Network Tokenize a Card

const response = await fetch('https://service.pcibooking.net/api/networkToken?loc=IE', {
  method: 'POST',
  headers: {
    'Authorization': 'APIKEY your-api-key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    Card: {
      Number: '5555555555554444',
      ExpirationYear: 2028,
      ExpirationMonth: 12,
      SecurityCode: '123'
    },
    TokenizationRequest: {
      ConsumerLanguage: 'en',
      CardHolder: {
        FirstName: 'John',
        LastName: 'Doe',
        Email: 'john.doe@example.com',
        ClientIPAddress: '203.0.113.42',
        CountryCode: 'US',
        Address1: '123 Main St',
        City: 'New York',
        StateProvince: 'NY',
        PostCode: '10001'
      },
      DeviceScore: 5,
      AccountScore: 5
    }
  })
});

const data = await response.json();
console.log(data);

import requests

response = requests.post(
    'https://service.pcibooking.net/api/networkToken',
    headers={
        'Authorization': 'APIKEY your-api-key',
        'Content-Type': 'application/json'
    },
    params={
        'loc': 'IE'
    },
    json={
        'Card': {
            'Number': '5555555555554444',
            'ExpirationYear': 2028,
            'ExpirationMonth': 12,
            'SecurityCode': '123'
        },
        'TokenizationRequest': {
            'ConsumerLanguage': 'en',
            'CardHolder': {
                'FirstName': 'John',
                'LastName': 'Doe',
                'Email': 'john.doe@example.com',
                'ClientIPAddress': '203.0.113.42',
                'CountryCode': 'US',
                'Address1': '123 Main St',
                'City': 'New York',
                'StateProvince': 'NY',
                'PostCode': '10001'
            },
            'DeviceScore': 5,
            'AccountScore': 5
        }
    }
)

print(response.json())

{
    "ResultCode": "Success",
    "Brand": "MasterCard",
    "TokenId": "5204730012003478",
    "TokenizedCard": {
        "Number": "520473******3478",
        "ExpirationMonth": 12,
        "ExpirationYear": 2028
    }
}

{
    "code": -125,
    "message": "Bad input data",
    "moreInfo": "...",
    "errorList": null
}

Empty response body.
Authentication failed: the API key, session token or access token is missing or was not accepted.
See "Authentication and Permission Failures" on the Error Handling page.

POST

api

networkToken

const response = await fetch('https://service.pcibooking.net/api/networkToken?loc=IE', {
  method: 'POST',
  headers: {
    'Authorization': 'APIKEY your-api-key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    Card: {
      Number: '5555555555554444',
      ExpirationYear: 2028,
      ExpirationMonth: 12,
      SecurityCode: '123'
    },
    TokenizationRequest: {
      ConsumerLanguage: 'en',
      CardHolder: {
        FirstName: 'John',
        LastName: 'Doe',
        Email: 'john.doe@example.com',
        ClientIPAddress: '203.0.113.42',
        CountryCode: 'US',
        Address1: '123 Main St',
        City: 'New York',
        StateProvince: 'NY',
        PostCode: '10001'
      },
      DeviceScore: 5,
      AccountScore: 5
    }
  })
});

const data = await response.json();
console.log(data);

import requests

response = requests.post(
    'https://service.pcibooking.net/api/networkToken',
    headers={
        'Authorization': 'APIKEY your-api-key',
        'Content-Type': 'application/json'
    },
    params={
        'loc': 'IE'
    },
    json={
        'Card': {
            'Number': '5555555555554444',
            'ExpirationYear': 2028,
            'ExpirationMonth': 12,
            'SecurityCode': '123'
        },
        'TokenizationRequest': {
            'ConsumerLanguage': 'en',
            'CardHolder': {
                'FirstName': 'John',
                'LastName': 'Doe',
                'Email': 'john.doe@example.com',
                'ClientIPAddress': '203.0.113.42',
                'CountryCode': 'US',
                'Address1': '123 Main St',
                'City': 'New York',
                'StateProvince': 'NY',
                'PostCode': '10001'
            },
            'DeviceScore': 5,
            'AccountScore': 5
        }
    }
)

print(response.json())

{
    "ResultCode": "Success",
    "Brand": "MasterCard",
    "TokenId": "5204730012003478",
    "TokenizedCard": {
        "Number": "520473******3478",
        "ExpirationMonth": 12,
        "ExpirationYear": 2028
    }
}

{
    "code": -125,
    "message": "Bad input data",
    "moreInfo": "...",
    "errorList": null
}

Empty response body.
Authentication failed: the API key, session token or access token is missing or was not accepted.
See "Authentication and Permission Failures" on the Error Handling page.

Network Tokenization Guide

Create and manage network tokens for stored cards

Submits raw card details to the card network (Mastercard or American Express) for network tokenization. On success, the resulting network token is stored as a PCI Booking token and the token URI is returned in the Location header.

Network tokenization replaces the real card number with a network-issued token. PCI Booking applies the token updates it receives from the network.

Error Responses

Code	HTTP Status	Condition
none	`401`	API key is missing or invalid. The response body is empty.
`-125`	`400`	Request body validation failed (missing required fields, invalid card number, etc.).
`-150`	`500`	Network tokenization failed (card cannot be network-tokenized, or the network returned an error).

