Retrieve Token Metadata

const response = await fetch(
  'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
  {
    headers: {
      'Authorization': 'APIKEY your-api-key'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
    headers={'Authorization': 'APIKEY your-api-key'}
)

print(response.json())

{
    "CreatorReference": "myRef",
    "VirtualInfo": null,
    "CreateDate": "2020-05-19T16:51:00",
    "CardType": "Visa",
    "LastDigits": "5005",
    "LeadingDigits": "491891",
    "ExpirationYear": 2020,
    "ExpirationMonth": 7,
    "OwnerID": "",
    "OwnerName": "Juan Dela Cruz",
    "UserID": "myUser",
    "IssueNumber": "2",
    "URI": "https://service.pcibooking.net/api/payments/paycard/eb454e0462d548ddbc6e6c2193b749a9",
    "EndRetentionDate": "2017-07-08T00:00:00",
    "CvvExists": true,
    "AssociatedMerchants": ["userID1", "userID2"],
    "AssociatedProperties": ["hotel1", "hotel2"],
    "ThreeDSecureInfo": {
        "Token": "42c775efa8b04b1d8bf14ef49a9e45e5",
        "ThreeDSSessionID": "uOrDbh0dEimUDmB3Vvn2f5CAM9B1bMQX",
        "Indication": "Authenticated",
        "AuthenticationValue": "AJkBAoEREQAAAAB4hABwcAAAAAA=",
        "Eci": "05",
        "XID": "861433f4-abff-4c40-b2fd-fea208856a33",
        "AcsTransactionId": "e7a46959-9630-413e-ab56-4e399b96244a",
        "Version": "2.1.0",
        "MerchantName": "PCI Booking * Hotelreservation"
    },
    "NetworkTokenScheme": null,
    "NetworkTokenId": null,
    "TokenLocation": null
}

{
    "code": -1003,
    "message": "Not authorized to access this resource",
    "moreInfo": "Bad or missing authorization data, expected APIKEY",
    "errorList": null
}

{
    "code": -160,
    "message": "Uri not found",
    "moreInfo": "Uri to Bank card not found",
    "errorList": null
}

GET

api

payments

paycard

{cardtoken}

meta

const response = await fetch(
  'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
  {
    headers: {
      'Authorization': 'APIKEY your-api-key'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
    headers={'Authorization': 'APIKEY your-api-key'}
)

print(response.json())

{
    "CreatorReference": "myRef",
    "VirtualInfo": null,
    "CreateDate": "2020-05-19T16:51:00",
    "CardType": "Visa",
    "LastDigits": "5005",
    "LeadingDigits": "491891",
    "ExpirationYear": 2020,
    "ExpirationMonth": 7,
    "OwnerID": "",
    "OwnerName": "Juan Dela Cruz",
    "UserID": "myUser",
    "IssueNumber": "2",
    "URI": "https://service.pcibooking.net/api/payments/paycard/eb454e0462d548ddbc6e6c2193b749a9",
    "EndRetentionDate": "2017-07-08T00:00:00",
    "CvvExists": true,
    "AssociatedMerchants": ["userID1", "userID2"],
    "AssociatedProperties": ["hotel1", "hotel2"],
    "ThreeDSecureInfo": {
        "Token": "42c775efa8b04b1d8bf14ef49a9e45e5",
        "ThreeDSSessionID": "uOrDbh0dEimUDmB3Vvn2f5CAM9B1bMQX",
        "Indication": "Authenticated",
        "AuthenticationValue": "AJkBAoEREQAAAAB4hABwcAAAAAA=",
        "Eci": "05",
        "XID": "861433f4-abff-4c40-b2fd-fea208856a33",
        "AcsTransactionId": "e7a46959-9630-413e-ab56-4e399b96244a",
        "Version": "2.1.0",
        "MerchantName": "PCI Booking * Hotelreservation"
    },
    "NetworkTokenScheme": null,
    "NetworkTokenId": null,
    "TokenLocation": null
}

{
    "code": -1003,
    "message": "Not authorized to access this resource",
    "moreInfo": "Bad or missing authorization data, expected APIKEY",
    "errorList": null
}

{
    "code": -160,
    "message": "Uri not found",
    "moreInfo": "Uri to Bank card not found",
    "errorList": null
}

Query & Retrieve Guide

Search for tokens and retrieve their metadata

Returns non-sensitive metadata for a single token, including the card type, masked card number, expiration date, CVV status, and 3D Secure data. Use this endpoint to inspect token details without exposing the full card number or entering PCI DSS scope.

