cURL

curl --request POST \
  --url https://sandbox-api.superpagamentos.com/cards/tokenize \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
  "holderName": "João Silva",
  "cardNumber": "0000000000000000",
  "expirationMonth": "10",
  "expirationYear": "2031",
  "securityCode": "123"
}
'

import requests

url = "https://sandbox-api.superpagamentos.com/cards/tokenize"

payload = {
    "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
    "holderName": "João Silva",
    "cardNumber": "0000000000000000",
    "expirationMonth": "10",
    "expirationYear": "2031",
    "securityCode": "123"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    customerId: '8b7c2dd1-e1bf-479f-a5ec-8871ef355b50',
    holderName: 'João Silva',
    cardNumber: '0000000000000000',
    expirationMonth: '10',
    expirationYear: '2031',
    securityCode: '123'
  })
};

fetch('https://sandbox-api.superpagamentos.com/cards/tokenize', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-api.superpagamentos.com/cards/tokenize",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'customerId' => '8b7c2dd1-e1bf-479f-a5ec-8871ef355b50',
    'holderName' => 'João Silva',
    'cardNumber' => '0000000000000000',
    'expirationMonth' => '10',
    'expirationYear' => '2031',
    'securityCode' => '123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-api.superpagamentos.com/cards/tokenize"

	payload := strings.NewReader("{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-api.superpagamentos.com/cards/tokenize")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-api.superpagamentos.com/cards/tokenize")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}"

response = http.request(request)
puts response.read_body

{
  "data": {
    "id": "023924d3-9e6d-4231-832e-4237c1b0cd53",
    "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
    "holderName": "João Silva",
    "first4Digits": "0000",
    "last4Digits": "0000",
    "expirationMonth": "10",
    "expirationYear": "2031",
    "cardBrand": "MasterCard",
    "isActive": true,
    "isVerified": false,
    "postalCodeCheck": false,
    "securityCodeCheck": false,
    "addressCheck": false
  },
  "message": "Cartão tokenizado com sucesso"
}

Tokenização de Cartões

Tokenizar cartão de crédito

Tokeniza um cartão de crédito e o associa a um cliente específico. A tokenização é um processo de segurança que substitui os dados sensíveis do cartão por um token único e seguro. Este token pode ser utilizado para realizar compras futuras sem a necessidade de informar novamente os dados do cartão.

Importante:

Os dados do cartão são criptografados e armazenados de forma segura
O token gerado é único e específico para cada cartão
O token pode ser utilizado apenas para o cliente ao qual foi associado
A tokenização reduz riscos de segurança ao não expor os dados reais do cartão

POST

cards

tokenize

cURL

curl --request POST \
  --url https://sandbox-api.superpagamentos.com/cards/tokenize \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
  "holderName": "João Silva",
  "cardNumber": "0000000000000000",
  "expirationMonth": "10",
  "expirationYear": "2031",
  "securityCode": "123"
}
'

import requests

url = "https://sandbox-api.superpagamentos.com/cards/tokenize"

payload = {
    "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
    "holderName": "João Silva",
    "cardNumber": "0000000000000000",
    "expirationMonth": "10",
    "expirationYear": "2031",
    "securityCode": "123"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    customerId: '8b7c2dd1-e1bf-479f-a5ec-8871ef355b50',
    holderName: 'João Silva',
    cardNumber: '0000000000000000',
    expirationMonth: '10',
    expirationYear: '2031',
    securityCode: '123'
  })
};

fetch('https://sandbox-api.superpagamentos.com/cards/tokenize', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-api.superpagamentos.com/cards/tokenize",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'customerId' => '8b7c2dd1-e1bf-479f-a5ec-8871ef355b50',
    'holderName' => 'João Silva',
    'cardNumber' => '0000000000000000',
    'expirationMonth' => '10',
    'expirationYear' => '2031',
    'securityCode' => '123'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-api.superpagamentos.com/cards/tokenize"

	payload := strings.NewReader("{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-api.superpagamentos.com/cards/tokenize")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-api.superpagamentos.com/cards/tokenize")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"customerId\": \"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50\",\n  \"holderName\": \"João Silva\",\n  \"cardNumber\": \"0000000000000000\",\n  \"expirationMonth\": \"10\",\n  \"expirationYear\": \"2031\",\n  \"securityCode\": \"123\"\n}"

response = http.request(request)
puts response.read_body

{
  "data": {
    "id": "023924d3-9e6d-4231-832e-4237c1b0cd53",
    "customerId": "8b7c2dd1-e1bf-479f-a5ec-8871ef355b50",
    "holderName": "João Silva",
    "first4Digits": "0000",
    "last4Digits": "0000",
    "expirationMonth": "10",
    "expirationYear": "2031",
    "cardBrand": "MasterCard",
    "isActive": true,
    "isVerified": false,
    "postalCodeCheck": false,
    "securityCodeCheck": false,
    "addressCheck": false
  },
  "message": "Cartão tokenizado com sucesso"
}

Authorizations

Authorization

string

header

required

Token JWT gerado na rota de autenticação (/auth). Deve ser enviado no formato: Bearer

Body

application/json

customerId

string<uuid>

required

Identificador único do cliente ao qual o cartão será associado

Example:

"8b7c2dd1-e1bf-479f-a5ec-8871ef355b50"

holderName

string

required

Nome do titular do cartão, exatamente como aparece no cartão

Example:

"João Silva"

cardNumber

string

required

Número do cartão de crédito, sem espaços ou caracteres especiais. Precisa ter entre 13 e 16 dígitos.

Example:

"0000000000000000"

expirationMonth

string

required

Mês de expiração do cartão no formato MM. Precisa ser um número entre 01 e 12.

Example:

"10"

expirationYear

string

required

Ano de expiração do cartão no formato YYYY. Precisa ser um número de 4 dígitos.

Example:

"2031"

securityCode

string

required

Código de segurança do cartão (CVV). Precisa ter entre 3 e 4 dígitos.

Example:

"123"

Response

Cartão tokenizado com sucesso

data

object

Show child attributes

message

string

Example:

"Cartão tokenizado com sucesso"

Documentação da API

Autenticação

Subcontas

Contas Bancárias

Clientes

Tokenização de Cartões

Transações

Assinaturas de Recorrência

Saldo e Transferências

Tokenizar cartão de crédito

Authorizations

Body

Response