Parameter Constraints

Card.Number: Valid Mastercard or American Express card number.
Card.ExpirationMonth: Range 1-12.
Card.SecurityCode: 3-4 digits (regex ^\d{3,4}$).
TokenizationRequest.ConsumerLanguage: Exactly 2 characters, ISO 639-1 language code. Defaults to en.
TokenizationRequest.CardHolder.CountryCode: Exactly 2 uppercase letters (ISO 3166-1 alpha-2).
TokenizationRequest.DeviceScore: Range 1-5, defaults to 5.
TokenizationRequest.AccountScore: Range 1-5, defaults to 5.
TokenizationRequest.DeviceLocationLat: Range -90 to 90.
TokenizationRequest.DeviceLocationLon: Range -180 to 180.

Parameters

Authentication

API key only. This endpoint does not accept access tokens or session tokens.

string

required

Your API key prefixed with APIKEY. Example: APIKEY your-api-key. The x-pcibooking-api-key header is also accepted. See the Authentication guide.

Query String

string

The region where the new PCI Booking token is stored. One of: US, IN, AU, JP, CA, IE, GB, BR. If omitted, your account’s default region is used, or Ireland if your account has no default. See Card Storage Regions.

Request Body

object

required

The card details to network-tokenize.

Show Properties

string

required

The full card number.

integer

required

Four-digit expiration year (e.g. 2028).

integer

required

Expiration month (1-12).

string

The card CVV (3-4 digits).

object

required

Network tokenization parameters including cardholder and device information.

Show Properties

string

default:"en"

ISO 639-1 language code (exactly 2 characters).

object

Cardholder details required by the card network.

Show Properties

string

required

Cardholder first name.

string

required

Cardholder last name.

string

Cardholder email address.

string

Cardholder phone number.

string

required

Cardholder’s IP address.

string

required

ISO 3166-1 alpha-2 country code (e.g. US, GB).

string

Billing address line 1.

string

Billing city.

string

Billing state or province.

string

Billing postal code.

integer

default:"5"

Device trust score (1-5). Higher values indicate higher trust.

integer

default:"5"

Account trust score (1-5). Higher values indicate higher trust.

number

Device latitude (-90 to 90).

number

Device longitude (-180 to 180).

string

Device IP address (if different from cardholder IP).

string

Source of the card data (network-specific enum).

const response = await fetch('https://service.pcibooking.net/api/networkToken?loc=IE', {
  method: 'POST',
  headers: {
    'Authorization': 'APIKEY your-api-key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    Card: {
      Number: '5555555555554444',
      ExpirationYear: 2028,
      ExpirationMonth: 12,
      SecurityCode: '123'
    },
    TokenizationRequest: {
      ConsumerLanguage: 'en',
      CardHolder: {
        FirstName: 'John',
        LastName: 'Doe',
        Email: 'john.doe@example.com',
        ClientIPAddress: '203.0.113.42',
        CountryCode: 'US',
        Address1: '123 Main St',
        City: 'New York',
        StateProvince: 'NY',
        PostCode: '10001'
      },
      DeviceScore: 5,
      AccountScore: 5
    }
  })
});

const data = await response.json();
console.log(data);

import requests

response = requests.post(
    'https://service.pcibooking.net/api/networkToken',
    headers={
        'Authorization': 'APIKEY your-api-key',
        'Content-Type': 'application/json'
    },
    params={
        'loc': 'IE'
    },
    json={
        'Card': {
            'Number': '5555555555554444',
            'ExpirationYear': 2028,
            'ExpirationMonth': 12,
            'SecurityCode': '123'
        },
        'TokenizationRequest': {
            'ConsumerLanguage': 'en',
            'CardHolder': {
                'FirstName': 'John',
                'LastName': 'Doe',
                'Email': 'john.doe@example.com',
                'ClientIPAddress': '203.0.113.42',
                'CountryCode': 'US',
                'Address1': '123 Main St',
                'City': 'New York',
                'StateProvince': 'NY',
                'PostCode': '10001'
            },
            'DeviceScore': 5,
            'AccountScore': 5
        }
    }
)

print(response.json())

Response

201 - Network token created. The Location header contains the PCI Booking token URI for the network-tokenized card.

{
    "ResultCode": "Success",
    "Brand": "MasterCard",
    "TokenId": "5204730012003478",
    "TokenizedCard": {
        "Number": "520473******3478",
        "ExpirationMonth": 12,
        "ExpirationYear": 2028
    }
}

{
    "code": -125,
    "message": "Bad input data",
    "moreInfo": "...",
    "errorList": null
}

Empty response body.
Authentication failed: the API key, session token or access token is missing or was not accepted.
See "Authentication and Permission Failures" on the Error Handling page.

Start Here

Authentication & General

Capture Cards

Manage Tokens

Use Tokens

Additional Functions

Payments Library

Network Tokenize a Card

Network Tokenization Guide

Error Responses

Parameter Constraints

Parameters

Authentication

Query String

Request Body

Response

Network Tokenization Guide

​Error Responses

​Parameter Constraints

​Parameters

​Authentication

​Query String

​Request Body

​Response

Error Responses

Parameter Constraints

Parameters

Authentication

Query String

Request Body

Response