---
title: "Provision"
method: POST
path: "/cards/{card_id}/network-tokens"
tags: ["Network Tokens"]
---

# Provision

`POST /cards/{card_id}/network-tokens`

## Request

- Base URL: `https://sandbox.vgsapi.com`
- URL: `https://sandbox.vgsapi.com/cards/{card_id}/network-tokens`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/verygoodsecurity/apis/vgs-card-management-platform-cmp-api/docs/cards/:card_id/network-tokens/post.ts> (a function with typed inputs; its response is checked against the schema)

When Network Tokens are enabled for an account, VGS automatically provisions a token for each card stored. This provisioned token is mapped to the Card ID and kept in sync with the card’s network lifecycle.
As the card is updated or reissued, network token metadata is refreshed, enabling businesses to maintain valid and up-to-date payment credentials with no extra effort. Provisioning Network Tokens offers merchants a future-proof, secure foundation for handling customer payments. The provisioning is skipped if there is an active network token already exists for the card. This provisioning process is applicable regardless of the network token type - Card on File or Ecommerce Network Token.

## Path parameters

- `card_id` string, required

## Response `200`

Card's network token

- NetworkTokenResourceResponse
  - `data` NetworkTokenResource, required
    - `id` string, required: Resource ID
    - `type` 'card_updates' | 'card_update_subscriptions' | 'network_tokens', required
    - `attributes` NetworkTokenAttributes
      - `payment_account_reference` string, required
      - `network_token` string, required
      - `last4` string, required
      - `bin` string, required
      - `exp_month` integer, required
      - `exp_year` integer, required
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
      - `state` string, required
      - `reason_code` string
      - `reason_text` string
    - `meta` object: Information about the card meta, including card art
      - `card_art` CardArt: Card art
        - `background_color` string: Background color of card art
        - `foreground_color` string: Foreground color of card art
        - `label_color` string: Label color of card art
        - `issuer_name` string: Issuer of the card
        - `contact_website` string: Contact website of the card
        - `contact_number` string: Contact phone number of the card
        - `contact_name` string: Contact name of the card
        - `short_description` string: Short description of the card
        - `long_description` string: Long description of the card
        - `assets` CardAsset[]
          - `type` 'CARD_SYMBOL' | 'DIGITAL_CARD_ART' | 'DIGITAL_CARD_ART_BACKGROUND', required: Type of card asset
          - `mime_type` string: MIME type of the file
          - `width` integer: Width of the image in pixel
          - `height` integer: Height of the image in pixel
          - `download_url` string, required: URL for downloading the image
    - `relationships` object: Information about other services or capabilities that are related to this network token.
    - `links` object, nullable

## Other responses

- `201`: Card's network token
- `400`: The request was invalid.
- `401`: No credentials were provided, or the provided credentials were expired.
- `403`: Valid credentials were provided, but they do not permit access to this resource.
- `404`: Resource not found.
- `500`: Internal Server Error
- `503`: Service Unavailable

---

[API](https://skmtc.dev/verygoodsecurity/apis/vgs-card-management-platform-cmp-api.md) - [All operations](https://skmtc.dev/verygoodsecurity/apis/vgs-card-management-platform-cmp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/verygoodsecurity/apis/vgs-card-management-platform-cmp-api/revisions/71471c6a84af?raw)