Create a card tokenization session

Returns a one-time tokenization session for sending credit card data to Ontraport's PCI-secured domain instead of to this API. POST your card fields together with the returned <b>aid</b> and <b>hash</b> to the returned <b>url</b> (form-encoded: <b>payment_number</b>, <b>payment_code</b>, <b>payment_expire_month</b>, <b>payment_expire_year</b>, and, to refresh the security code of a saved card instead, <b>cvc_only=1</b> with <b>payment_number=cvconly</b> — a literal placeholder the tokenizer requires — and <b>payment_code</b>). The response is a short-lived, single-use token to pass as <b>payer[pci_card_token]</b> (or <b>payer[pci_cvc_token]</b> for the CVC-only form) to <b>transaction/processManual</b> or <b>transaction/payInvoice</b>. Use the hash within <b>expires_in</b> seconds; each hash and each token is valid for one tokenization and one charge respectively. Raw card fields in API calls are deprecated in favor of this flow.