Skip to content
/
Universal Token

Universal Token

Request

This function requests that the existing universal token for a card be returned.

Note: The GET request does not support a request body. Sending an empty request body may result in an error.

Integration Methods:

  • Host Direct
  • Locally Installed UTG
  • Commerce Engine For On Premise
  • Commerce Engine For Cloud

See the Integration Methods and URLs Section sections of the Development Quick Start guide for details regarding each processing option.

Security
AccessToken
Headers
InterfaceVersionstring, <= 11 charactersrequired

Refers to the version of the program or application that is sending requests to Shift4. The following special characters are not allowed: $ % : ^ - ~ < > , ? “ ” ‘ ’ { } [ ] \ + =

Example:2.1
InterfaceNamestring, <= 25 charactersrequired

Refers to the name of the program or application that is sending requests to Shift4. This should be the name of the program that you purchased or created. The following special characters are not allowed: $ % : ^ - ~ ` < > , ? “ ” ‘ ’ { } [ ] \ + =

Example:ForwardPOS
CompanyNamestring, <= 26 charactersrequired

Refers to the vendor or partner that designed and certified the interface. The information you use in this field should match what Shift4 has on file or what was agreed upon in your Integration Plan. The following special characters are not allowed: $ % : ^ - ~ ` < > , ? “ ” ‘ ’ { } [ ] \ + =

Example:PAWS
AccessTokenstring, (uuid), <= 52 charactersrequired

A security credential used to authenticate API requests and all i4Go® authorizeClient/preauthorizeClient requests. An Access Token is the alias for the merchant account and interface being used. The Access Token is required in all requests except an Access Token Exchange request, which generates an Access Token using an authToken and clientGuid.

Example:EA79FB05-3AA7-4500-AF9A-73F986FF2C1D
CardNumberstring, <= 32 characters

The payment card number. This field will always be masked when returned in a response.

Example:4321000000001119
P2PEDatastring, <= 2048 characters

The full output of a P2PE keypad/magnetic swipe reader (MSR).

P2PEFormatstring, = 2 characters

Classifies the type of payment device being used for P2PE.

ValueDescription
01IDTech Enhanced Encryption format, USB KB mode
02IDTech Enhanced Encryption format, USB HID mode
03Ingenico format
04VeriFone format
05Shift4 TDES DUKPT format
Enum:"01""02""03""04""05"
Example:01
P2PEKsnstring, <= 20 characters

Conditional: Required when p2pe.format == "05"

The key serial number which was used to encrypt the P2PE data.

Example:6299495001100E200041
SerialNumberstring, <= 10 characters

In requests that require the use of a shared card token that is held by another merchant account, such as in TokenStore or TokenShare®, this field is used to specify the serial number for the account where the card token is stored.

Example:266
Tokenstring, <= 16 characters

This field is used to specify the token for the payment method.

Example:8048471746471119
TrackDatastring, <= 128 characters

Conditional: Send in the initial authorization/sale request when processing a swiped MSR transaction. This field is not specified when using True P2PE® (point-to-point encryption) or a UTG-controlled PIN pad.

Card swipe data exactly as read by an MSR.

Example:;4321000000001119=2212201999999?
curl -i -X GET \
  https://api.shift4test.com/api/rest/v1/tokens/universaltoken \
  -H 'AccessToken: YOUR_API_KEY_HERE' \
  -H 'CardNumber: 4321000000001119' \
  -H 'CompanyName: PAWS' \
  -H 'InterfaceName: ForwardPOS' \
  -H 'InterfaceVersion: 2.1' \
  -H 'P2PEData: string' \
  -H 'P2PEFormat: 01' \
  -H 'P2PEKsn: 6299495001100E200041' \
  -H 'SerialNumber: 266' \
  -H 'Token: 8048471746471119' \
  -H 'TrackData: ;4321000000001119=2212201999999?'

Responses

Request was processed

Bodyapplication/json
resultArray of objects
Response
{
  "result": [
    {
      "dateTime": "2024-05-21T09:18:23.283-07:00",
      "merchant": {
        "mid": 15877,
        "name": "Merchant XYZ"
      },
      "server": {
        "name": "TM01CE"
      },
      "universalToken": {
        "value": "97032276-5944-00000001-16985FD179D"
      }
    }
  ]
}