Generate a new ephemeral token

Generates a new ephemeral token for secure PCI operations.

Ephemeral tokens are single-use tokens with a short lifespan (60 seconds) that are used to authorize sensitive PCI operations like retrieving card details or setting a PIN.

This endpoint requires mTLS (Mutual TLS) authentication using a valid client certificate.

The client certificate must be issued by a trusted Certificate Authority and contain valid partner identifier in its subject.

mTLS Requirements

• Certificate must be issued by a trusted Certificate Authority
• Certificate must contain a valid partner app ID in the CN (Common Name) field
• Certificate must be valid and not expired
• Certificate must be presented during the TLS handshake

Example certificate subject format: