Retrieve tokens

Retrieve a list of tokens.

SecuritySecretApiKey or JWT
Request
query Parameters
limit
integer [ 0 .. 1000 ]

Limits the number of collection items to be returned.

offset
integer >= 0

Specifies the starting point within the collection of items to be returned.

Responses
200

List of tokens retrieved.

Response Headers
Pagination-Total
integer

Total number of items.

Example: 332
Pagination-Limit
integer

Maximum number of items per page.

Example: 100
Pagination-Offset
integer

Specifies the starting point within the collection of resource results. For example, a request with limit=20 retrieves and displays the first 20 results on a page. A following request with limit=20 and offset=20, retrieves the next page of 20 results.

Example: 2
Response Schema: application/json
Array
method
required
string

Payment method of the token.

required
object

Payment card instrument details.

expMonth
required
integer

Expiration month of the payment card.

expYear
required
integer

Expiration year of the payment card.

bin
string <bin>

Bank Identification Number (BIN) of the payment card. This value is the first 6 digits of the payment card number.

last4
string

Last 4 digits of the Primary Account Number (PAN) of the payment card.

brand
string

Brand of payment card.

Enum: "Visa" "MasterCard" "American Express" "Discover" "Maestro" "Solo" "Electron" "JCB" "Voyager" "Diners Club" … 4 more
object

Billing address object. This value is required to perform payments. For payment-card updates, billingAddress can be ignored.

firstName
string or null <= 45 characters ^[\w\s\-\p{L},.']+$

Contact's first name.

lastName
string or null <= 45 characters ^[\w\s\-\p{L},.']+$

Contact's last name.

organization
string or null <= 255 characters ^[\w\s\-\p{L},.'&]+$

Contact's organization.

address
string or null <= 60 characters ^[\w\s\-\/\p{L},.#;:()'&]+$

First line of the contact's street address.

address2
string or null <= 60 characters ^[\w\s\-\/\p{L},.#;:()'&]+$

Second line of the contact's street address.

city
string or null <= 45 characters ^[\w\s\-\p{L},.']+$

Contact's city of residence.

region
string or null <= 45 characters ^[\w\s\-\/\p{L},.#;:()']+$

Contact's region of residence.

country
string or null <= 2 characters ^[A-Z]{2}$

Contact's country of residence in ISO 3166 alpha-2 country code. For examples, see ISO.org.

postalCode
string or null <= 10 characters ^[\w\s\-]+$

Contact's postal code.

Array of objects (ContactPhoneNumbers)

List of phone numbers associated with the contact.

Array of objects (ContactEmails)

List of email addresses associated with the contact.

dob
string or null <date>

Contact's date of birth in ISO-8601 YYYY-MM-DD format.

jobTitle
string or null <= 255 characters ^[\w\s\-\/\p{L},.#;:()']+$

Contact's job title.

hash
string <= 40 characters

Use this value to compare contacts for identical attribute values.

id
string <= 50 characters

ID of the token.

isUsed
boolean
Default: false

Specifies if the token has been used.

object (Risk metadata)

Risk metadata used for 3D Secure and risk scoring.

ipAddress
string or null <ipv4 or ipv6>

Customer's IP address.

fingerprint
string or null <= 50 characters

Customer's device fingerprint. A device fingerprint is a unique token that is used to identify the customer. The device fingerprint is generated based on device attributes, such as: hardware, software, IP address, language, browser, and more.

object or null

HTTP headers.

object or null

Browser data used for 3D Secure and risk scoring.

object or null

Third-party data used for risk scoring.

isProxy
boolean

Specifies if the customer's IP address is related to a proxy.

isVpn
boolean

Specifies if the customer's IP address is related to a VPN.

isTor
boolean

Specifies if the customer's IP address is related to TOR.

isHosting
boolean

Specifies if the customer's IP address is related to hosting.

vpnServiceName
string or null

VPN service name, if available.

isp
string or null

Internet Service Provider (ISP) name, if available.

country
string or null <= 2 characters

Country ISO Alpha-2 code of the specified IP address.

region
string or null

Region of the specified IP address.

city
string or null

City of the specified IP address.

latitude
number <double>

Latitude of the specified IP address.

longitude
number or null <double>

Longitude of the specified IP address.

postalCode
string or null <= 10 characters

Postal code of the specified IP address.

timeZone
string or null

Time zone of the specified IP address.

accuracyRadius
integer or null

Accuracy radius of the specified IP address, in kilometers.

distance
integer or null

Distance between the customer's IP address and the billing address geolocation, in kilometers.

hasMismatchedBillingAddressCountry
boolean

Specifies if the customer's billing address country and geo-IP address are not the same.

hasMismatchedBankCountry
boolean

Specifies if the customer's bank country and geo-IP address are not the same.

hasMismatchedTimeZone
boolean

Specifies if the customer's browser time zone and the IP address associated time zone are not the same.

hasMismatchedHolderName
boolean

Specifies if the customer's billing address name and primary address name are not the same.

hasFakeName
boolean

Specifies if the holder name seems fake.

isHighRiskCountry
boolean

Specifies if the geo-IP country, or the customer's billing country, is considered a high risk country.

paymentInstrumentVelocity
integer

Number of transactions for this payment instrument, based on fingerprint, in the last 24 hours.

declinedPaymentInstrumentVelocity
integer

Number of declined transactions for this payment instrument fingerprint in the last 24 hours.

deviceVelocity
integer

Number of transactions for this device, based on fingerprint, in the last 24 hours.

ipVelocity
integer

Number of transactions for this IP address in the last 24 hours.

emailVelocity
integer

Number of transactions for this email address in the last 24 hours.

billingAddressVelocity
integer

Number of transactions for this billing address in the last 24 hours.

score
integer

Computed risk score based on all factors.

createdTime
string <date-time> (CreatedTime)

Date and time which is set automatically when the resource is created.

updatedTime
string <date-time> (UpdatedTime)

Date and time which updates automatically when the resource is updated.

usageTime
string <date-time>

Date and time when the token is used.

expirationTime
string <date-time>

Date and time when the token expired.

Array of objects (SelfLink)

Related links.

Array
href
string

Link URL.

rel
string

Type of link.

Value: "self"
401

Unauthorized access. Invalid credentials used.

403

Access forbidden.

get/tokens
Request samples
$paymentCardTokens = $client->paymentCardTokens()->search([
    'filter' => 'token:string',
]);
Response samples
application/json
[
  • {
    }
]