const response = await fetch(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
{
method: 'PUT',
headers: {
'Authorization': 'APIKEY your-api-key'
}
}
);
console.log(response.status);
import requests
response = requests.put(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
headers={'Authorization': 'APIKEY your-api-key'}
)
print(response.status_code)
Ownership transferred successfully. No content returned.
{
"code": -125,
"message": "Bad input data",
"moreInfo": "Could not find a valid user",
"errorList": null
}
{
"code": -1003,
"message": "Not authorized to access this resource",
"moreInfo": "User is not the owner of this bank card",
"errorList": null
}
Query & Update
Transfer Ownership
Transfer ownership of a token to another PCI Booking customer.
PUT
/
api
/
payments
/
paycard
/
{cardToken}
/
externalUser
/
{AltCustomer}
const response = await fetch(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
{
method: 'PUT',
headers: {
'Authorization': 'APIKEY your-api-key'
}
}
);
console.log(response.status);
import requests
response = requests.put(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
headers={'Authorization': 'APIKEY your-api-key'}
)
print(response.status_code)
Ownership transferred successfully. No content returned.
{
"code": -125,
"message": "Bad input data",
"moreInfo": "Could not find a valid user",
"errorList": null
}
{
"code": -1003,
"message": "Not authorized to access this resource",
"moreInfo": "User is not the owner of this bank card",
"errorList": null
}
Third-Party Permissions Guide
Learn how to share tokens with other PCI Booking customers
Transferring ownership does not change the token’s CVV retention policy. It keeps whatever policy was set (or defaulted) at creation - it does not switch to the new owner’s account-wide default. See CVV Retention Policy.
Error Responses
| Code | HTTP Status | Condition |
|---|---|---|
| -1003 | 401 | User is not the owner |
| -179 | 400 | externalUserId is empty |
| -179 | 400 | Recipient user does not exist |
| -179 | 400 | Cannot transfer to same account |
Parameters
Headers
string
required
Your API key prefixed with
APIKEY. Example: APIKEY your-api-key. See the Authentication guide.Path Parameters
string
required
The token ID as returned by one of the tokenization methods.
string
required
The user ID in PCI Booking of the customer to transfer ownership to.
const response = await fetch(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
{
method: 'PUT',
headers: {
'Authorization': 'APIKEY your-api-key'
}
}
);
console.log(response.status);
import requests
response = requests.put(
'https://service.pcibooking.net/api/payments/paycard/2821a46d80e14d1b96a7f18f1b81926d/externalUser/recipient-user-456',
headers={'Authorization': 'APIKEY your-api-key'}
)
print(response.status_code)
Response
Ownership transferred successfully. No content returned.
{
"code": -125,
"message": "Bad input data",
"moreInfo": "Could not find a valid user",
"errorList": null
}
{
"code": -1003,
"message": "Not authorized to access this resource",
"moreInfo": "User is not the owner of this bank card",
"errorList": null
}