Error Responses

Code	HTTP Status	Condition
-1003	401	User is not the owner and is not associated with this token
-125	400	Token value is not valid
-160	404	Token not found
-150	500	Internal system error

This endpoint is rate limited.

Parameters

Headers

Authorization

string

required

Your API key prefixed with APIKEY. Example: APIKEY your-api-key. See the Authentication guide.

Path Parameters

cardtoken

string

required

The token ID as returned by one of the tokenization methods. For example, 2821a46d80e14d1b96a7f18f1b81926d.

const response = await fetch(
  'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
  {
    headers: {
      'Authorization': 'APIKEY your-api-key'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/meta',
    headers={'Authorization': 'APIKEY your-api-key'}
)

print(response.json())

Response

200

CreatorReference

string

The reference value set when the card was tokenized.

CreateDate

string

The date and time the token was created (ISO 8601).

CardType

string

The card brand (e.g. Visa, Mastercard, Amex). See supported card types.

LeadingDigits

string

The first 6 digits (BIN) of the card number.

LastDigits

string

The last 4 digits of the card number.

ExpirationYear

integer

The card expiration year.

ExpirationMonth

integer

The card expiration month.

OwnerID

string

The cardholder ID, if provided at tokenization time.

OwnerName

string

The name on the card, if provided at tokenization time.

UserID

string

The PCI Booking user ID that owns this token.

IssueNumber

string

The card issue number (used by some card schemes).

URI

string

The full token URI for use in API calls.

CvvExists

boolean

Whether CVV data is currently stored on this token.

EndRetentionDate

string

The date after which the CVV will be automatically deleted (ISO 8601). Reflects the CVV retention policy.

AssociatedMerchants

string[]

List of PCI Booking customer (booker) user IDs associated with this token.

AssociatedProperties

string[]

List of property user IDs associated with this token.

ThreeDSecureInfo

object

3D Secure authentication data, if stored on this token. See 3D Secure Authentication for field details.

NetworkTokenScheme

string

The card network scheme if this is a network token (e.g. Visa, Mastercard). null for regular cards.

NetworkTokenId

string

The network token identifier assigned by the card scheme. null for regular cards.

TokenLocation

string

The geographic storage location of the token data. null for default (in-table) storage.

VirtualInfo

object

Virtual card metadata, if this token was created from a virtual card. Contains IsMultiUse, Currency, MaxAmount, CardRules, and validity date fields. null for regular cards.

{
    "CreatorReference": "myRef",
    "VirtualInfo": null,
    "CreateDate": "2020-05-19T16:51:00",
    "CardType": "Visa",
    "LastDigits": "5005",
    "LeadingDigits": "491891",
    "ExpirationYear": 2020,
    "ExpirationMonth": 7,
    "OwnerID": "",
    "OwnerName": "Juan Dela Cruz",
    "UserID": "myUser",
    "IssueNumber": "2",
    "URI": "https://service.pcibooking.net/api/payments/paycard/eb454e0462d548ddbc6e6c2193b749a9",
    "EndRetentionDate": "2017-07-08T00:00:00",
    "CvvExists": true,
    "AssociatedMerchants": ["userID1", "userID2"],
    "AssociatedProperties": ["hotel1", "hotel2"],
    "ThreeDSecureInfo": {
        "Token": "42c775efa8b04b1d8bf14ef49a9e45e5",
        "ThreeDSSessionID": "uOrDbh0dEimUDmB3Vvn2f5CAM9B1bMQX",
        "Indication": "Authenticated",
        "AuthenticationValue": "AJkBAoEREQAAAAB4hABwcAAAAAA=",
        "Eci": "05",
        "XID": "861433f4-abff-4c40-b2fd-fea208856a33",
        "AcsTransactionId": "e7a46959-9630-413e-ab56-4e399b96244a",
        "Version": "2.1.0",
        "MerchantName": "PCI Booking * Hotelreservation"
    },
    "NetworkTokenScheme": null,
    "NetworkTokenId": null,
    "TokenLocation": null
}

{
    "code": -1003,
    "message": "Not authorized to access this resource",
    "moreInfo": "Bad or missing authorization data, expected APIKEY",
    "errorList": null
}

{
    "code": -160,
    "message": "Uri not found",
    "moreInfo": "Uri to Bank card not found",
    "errorList": null
}

Query Tokens Update Expiration

Start Here

Authentication & General

Capture Cards

Manage Tokens

Use Tokens

Additional Functions

Payments Library

Retrieve Token Metadata

Query & Retrieve Guide

Error Responses

Parameters

Headers

Path Parameters

Response

Query & Retrieve Guide

​Error Responses

​Parameters

​Headers

​Path Parameters

​Response

Error Responses

Parameters

Headers

Path Parameters

Response