# API · processTokenize

> Card tokenization with processTokenize: parameters, request and response.

- kind: api-operation
- status: stable
- api_version: v1
- last_verified: 2026-10-22
- url: https://tilopay.com/en/developers/api/cof/process-tokenize

```http
POST /api/v1/processTokenize
```

## What it does [#que-hace]

Tokenizes a card: returns the URL of the tokenization form.

## Authentication [#autenticacion]

Requires the API bearer token in the `Authorization` header — see [authentication](/en/developers/api/autenticacion).

## Parameters [#parametros]

<Param id="process-tokenize-parametro-redirect" name="redirect" type="string" required>
Site where you wait for the transaction response.
</Param>

<Param id="process-tokenize-parametro-key" name="key" type="string" required>
Key associated with the merchant.
</Param>

<Param id="process-tokenize-parametro-email" name="email" type="string" required>
Cardholder email.
</Param>

<Param id="process-tokenize-parametro-language" name="language" type="string" required>
Language [es, en].
</Param>

<Param id="process-tokenize-parametro-firstname" name="firstname" type="string" required>
Cardholder first name.
</Param>

<Param id="process-tokenize-parametro-lastname" name="lastname" type="string" required>
Cardholder last name.
</Param>

<Param id="process-tokenize-parametro-token-version" name="token_version" type="string">
Send as value "v2".
</Param>

## Request example [#request]

The `<...>` values are placeholders: replace them with your own credentials and data.

```json
{
  "redirect": "https://urlToRedirect.com",
  "key": "<api_key>",
  "email": "email@user.com",
  "language": "es",
  "firstname": "name",
  "lastname": "lastname",
  "token_version": "v2"
}
```

## Response [#respuesta]

```json
{
  "type": "100",
  "url": "https://secure.tilopay.com/htmls/TOK-5063-740506121440_1648145457file.html"
}
```

## Error responses [#respuestas-de-error]

## Redirect parameters [#parametros-del-redirect]

`token`, `code`, `description`, `auth`, `crd`, `order`, `tpt`, `brand`, `last-digits`, `tilopay-transaction`, `OrderHash`, `returnData`.

The card token travels in `token` and `crd`; store it with the customer email. Use `brand` and `last-digits` to display the saved card. `crd` only has a value when the card was saved with `code = 1`.

HTTP 300:

```json
{
  "type": "300",
  "result": "Message error"
}
```

HTTP 402:

```json
{
  "type": "402",
  "result": "Message error"
}
```

To interpret a response that is not a success, see [how to read an error response](/en/developers/api/procesos-operativos/errors).