# Tokens

Minimize the exposure of sensitive card details and increase the security of your customer's card details. 

__Authentication header__

  ```
    Authorization: {your_credentials}
  ```
  Replace `{your_credentials}` with your base64-encoded Basic Auth username and password given to you by your Implementation Manager.
  <br /> <br />
  You **must** use the `Authorization` header for any request you send to our Tokens API.
  <br /><br />
  __Accept & Content-Type headers__
  ```
    Accept: application/vnd.worldpay.tokens-v3.hal+json
    Content-Type: application/vnd.worldpay.tokens-v3.hal+json
  ```

We use the Accept header to identify which version of our API you are using. You must use the Accept header for any request you send to our Tokens API.
<br /><br />
We require the Content-Type header if the request you're sending includes a request body, and if the HTTP method is a POST or a PUT.
<br /><br />
__DNS whitelisting__

Whitelist the following URLs:
* `https://try.access.worldpay-bsh.securedataplatform.com/`
* `https://access.worldpay-bsh.securedataplatform.com/`

Please ensure you use DNS whitelisting, not explicit IP whitelisting. When you make a request within Access Worldpay, you should always cache the response returned.

Version: 3
Metadata:
  - category: ["Tokens"]
  - business: ["Enterprise"]
  - catalog-list: true
  - generated: false

## Servers

Test (Try)
```
https://try.access.worldpay-bsh.securedataplatform.com
```

Live
```
https://access.worldpay-bsh.securedataplatform.com
```

## Security

### BasicAuth

Type: http
Scheme: basic

## Download OpenAPI description

[Tokens](https://developer.worldpay-bsh.securedataplatform.com/_bundle/products/tokens/@v3/openapi.yaml)

## Token

A token representing a payment instrument.

### Create a new token

 - [POST /tokens](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/token/createsecuritytoken.md): Creating a new token for the payment instrument.

### Retrieve the detail for this token

 - [GET /tokens/{tokenId}](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/token/getsecuritytoken.md): A token representing a payment instrument.

### Update this token

 - [PUT /tokens/{tokenId}](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/token/updatesecuritytoken.md): Updating different fields represented by the token.

### Delete this token

 - [DELETE /tokens/{tokenId}](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/token/deletesecuritytoken.md): Deleting a token based on an encrypted tokenId.

## Network token

A network token representing a payment instrument.

### Request provisioning for a network token and returns a reference for use later

 - [POST /tokens/network](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/network-token/provisionnetworktoken.md): TBD.

### Get the actual network token using the network token reference

 - [GET /tokens/network/{id}](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/network-token/getnetworktoken.md): Retrieve the detail for this network token.

### Delete a network token

 - [DELETE /tokens/network/{id}](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/network-token/deletesecuritynetworktoken.md): Deleting a network token based on a token number.

### Provision a cryptogram for short time use based on a network token

 - [POST /tokens/network/cryptograms](https://developer.worldpay-bsh.securedataplatform.com/products/tokens/openapi/network-token/getnetworktokencryptogram.md): TBD.