Store Card Tokens for Future Payments

POST

token

curl -X POST https://api.therius.io/v1/token \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "shopper": { "id": "customer-42", "email": "ada@example.com" },
    "tokens": [{
      "card": {
        "cardData": {
          "cardNumber": "4111111111111111",
          "cardholderName": "Ada Lovelace",
          "expiryMonth": "12",
          "expiryYear": "2030",
          "cvv": "123"
        }
      }
    }]
  }'

{
  "merchantCode": "MERCHANT_001",
  "shopper": { "id": "customer-42", "email": "ada@example.com" },
  "tokens": [{
    "id": "vt_abc123xyz",
    "card": {
      "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" }
    },
    "expirationDate": "2030-12"
  }]
}

POST /token lets you store card details as reusable tokens without processing a payment. Use it to pre-vault cards during account setup flows, or to migrate stored cards from another provider. Each token is scoped to your merchant account and stored with BIN data (brand, type, issuer).

To tokenize a card during a payment, add card.cardData.tokenize: true to your payment request instead — see Tokenization concepts.

Each entry in tokens[] must carry a card with either cardData (raw fields — server-side/PCI-compliant environments only) or nonceData (an SDK-generated nonce, for browser flows). A successful request returns 200 OK with the merchant code, the echoed shopper, and one created token object per entry (id prefixed vt_, masked cardData, expirationDate, tokenCreationReference) — same order as the request.

curl -X POST https://api.therius.io/v1/token \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "shopper": { "id": "customer-42", "email": "ada@example.com" },
    "tokens": [{
      "card": {
        "cardData": {
          "cardNumber": "4111111111111111",
          "cardholderName": "Ada Lovelace",
          "expiryMonth": "12",
          "expiryYear": "2030",
          "cvv": "123"
        }
      }
    }]
  }'

{
  "merchantCode": "MERCHANT_001",
  "shopper": { "id": "customer-42", "email": "ada@example.com" },
  "tokens": [{
    "id": "vt_abc123xyz",
    "card": {
      "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" }
    },
    "expirationDate": "2030-12"
  }]
}

Authorizations

Authorization

string

header

required

Your secret API key: Bearer prv_production_xxx (production) or Bearer prv_sandbox_xxx (sandbox).

Body

application/json

merchantCode

string

required

Your merchant account identifier.

tokens

object[]

required

Cards to tokenize. Each entry carries a card instrument (cardData or nonceData) and an optional expirationDate.

shopper

object

Shopper information. Required when tokenizing a card (card.<instrument>.tokenize: true).

Show child attributes

Response

200 - application/json

Tokens created

merchantCode

string

shopper

object

Show child attributes

tokens

object[]

Show child attributes

curl -X POST https://api.therius.io/v1/token \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "shopper": { "id": "customer-42", "email": "ada@example.com" },
    "tokens": [{
      "card": {
        "cardData": {
          "cardNumber": "4111111111111111",
          "cardholderName": "Ada Lovelace",
          "expiryMonth": "12",
          "expiryYear": "2030",
          "cvv": "123"
        }
      }
    }]
  }'

{
  "merchantCode": "MERCHANT_001",
  "shopper": { "id": "customer-42", "email": "ada@example.com" },
  "tokens": [{
    "id": "vt_abc123xyz",
    "card": {
      "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" }
    },
    "expirationDate": "2030-12"
  }]
}

Payments

Tokenization

Subscriptions

Subscription Plans

SDK Session

Store Card Tokens for Future Payments

Authorizations

Body

Response