

## Other responses

- `400` — 400

---

[API](https://skmtc.dev/commbank/apis/powerboard-api.md) · [All operations](https://skmtc.dev/commbank/apis/powerboard-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/commbank/powerboard-api/revisions/2ef3ed32f8c2/schema)