API Reference Overview

This reference documents every endpoint in the PCI Booking API. If you are new to PCI Booking, start with the guides:

Introduction. What PCI Booking does and how the platform works.
Create an Account. How to get sandbox and production API keys.
Quickstart. Tokenize a card and process a payment in minutes.

Base URL

All API calls use a single base URL for both sandbox and production:

https://service.pcibooking.net/api

The only difference between sandbox and production is your API key. See Testing and Going Live for details.

Authentication

Most endpoints require an API key passed in the Authorization header:

Authorization: APIKEY your-api-key

For browser-side calls (card entry forms, payments library), generate a temporary session token first. See the Authentication guide for full details on API keys, session tokens, and access tokens.

Response Format

Responses are JSON. Successful calls return 200 with the result in the body. Errors return a standard error object:

{
  "code": -1003,
  "message": "Not authorized to access this resource",
  "moreInfo": "Bad or missing authorization data, expected APIKEY",
  "errorList": null
}

Endpoint Sections

Section	What It Covers
Capture Cards	Tokenize cards from hosted forms, email/SMS links, third-party API responses, file transfers, or direct migration.
Manage Tokens	Query, update, delete tokens. CVV management, 3D Secure storage, customer associations, risk assessment.
Use Tokens	Process payments via 100+ gateways, replace tokens in HTTP requests and files, display card details securely.
Data Blocks	Store and retrieve arbitrary data blocks associated with tokens.
Contact Verification	Verify cardholder contact details (email, phone).
Payments Library	Server-side session management for the client-side Payments Library.

Start Here

Authentication & General

Capture Cards

Manage Tokens

Use Tokens

Additional Functions

Payments Library

API Reference Overview

Base URL

Authentication

Response Format

Endpoint Sections

​Base URL

​Authentication

​Response Format

​Endpoint Sections

Base URL

Authentication

Response Format

Endpoint Sections