---
title: "Tokenize credit card"
method: POST
path: "/scripts/tokenization/tokens"
tags: ["Tokenization"]
---

# Tokenize credit card

`POST /scripts/tokenization/tokens`

## Request

- Base URL: `https://api.na.bambora.com/v1`
- URL: `https://api.na.bambora.com/v1/scripts/tokenization/tokens`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `Sub-Merchant-Id`
- TypeScript: <https://skmtc.dev/worldline-solutions/apis/worldline-payment-apis/docs/scripts/tokenization/tokens/post.ts> (a function with typed inputs; its response is checked against the schema)

NOTE that the full URL for this API call is https://api.na.bambora.com/scripts/tokenization/tokens. Turn a credit card into a token using this service. This helps lessen your PCI scope by not passing the credit card information to your server. Instead you turn the card number into a token in the client app, then send the token to the server. When you send the token to Bambora to make a payment, Bambora then looks up the card number from that token and makes the payment. Tokens can also be used to create payment profiles.

## Request body

- TokenRequest
  - `number` string, required: The credit card number
  - `expiry_month` string, required: eg. 02 for February.
  - `expiry_year` string, required: eg. 17 for 2017.
  - `cvd` string, required: Security code on the back of the credit card.

## Response `200`

Token response object. One will always be returned even if the data or card is invalid. The validity of the card is not checked with this API call.

- TokenResponse
  - `token` string, required: The token representing the credit card number that you will send for purchases. You will always receive a token, even if the request data is wrong or the card is invalid.
  - `code` string: Response code for the message. It can be ignored.
  - `version` integer: Message version number. Can be ignored.
  - `message` string: Response message with any hints as to what might have gone wrong, if something went wrong.

---

[API](https://skmtc.dev/worldline-solutions/apis/worldline-payment-apis.md) - [All operations](https://skmtc.dev/worldline-solutions/apis/worldline-payment-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/worldline-solutions/apis/worldline-payment-apis/revisions/d661d9e357a1?raw)