Tokeni

API

Merchant HTTP API. Sandbox first.

Sandbox: https://sandbox-api.tokeni.io

Production: https://api.tokeni.io

Every call uses HTTP Basic (apiKey:apiSecret). Detokenize also needs HMAC-SHA512. See Authentication.

Do not paste live card numbers into try-it. Detokenize from a PCI server, not a browser tab.

Endpoints in this section, by resource:

Docs MCP

Point Cursor or Claude at docs.tokeni.io/mcp. Search only. No API execution.

/v2/Pci/Tokenize POST

TokenEx-compatible tokenization. Accepts PAN in "Data" field, optionally caches CVV.