1. Request a card token

Request a card token that can later be used to charge a customer using the charge endpoint.

Important to consider

If you are using this option to request the token, be sure to comply with all the PCI requirements to handle card data on your servers.

Token expiration

Tokens will expire in 30 minutes and can be used only for a single transaction (even if the transaction was wrong). You will need to request a new token when it expires.

Note

The token delivered by Kushki only encrypts and sends information. If you want to store the card information for future purchases, go to the One-Click & Scheduled Payments section.

3D Secure (3DS) authentication*

Product in beta version in Ecuador 🇪🇨 🔐👨‍💻

We are working on our beta version. Stay tuned for its official release! You can also contact your account manager for more information.

To authenticate a card through 3D Secure, in addition to the information required to generate a token, the fields listed below must be submitted:

Property	Possible Values	Description
authValidation	`url`, `iframe`	Define the desired integration type for 3DS authentication. Use `url` for redirection or `iframe` for embedding.
callbackUrl	`string`	Callback where the 3D Secure authentication response will be sent.

If the transaction triggers a 3D Secure authentication rule on the merchant, in addition to the token, the fields listed below will be returned:

Property	Possible Values	Description
url	`string`	URL to be used for 3D Secure authentication.
secureService	`3dsecure`	Indicates the transaction authentication service.
secureId	`string`	Security ID for the transaction.

Example

{
    "token": "sBkQ7F110000tI1HVq116862fd5Ah3mG",
    "url": "[https://uat-auth.kushkipagos.com?token=sBkQ7F110000tI1HVq116862fd5Ah3mG&merchantId=306cb10581bb4acb9a2bfc77e163c482&bin=NDM0OTAwMzA=&callbackUrl=https://www.kushkipagos.com/callback/&isSandbox=false](https://uat-auth.kushkipagos.com?token=sBkQ7F110000tI1HVq116862fd5Ah3mG&merchantId=306cb10581bb4acb9a2bfc77e163c482&bin=NDM0OTAwMzA=&callbackUrl=https://www.kushkipagos.com/callback/&isSandbox=false)",
    "secureService": "3dsecure",
    "secureId": "1f5584db-0c5b-c729-a19c-6eb0283ca448"
}

curl --location --request POST 'https://api-uat.kushkipagos.com/card/v1/tokens' \ --header 'Public-Merchant-Id: ' \ --header 'Content-Type: application/json' \ --data-raw '{ "card": { "name": "Jhon Doe", "number": "5451951574925480", "expiryMonth": "05", "expiryYear": "25", "cvv": "123" }, "totalAmount": 10, "currency": "USD" }'

3D Secure (3DS) authentication*#

Request

Responses

3D Secure (3DS) authentication*