Payment tokens

A payment token authorises one payment of a stated amount. Issue one from your checkout, then present it to take the payment.

This is the one collection that accepts a publishable key, because it is called from the browser. That is also why a token names the amount it is good for: a credential that can reach the page cannot be trusted to name its own price.

There is one create variant per payment method, saved source, card, Apple Pay, Google Pay, network token, bank account, PayTo, and everything downstream refers to the token rather than repeating the method.

A token has no status and cannot be listed. It is a short-lived authorisation, not a record of a checkout attempt: it is used once, and what happened is on the /transactions it produced. Reading one back tells you what it charges and what it pays with, and nothing about its life.

To ask what a payment would cost before issuing a token, use /surcharge-quotes.