Obtain an Access Worldpay API credential and confirm your `merchant.entity` value with your Worldpay Implementation Manager; network tokenization must be enabled on your account.
Create a network token by sending `POST https://try.access.worldpay.com/tokens/network` with a `paymentInstrument` of type `card/front` (raw card details) or `card/tokenized` (existing Worldpay token href); Visa, Mastercard, American Express, and Discover are supported.
Inspect the response: a synchronous creation returns HTTP 200 with `tokenReference` and a `tokenPaymentInstrument` object containing `tokenNumber` and `status`; an asynchronous creation returns HTTP 200 with only `tokenReference` and a `tokens:networkTokenLookup` link.
For asynchronous creations, poll `GET` the `tokens:networkTokenLookup` href until `tokenPaymentInstrument.status` is `Active` before proceeding.
Provision a single-use cryptogram for authorization by posting to the `tokens:networkTokenCryptogram` href (`POST https://try.access.worldpay.com/tokens/network/cryptograms`) with the `tokenReference`; cryptograms are valid for 24 hours.
Use the `tokenNumber` and cryptogram in your downstream payment authorization request; monitor token lifecycle events (Active, Suspended, Deleted, Expired) and handle state transitions in your payment logic.
Known gotchas
Cryptograms are single-use and valid for 24 hours only; generate a fresh cryptogram immediately before each authorization attempt — do not cache or reuse them.
Asynchronous network token creation returns only a `tokenReference` in the initial response without a `tokenNumber`; you must poll the lookup link until `status` is `Active` before using the token for payment.
Token statuses `Suspended` and `Deleted` require different handling: a `Suspended` token may become `Active` again when the underlying card is reactivated, while a `Deleted` token is permanent and the card-on-file must be re-collected.
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp