Credorax Tokens API

The Tokens API from Credorax — 1 operation(s) for tokens.

Operations 2

GET /tokens GET /tokens #
POST /tokens Create a token #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/credorax:credorax-tokens-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

credorax-tokens-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Credorax Tokens API
  version: '2026-10-11'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-10-11: 9 operation(s) read from 7 public documentation page(s) (each operation names its page in x-source). This is not the provider''s published contract; Credorax has published no machine-readable contract that the pipeline could find. Engine: local.'
  x-evidence-tiers:
    code-example: 5
    documentation: 4
    pages-with-code: 7
    pages-read: 7
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-10-11'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://dev.shift4.com/docs/api
  - https://dev.shift4.com/docs/api/shift4-gateway
  - https://dev.shift4.com/docs/api/shift4-gateway/cards
  - https://dev.shift4.com/docs/api/shift4-gateway/plans
  - https://dev.shift4.com/docs/api/shift4-gateway/events
  - https://dev.shift4.com/docs/api/shift4-gateway/tokens
  - https://dev.shift4.com/docs/api/shift4-gateway/charges
servers:
- url: https://api.shift4.com
security:
- basic: []
tags:
- name: Tokens
paths:
  /tokens:
    get:
      operationId: get_tokens
      tags:
      - Tokens
      summary: GET /tokens
      x-source: https://dev.shift4.com/docs/api/shift4-gateway/tokens
      responses:
        '200':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetTokensResponse'
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl curl https://api.shift4.com/tokens  -u pu_test_WVMFC9GFuvm54b0uorifKkCh:  -d "number=4242424242424242"  -d "expMonth=12"  -d "expYear=2030"  -d "cvc=123"  -d "cardholderName=John Doe" Try it Responses 200 400 402 Token created Body application/json id string Unique identifier for the token Example : "tok_NGsyDoJQXop5Pqqi6HizbJTe" created integer Unix timestamp Example : 1701432000 objectType '
    post:
      operationId: post_tokens
      tags:
      - Tokens
      summary: Create a token
      description: Creates a new token object. This method can be called with either your API public key or your API secret key.
      x-source: https://dev.shift4.com/docs/api/shift4-gateway/tokens
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostTokensRequest'
      responses:
        '200':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostTokensResponse'
      x-evidence:
        kind: documentation
components:
  schemas:
    GetTokensResponse:
      type: object
      properties:
        id:
          type: string
        created:
          type: integer
        objectType:
          type: string
        first6:
          type: string
        last4:
          type: string
        fingerprint:
          type: string
        expMonth:
          type: string
        expYear:
          type: string
        cardholderName:
          type: string
        brand:
          type: string
        type:
          type: string
        country:
          type: string
        used:
          type: boolean
    PostTokensRequest:
      type: object
      properties:
        number:
          type: string
          description: Card number without any separators.
        expMonth:
          type: string
          description: Card expiration month.
        expYear:
          type: string
          description: Card expiration year.
        cvc:
          type: string
          description: Card security code.
        cardholderName:
          type: string
          description: Name of the cardholder.
        addressLine1:
          type: string
          description: First line of the billing address.
        addressLine2:
          type: string
          description: Second line of the billing address.
        addressCity:
          type: string
          description: City of the billing address.
        addressState:
          type: string
          description: State of the billing address.
        addressZip:
          type: string
          description: ZIP or postal code of the billing address.
        addressCountry:
          type: string
          description: Country represented as a three‑letter ISO country code.
        fraudCheckData:
          type: object
          description: Additional data used for fraud protection (secret‑key only).
        merchantAccountId:
          type: string
          description: Identifier of the merchant account that this token should be associated with.
      required:
      - number
      - expMonth
      - expYear
      - cvc
      - cardholderName
    PostTokensResponse:
      type: object
      properties:
        id:
          type: string
          description: Unique identifier for the token.
        created:
          type: integer
          description: Unix timestamp when the token was created.
        objectType:
          type: string
          description: 'Value: "token".'
        first6:
          type: string
          description: First six digits of the card number.
        last4:
          type: string
          description: Last four digits of the card number.
        fingerprint:
          type: string
          description: Unique identifier of the card number.
        expMonth:
          type: string
          description: Two‑digit expiration month.
        expYear:
          type: string
          description: Four‑digit expiration year.
        brand:
          type: string
          description: Card brand.
        type:
          type: string
          description: Card type.
        country:
          type: string
          description: Two‑letter ISO 3166‑1 country code of the card's issuing country.
        cardholderName:
          type: string
          description: Name of the cardholder.
        addressLine1:
          type: string
          description: First line of the billing address.
        addressLine2:
          type: string
          description: Second line of the billing address.
        addressCity:
          type: string
          description: City of the billing address.
        addressState:
          type: string
          description: State of the billing address.
        addressZip:
          type: string
          description: ZIP or postal code of the billing address.
        addressCountry:
          type: string
          description: Country of the billing address (three‑letter ISO code).
        used:
          type: boolean
          description: Whether this token has already been used.
        card:
          type: object
          description: Card object created from this token.
        fraudCheckData:
          type: object
          description: Additional data used for fraud protection.
        threeDSecureInfo:
          type: object
          description: Data present if the card was verified with 3D Secure.
  securitySchemes:
    basic:
      type: http
      scheme: basic
      x-source: https://dev.shift4.com/docs/api/shift4-gateway/section/authentication