Vault

The Vault API allows you to securely create and manage payment tokens that represent card details.

Use tokens in place of sensitive card information to process transactions, enabling secure and repeat payments without storing raw card data.

Use the generated token with the Transactions API to process payments.

Card tokenization

Xplor Pay tokenizes and secures your customers’ sensitive card data using a randomly generated code and stores the token in a secure vault. This token supports:

Integrating with Xplor Pay tokenization removes Payment Card Industry (PCI) DSSarrow-up-right scope from your software and reduces Payment Card Industry (PCI) Compliancesarrow-up-right scope for merchants.

Types of tokens

Xplor Pay offers the following types of card tokens:

  1. Single-Use card token - Mobile JSON Web Token (mobilejwt)

Use a single-use token (mobilejwt) for one-time transactions. The token becomes invalid after the transaction is processed and can't be used for recurring transactions, refunds, or returns.

For details about using single-use card tokens (mobilejwt), see the JavaScript SDKarrow-up-right documentation.

  1. Multi-Use or Durable card token (token-id or id)

Use a multi-use token (token-id or id) for multiple online or in-person transactions. This token supports card-on-file payments and membership renewals. Durable tokens enable repeated transactions, speed up the checkout process, and reduce cart abandonment.

  1. Reversible or Irreversible card token

Use a reversible token to retrieve customer information, such as the primary account number (PAN). You may need to submit the PAN to a third-party payment handler for fraud recovery. An irreversible token helps you avoid potential liability associated with storing customer information.

See below links for more information:

Last updated

Was this helpful?