---
title: "Create a Network Token"
method: POST
path: "/payments/network-tokens"
tags: ["Payments", "Network Tokens"]
---

# Create a Network Token

`POST /payments/network-tokens`

## Request

- Base URL: `https://api.evervault.com`
- URL: `https://api.evervault.com/payments/network-tokens`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/evervault/apis/evervault-api/docs/payments/network-tokens/post.ts> (a function with typed inputs; its response is checked against the schema)

Create a Network Token for a given card.

## Request body

- object
  - `card` union, required: The card to tokenize. Either an inline card object or the unique identifier of a Card registered for [Card Account Updates](/api#card-account-updates).
    - object: An inline card object.
      - `number` string, required: The card number. Needs to be an Evervault-encrypted card number or a plaintext card number.
      - `expiry` CardExpiry, required: The card expiry date.
        - `month` string, required: The card expiry month, in MM format (e.g. 12 for December)
        - `year` string, required: The card expiry year, in YY format (e.g. 29 for 2029)
      - `cvc` string: The card security code. Needs to be an Evervault-encrypted CVV or a plaintext CVV.
    - string: The unique identifier of a Card registered for [Card Account Updates](/api#card-account-updates).
  - `merchant` string, required: The unique identifier of the Merchant previously created using the Evervault API. It denotes the Merchant to which the Network Token should be associated with.
  - `externalCustomerReference` string: An optional reference of your choice, such as a correlation ID, that is attached to the request. The reference will be visible in your logs. Must be between 1 and 255 characters.

## Response `201`

Returns a Network Token object.

- NetworkToken
  - `id` string, required: A unique identifier representing a specific Network Token.
  - `number` string, required: The unique number of the Network Token.
  - `expiry` NetworkTokenExpiry, required: The network token expiry date.
    - `month` string, required: The network token expiry month, in MM format (e.g. 12 for December)
    - `year` string, required: The network token expiry year, in YY format (e.g. 29 for 2029)
  - `card` object, required: The details of the underlying encrypted card.
    - `lastFour` string, required: The last four digits of the card number.
    - `expiry` object, required: The expiry details of the card.
      - `month` string: The month of the card's expiry date, in MM format (e.g. 12 for December)
      - `year` string: The year of the card's expiry date, in YY format (e.g. 26 for 2026)
    - `brand` 'visa' | 'mastercard' | 'american-express', required: The card brand associated with the payment card.
  - `tokenRequestorIdentifier` string, required: The identifier of the Token Requestor (TRID) that requested the Network Token.
  - `tokenServiceProvider` 'mdes' | 'vts' | 'aets', required: The Token Service Provider (TSP) that issued the Network Token.
  - `paymentAccountReference` string: The unique identifier of the Payment Account associated with this Network Token.
  - `status` 'active' | 'inactive' | 'blocked' | 'provisioning' | 'suspended' | 'deleted' | 'expired', required: The status of the Network Token. Active means the token is valid and can be used for payments. Inactive means the token exists but is not currently active. Blocked and provisioning are reserved for future use. Suspended means the token is temporarily unusable but may be reactivated by the issuer or transition to deleted. Deleted is a terminal state where the token is permanently removed and a new credential must be obtained. Expired means the token has passed its expiration date and should not be used for transactions.
  - `merchant` string, required: The unique identifier of the Merchant associated with this Network Token.
  - `createdAt` integer, required: The exact time, in epoch milliseconds, when this Network Token was created.
  - `updatedAt` integer: The exact time, in epoch milliseconds, when this Network Token was last updated.

## Other responses

- `400`: The request was invalid or cannot be otherwise served.
- `422`: Unprocessable Entity
- `500`: An error occurred while processing the request.

## Changes

- **2026-11-06** `8d0ca833fa04`: 1 breaking, 4 warning, 25 info
  - the `card` request property type changed from `object` to no type
  - removed the request property `card/cvc`
  - removed the request property `card/expiry`
  - removed the request property `card/number`
  - …26 more
- **2026-04-17** `5e1eb58d42d5`: 5 warning, 3 info
  - added the new `blocked` enum value to the `status` response property for the response status `201`
  - added the new `deleted` enum value to the `status` response property for the response status `201`
  - added the new `expired` enum value to the `status` response property for the response status `201`
  - added the new `provisioning` enum value to the `status` response property for the response status `201`
  - …4 more
- **2025-11-18** `30ea25af4354`: 3 info
  - api tag `Network Tokens` added
  - api tag `Payments` added
  - api tag `payments` removed

[Operation history](https://skmtc.dev/evervault/apis/evervault-api/changes/payments/network-tokens/post.md)

---

[API](https://skmtc.dev/evervault/apis/evervault-api.md) - [All operations](https://skmtc.dev/evervault/apis/evervault-api/llms.txt) - [OpenAPI document](https://skmtc.dev/evervault/apis/evervault-api/revisions/8d0ca833fa04?raw)