Cardholder access tokens

Create a cardholder-specific access token for secure data access with our Card Issuing SDK for Android or iOS, by exchanging your access key ID and access key secret.

Request an access token

OAuth endpoint to exchange your access key ID and access key secret for an access token.

SecurityOAuth2: OAuth
Request
Request Body schema: application/x-www-form-urlencoded
grant_type
string
Value: "client_credentials"
client_id
string

Access key ID.

client_secret
string

Access key secret.

cardholder_id
string (IssuingCardholderId) = 30 characters ^crh_[a-z0-9]{26}$

The cardholder's unique identifier.

single_use
boolean

Specifies if the request is for a single-use token. Single-use tokens are required for sensitive endpoints.

Responses
200

Cardholder access token retrieved successfully

406

Not Acceptable

415

Unsupported Media Type

422

Unprocessable Content

429

Too Many Requests

post/issuing/access/connect/token
Request samples
application/x-www-form-urlencoded
grant_type=client_credentials&client_id=ack_clckqmmnyfiupexjew7shh5ahe&client_secret=Pmg36sDWQ9WxtPR3&cardholder_id=crh_d3ozhf43pcq2xbldn2g45qnb44&single_use=true
Response samples
application/json
{
  • "access_token": "2YotnFZFEjr1zCsicMWpAA",
  • "token_type": "example",
  • "expires_in": 3600,
  • "scope": "issuing:card-management-write issuing:card-management-read"
}