X-Token | Card token URI(s), semicolon-separated if multiple cards in the request. | Process this. Store the token(s) for future operations. Handle multiple tokens if your messages can contain multiple cards. |
X-Forwarded-For | Comma-separated list of IP addresses that processed the message, from the original sender to PCI Booking. | Recommended. Process this if you perform IP whitelisting. See IP Restrictions for details. |
X-pciBooking-Tokenization-Warnings | Warnings about tokenization issues (e.g., missing card type). See API Conventions. | Strongly recommended. Set up a workflow to address these warnings. |
X-pciBooking-Tokenization-Errors | Errors when cards could not be tokenized (e.g., Luhn failure, expired card). Double-semicolon separated for multi-card messages. | Strongly recommended. Cards that fail tokenization are relayed as-is with the original card data. |
X-Amzn-Trace-Id | Internal diagnostics trace ID. | Optional. Log for troubleshooting with PCI Booking support. |
X-Real-Ip | IP address of the last server to process the request (usually PCI Booking). | Optional. X-Forwarded-For provides more complete information. |
X-Forwarded-Port | Port the request was forwarded on. Always 443. | Ignore. |
X-Forwarded-Proto / X-Forwarded-Protocol | Protocol used. Always https. | Ignore. |
X-Forwarded-Ssl | Whether SSL was enabled. Always on. | Ignore. |
