---
title: "Check CIT availability for a payment token"
method: POST
path: "/tokenized-payment/v1/tokens/verify-cit"
tags: ["Pre-Auth"]
---

# Check CIT availability for a payment token

`POST /tokenized-payment/v1/tokens/verify-cit`

## Request

- Base URL: `https://integrations-sandbox.shopback.com/demo/merchant`
- URL: `https://integrations-sandbox.shopback.com/demo/merchant/tokenized-payment/v1/tokens/verify-cit`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/shopback/apis/online-payments-api/docs/tokenized-payment/v1/tokens/verify-cit/post.ts> (a function with typed inputs; its response is checked against the schema)

Returns whether the linked customer's default card has a CIT usable for tokenized pre-authorisation.

## Request body

- VerifyCitRequest
  - `paymentToken` string, required: Payment token from POST /token. Resolves the user and their default card.
  - `merchantUserId` string, required: Merchant's opaque identifier for the end user. Used to verify the payment token belongs to this user.

## Response `200`

CIT availability returned.

- VerifyCitResponse
  - `hasCit` boolean, required: Whether the linked customer's default card has a CIT usable for tokenized pre-authorisation.

## Other responses

- `400`: The paymentToken or merchantUserId field is required.
- `401`: Missing or invalid merchant JWT, or the payment token was not found, has been unlinked, or belongs to a different merchant.

## Changes

- **2026-11-03** `a3ac503a275e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/shopback/apis/online-payments-api/changes/tokenized-payment/v1/tokens/verify-cit/post.md)

---

[API](https://skmtc.dev/shopback/apis/online-payments-api.md) - [All operations](https://skmtc.dev/shopback/apis/online-payments-api/llms.txt) - [OpenAPI document](https://skmtc.dev/shopback/apis/online-payments-api/revisions/a3ac503a275e?raw)