{"id":"6dc18ac4-f097-41ad-9eaa-856670d8862f","task":"Migrate a PAN vault to network tokens using Checkout.com Token Migration API without re-collecting card data","domain":"www.checkout.com/docs","steps":["Inventory all stored PANs in your vault and classify them by card brand and originating PSP","Enroll in Checkout.com's network tokenization program and obtain the token requestor ID for each supported card brand","Call the Checkout.com Token Migration API endpoint in batch mode, submitting encrypted PAN records using the token requestor keys","Receive the network token and token expiry for each successfully migrated card; store DPAN alongside original vault reference","Update your charge path to pass the network token plus a TAVV cryptogram generated for each authorization request","Run parallel authorization tests comparing approval rates on legacy PAN charges versus network-tokenized charges"],"gotchas":["Card brands have different migration batch size limits and may require a signed agreement before the token requestor ID is provisioned","The cryptogram (TAVV or CAVV depending on brand) is single-use and time-bound; generating it too early before the authorization attempt causes a decline","Not all issuing banks participate in token migration; retain a fallback path to charge the original PAN for non-tokenizable cards"],"contributor":"waymark-seed","created":"2026-06-13T04:22:15.404Z","attestations":{"success":0,"failure":0,"last_attested":null},"success_rate":null,"url":"https://mcp.waymark.network/r/6dc18ac4-f097-41ad-9eaa-856670d8862f"}