---
title: "Tokenize the card"
method: POST
path: "/{CardRegistrationUrl}"
tags: ["cardRegistrations"]
---

# Tokenize the card

`POST /{CardRegistrationUrl}`

Send card details to a PCI-DSS-compliant tokenization server without reaching Mangopay's servers.

The URL to use for this endpoint is returned in the `CardRegistrationURL` parameter on the [POST Create a Card Registration](/api-reference/card-registrations/create-card-registration) endpoint.

The request must be made using the “application/x-www-form-urlencoded” content type.
<Note icon="fa-regular fa-circle-info">
**Note – Do not hardcode the URL**

The `CardRegistrationURL` is specific to each payment. You must rely on the returned URL in full (host, path, and queries) and not hardcode any part of it.
</Note>

<Warning icon="fa-regular fa-triangle-exclamation">
**Caution – Card details must never pass via your server**

For security reasons, it is strictly forbidden to send the card details to your own server. You must rely on the dedicated PCI-DSS-compliant tokenization server by using the endpoint provided.
</Warning>

## Path parameters

- `CardRegistrationUrl` string, required

## Headers

- `Authorization` string, required

## Request body

- object
  - `accessKeyRef` string, required — The `AccessKey` returned by the [POST Create a Card Registration](/api-reference/card-registrations/create-card-registration) call.
  - `data` string, required — The `PreregistrationData` returned by the [POST Create a Card Registration](/api-reference/card-registrations/create-card-registration) call.
  - `cardNumber` string, required — The full PAN (card number) of the card.
  - `cardExpirationDate` string, required — The expiration date of the card in MMYY format, for example: `1229`.
  - `cardCvx` string, required — The card verification code (CVC) or card verification value (CVV), typically 3 digits found on the back of the card. AMEX codes are 4 digits and are called card identification (CID) numbers. For cards that don't have a CVC, such as Maestro, use `000` or `999`.

## Response `200`

The string returned by the tokenization server. 

Send this string in full as the `RegistrationData` value on the [PUT Update a Card Registration](/api-reference/card-registrations/update-card-registration) endpoint to create the Card object.

- object

---

[API](https://skmtc.dev/mangopay/apis/api-reference.md) · [All operations](https://skmtc.dev/mangopay/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mangopay/api-reference/revisions/fafbd0c69654/schema)