External Tokens
Network, Google Pay and Apple Pay tokens
External Tokenization (also known as Network Tokenization) is a security process used by major card networks like Visa and Mastercard. It replaces a card’s sensitive Primary Account Number (PAN) with a unique, network-issued token. This token is used in transactions instead of the actual card number, reducing the risk of fraud and data breaches. Network tokens are used across multiple payment channels, including traditional card-on-file setups and digital wallets like Apple Pay and Google Pay, enabling safer and more seamless transactions for merchants and users.
Mandatory Parameters
| Parameter Name | Format | Length | Description |
|---|---|---|---|
| ccn | numeric | max. 16 digits | This field is used for Token |
| exp_year | numeric | 4 digits | Token expiry year. |
| exp_month | numeric | 2 digits | Token expiry month. |
| external_token_type | enum | ("apple-pay", "google-pay", "network") | |
| external_token_cryptogram | Base64-encoded string | The external_token_cryptogram field contains the payment cryptogram generated by the external token service (Apple Pay, Google Pay or network tokenization); it must be transmitted as a valid Base64 string. | |
| external_token_eci | numeric | 2 digits | ECI Value: Visa=07, MasterCard is optional |
You can use both /payment_authorize or /payment_preauthorize APIs. In the case of /payment_preauthorize you will need to use our capture API in order to have success Capture.
Network Tokens
To initiate a transaction you need to send an authorization request from your server.
Send a request
POST https://sandbox.payabl.com/pay/backoffice/payment_authorize
Request example
merchantid=gateway_test_3d&amount=5¤cy=EUR&orderid=test&language=en&[email protected]&customerip=127.1.1.1&payment_method=1&ccn=4149011500000147&exp_month=01&exp_year=2029&external_token_type=network&external_token_eci=07&external_token_cryptogram=/wAAABYAeXbZJpAAAAAAgIBgE4A=
Response example:
transactionid=106409428&transid=106409428&status=2000&errormessage=pending&errmsg=pending&amount=5&price=5¤cy=EUR&orderid=test&url_3ds=https%3A%2F%2Fpay4.sandbox.payabl.com%2F3dss%2Ftest%2Fv2%2F5fedceea59d5335f81664bc89fe89ca1%2Fredirect&user_id=1138804
After you receive the 3D Secure URL, you need to decode it and redirect the customers to it. Then customers will need to provide PIN/passphrase to their bank/customer’s credit card institution for transaction verification.
If the 3D Secure step is successful, an internal notification will be sent to the merchant’s notification URL and the customer will be redirected to the url_return.
Notification example
type=capture&security=0a0f715de7491a364818bfe5fcf04ea429ac1bae44860bc10e5e3821ec97032a&orderid=test×tamp=1755367325&errormessage=&errorcode=0&transactionid=106409428
GooglePay Tokens
To initiate a transaction you need to send an authorization request from your server.
Send a request
POST https://sandbox.payabl.com/pay/backoffice/payment_authorize
Request example
merchantid=gateway_test_3d&amount=5¤cy=EUR&orderid=test&language=en&[email protected]&customerip=127.1.1.1&payment_method=1&ccn=4149011500000147&exp_month=01&exp_year=2029&external_token_type=google-pay&external_token_eci=07&external_token_cryptogram=/wAAABYAeXbZJpAAAAAAgIBgE4A=
Response example:
transactionid=106409436&transid=106409436&status=0&errormessage=&errmsg=&amount=5&price=5¤cy=EUR&orderid=test&related_token_ids=+&user_id=1138804
ApplePay Tokens
To initiate a transaction you need to send an authorization request from your server.
Send a request
POST https://sandbox.payabl.com/pay/backoffice/payment_authorize
Request example
merchantid=gateway_test_3d&amount=5¤cy=EUR&orderid=test&language=en&[email protected]&customerip=127.1.1.1&payment_method=1&ccn=4149011500000147&exp_month=01&exp_year=2029&external_token_type=apple-pay&external_token_eci=07&external_token_cryptogram=/wAAABYAeXbZJpAAAAAAgIBgE4A=
Response example:
transactionid=106409437&transid=106409437&status=0&errormessage=&errmsg=&amount=5&price=5¤cy=EUR&orderid=test&related_token_ids=+&user_id=1138804
Our Technical Support team is there to help you:
Email: [email protected]
Available Monday – Friday between 09:00 and 17:00 CET/CEST
Updated 9 days ago