# API · Remove card

> Removal of a saved card token from the merchant's private vault.

- kind: api-operation
- status: stable
- api_version: v1
- last_verified: 2026-10-20
- url: https://tilopay.com/en/developers/api/cof/remove-card

```http
POST /api/v1/user/card-remove
```

## What it does [#que-hace]

Removes a saved card token. **Requirement:** the merchant must have a private token vault.

## Authentication [#autenticacion]

Requires the API bearer token in the `Authorization` header — see [authentication](/en/developers/api/autenticacion).

## Parameters [#parametros]

<Param id="remove-card-parametro-key" name="key" type="string" required>
Key associated with the merchant.
</Param>

<Param id="remove-card-parametro-email" name="email" type="string" required>
Customer email associated with the token.
</Param>

<Param id="remove-card-parametro-token" name="token" type="string" required>
Token to remove.
</Param>

## Request example [#request]

The `<...>` values are placeholders: replace them with your own credentials and data.

```json
{
  "key": "1234-1234-1234-1234-1234",
  "email": "email@card.com",
  "token": "411111.......1111"
}
```

## Response [#respuesta]

```json
{
  "type": "200",
  "status": 1,
  "message": "Success"
}
```

To interpret a response that is not a success, see [how to read an error response](/en/developers/api/procesos-operativos/errors).