Manage saved tokens

List and remove the reusable XPay tokens associated with a customer. Perform token-management operations from the merchant backend and confirm that each token belongs to the intended customer.

Before you begin#

Configure XPay API authentication and store the applicable XPay customer ID in the merchant system.

Retrieve a customer's saved tokens#

Filter the saved-token list by customer ID:

GET {{base_url}}/public/v1/token?customer_id={{customer_id}}&offset=0&limit=20

Use the returned XPay token identifiers for supported saved-token flows. Store only the display information needed by the merchant application, and do not store or expose complete card data.

Retrieve token details#

Use the token retrieval response when a workflow requires the token's current payment-method or gateway information. See the Get all saved tokens and payment methods API for the complete filters and response schema.

Delete a saved token#

Delete a token from the merchant backend when the customer removes that saved payment method:

DELETE {{base_url}}/public/v1/token/{{token_id}}

Confirm that the token belongs to the intended customer before sending the request. After XPay accepts the deletion, remove the token reference from the merchant's customer record and do not use it for future payments.

Next steps#

• Pay with a saved token.
• Authenticate a saved card with 3DS.
• See the Delete a token API for the complete response schema.