Skip to main content
POST
/
get-card-token
Retrieve Card Token Data
curl --request POST \
  --url https://api.nayax.com/sdk/get-card-token \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "basicInfo": {
    "merchantRequestId": "REQ_GETTOKEN_001"
  },
  "machineInfo": {
    "machineId": "0434334921100366"
  },
  "cardHolderInfo": {
    "cardHolderUniqId": "unique_customer_id_123"
  },
  "tokenInfo": {
    "nayaxTokenId": "NAYAXTOK12345"
  }
}
'
{
  "status": {
    "verdict": "Approved",
    "code": 0,
    "statusMessage": "Card token data retrieved successfully."
  },
  "tokenInfo": {
    "nayaxTokenId": "NAYAXTOK12345",
    "cardBin": "411111",
    "cardFinalDigits": "1111",
    "expiryDate": "12/2025",
    "brand": "VISA",
    "tokenStatus": 0,
    "actorId": 116383
  }
}
Retrieves essential data for a given card token, including the last four digits, expiration date, card brand, and token status.
Integration URLWhen performing your integration to the API use the stable URL, such as:
  • https://stable-sdk-api.nayax.com/get-card-token

Authorizations

​
Authorization
string
header
required

JWT RSA token required for authentication. The token should be included in the Authorization header as Bearer <token>. Nayax will issue tokens to the VAS, signed by a private key, and decrypt them using a public key.

Body

application/json

Request to get details for a specific card token.

Request body for token-related operations (get or delete).

​
basicInfo
object

Basic transaction details, including merchant request ID.

​
machineInfo
object

Information about the machine/terminal.

​
validationKey
string | null

Validation key from the authentication flow.

Example:

"AUTH_KEY_FROM_VALIDATE"

​
cardHolderInfo
object

Cardholder details, specifically cardHolderUniqId.

​
tokenInfo
object

Token information, specifically nayaxTokenId.

Response

Success

Response body for token-related operations.

​
status
object

Operation status.

​
tokenInfo
object

Details of the requested token.