Malga Tokens API
**Dados básicos de uma requisição de criação de card token**
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/plug-tokens-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
version: '0.5'
title: Documentação Malga Tokens API
description: '# Authentication
Os serviços de API da Malga são protegidos através de chaves de acesso.'
servers:
- url: https://api.malga.io
description: Production
security:
- X-Client-ID: []
X-Api-Key: []
tags:
- name: Tokens
description: '**Dados básicos de uma requisição de criação de card token**'
paths:
/v1/tokens:
post:
tags:
- Tokens
summary: Criar um novo token
operationId: create_token
requestBody:
description: Tokenizar
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/TokenRequest'
examples:
TokenRequestCard:
$ref: '#/components/examples/TokenRequestCard'
responses:
'201':
description: Created
content:
application/json:
schema:
$ref: '#/components/schemas/TokenResponse'
examples:
TokenResponse:
$ref: '#/components/examples/TokenResponse'
'400':
description: Bad Request
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
'500':
description: Internal Server Error
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
x-codeSamples:
- lang: Python
source: "import requests\n\nclient_id = <YOUR CLIENT ID>\npublic_key = <YOUR CLIENT TOKEN>\n\nrequest = requests.post('https://api.malga.io/v1/tokens', headers={\n \"X-Client-Id\": client_id,\n \"X-Api-Key\": publick_key\n }, json={\n \"cardHolderName\": \"JOSE DAS NEVES\",\n \"cardNumber\": \"4019598346009339\",\n \"cardCvv\": \"123\",\n \"cardExpirationDate\": \"12/2026\"\n})\nprint(request.json().get('tokenId'))\n"
components:
schemas:
TokenCard:
properties:
cardHolderName:
type: string
description: Nome do portador do cartão
cardNumber:
type: string
description: Número do cartão (Sem espaços)
cardCvv:
type: string
description: Código de verificação
cardExpirationDate:
type: string
description: Mês e ano de validade no formato MM/YYYY
required:
- cardHolderName
- cardNumber
- cardCvv
- cardExpirationDate
ErrorResponse:
properties:
error:
type: object
allOf:
- $ref: '#/components/schemas/ErrorItem'
TokenCvv:
properties:
cvvUpdate:
type: string
description: Código de verificação
required:
- cvvUpdate
TokenRequest:
properties:
tokenização:
description: Pode ser tokenizado o cartão e/ou cvv de acordo com a passagem dos atributos
oneOf:
- $ref: '#/components/schemas/TokenCard'
- $ref: '#/components/schemas/TokenCvv'
example:
cardHolderName: JOSE DAS NEVES
cardNumber: '4019598346009339'
cardCvv: '123'
cardExpirationDate: 12/2026
TokenResponse:
properties:
tokenId:
type: string
format: uuid
description: Identificador do token gerado
ErrorItem:
properties:
type:
type: string
enum:
- api_error
- bad_request
- invalid_request_error
- card_declined
code:
type: integer
description: Código HTTP do erro (por exemplo, `422` em erros de regra de negócio).
declinedCode:
type: string
description: Código de retorno da transação em caso de falha na autorização
key:
type: string
description: 'Chave estável que identifica o erro de negócio (ex.: `bank_identifier_required`). Útil para tratar o erro programaticamente, independente da mensagem traduzida.'
businessCode:
type: string
description: 'Chave estável de regra de negócio retornada em `422`. Permite tratar o erro programaticamente independente da mensagem traduzida. Exemplos em sessões: `pix_boleto_multiple_payments_not_allowed`, `pix_boleto_one_to_one_reactivation_blocked`, `platform_fee_exceeds_link_amount`, `session_disabled`, `multiple_payments_limit_reached`.
'
message:
type: string
description: Descrição breve do erro
details:
type: array
description: Lista contendo objetos que detalham o erro de validação
examples:
TokenResponse:
value:
tokenId: cc0b1e41-2936-45c5-947f-93995ffcdc00
TokenRequestCard:
summary: Exemplo de tokenização de cartão
value:
cardHolderName: JOSE DAS NEVES
cardNumber: '4019598346009339'
cardCvv: '123'
cardExpirationDate: 12/2026
securitySchemes:
X-Client-ID:
type: apiKey
in: header
name: X-Client-Id
X-Api-Key:
type: apiKey
in: header
name: X-Api-Key
x-tagGroups:
- name: API Key
tags:
- Client-token
- name: Cartões
tags:
- Tokens
- Cards
- name: Pagamentos
tags:
- Customers
- Charges
- Sessions
- Sellers
- Vendors
- Split
- 3DSecure2
- Settings
- name: Notificação e eventos
tags:
- Webhooks
- name: Provedores
tags:
- Merchants
- Providers
- name: Gestão de pagamentos
tags:
- Flows
- name: Exportar Dados
tags:
- Reports
- name: Apêndice
tags:
- Tabelas de tipos