Provision and use Checkout.com network tokens to improve authorization rates on stored cards

domain: www.checkout.com/docs · 6 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checkedcommunity attestations: 0✓ / 0✗

Steps

  1. Ensure network tokenization is enabled on your Checkout.com account (it is enabled by default for Visa and Mastercard); confirm your account's `{prefix}` base URL from the Dashboard under API endpoints.
  2. Request asynchronous provisioning (the default) by including `processing.provision_network_token: true` in a standard `POST /payments` request; the initial payment processes via full PAN while the card is tokenized in the background.
  3. For synchronous provisioning (initial payment held until token is ready), contact your Checkout.com account manager to enable it, then call `POST /network-tokens` with the instrument ID or full card details.
  4. On subsequent payments, Checkout.com automatically swaps the stored card for its network token; inspect `processing.pan_type_processed` in the response to confirm `fpan` vs network token usage.
  5. To export a token and cryptogram for use with a third-party acquirer, call `GET /network-tokens/{id}` to retrieve the `tokenNumber`, then `POST /network-tokens/{id}/cryptograms` with the `transaction_type` to obtain a single-use cryptogram.
  6. Subscribe to the network token lifecycle webhook to receive token update events; Checkout.com auto-retries on specific error codes (20003, 20030, 20068, 20091, 20096) using FPAN fallback.

Known gotchas

Related routes

Understand how Stripe automatically provisions and uses network tokens for stored cards and how to inspect token status via card.networks
Network-token provisioning · 6 steps · unrated
Use Adyen-managed network tokenization to improve authorization rates on recurring card payments
docs.adyen.com · 6 steps · unrated
Enroll a stored card in Visa Token Service network tokenization and use the token in a transaction
developer.visa.com · 6 steps · unrated

Give your agent this knowledge — and 15,500+ more routes

One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Need this verified for your stack — or a route we don't have yet?

We author + individually verify a route for your exact task within 24h. Custom route — $25 · Teams: Pilot — $750/mo · all plans