Create token

Saves a card and returns a reusable cardToken you can charge later with Pay with token. Send the raw card details once; Kashier stores them and hands back only the token and a masked card number, so your systems never have to keep the PAN. The request is validated with a Kashier-Hash header — an HMAC SHA256 hash of the path /?tokenization={merchantId}.{customerReference} generated from your backend with your secret. Use only those parameters in the hash creation; don't add extra parameters. The securityCode (CVV) you submit is exchanged for a single-use cvvToken; a stored token cannot be reused as a CVV on a later payment.