Skip to main content

Authentication and headers required

The Cardtokens API is a rest full API over HTTPS connection. Data is encrypted using TLS 1.2. Authentication is required for each request using a shared API-key added to the http headers. Two headers must be added to the HTTP request when transmitting the request:

  • Content-Type: application/json
  • X-Api-Key: 5251XXX-THE-API-KEY-XXXXX6bd69

The prefix for the endpoint of the Cardtokens API is: https://api.cardtokens.io/api/cu