Skip to main content
In addition to the card-driven token lifecycle, we provide APIs that help you manage the lifecycle of individual tokens. This enables you to control each token lifecycle, without impacting the associated card or other tokens linked to the card.
For more information on the card-driven token lifecycle, see Card-Driven Token Lifecycle.

​
Lifecycle Management

The lifecycle of a token is managed by the Token Reference ID(id) — this is a unique identifier that Mastercard Digital Enablement Service (MDES) or Visa Token Service (VTS) assigns to each token provisioned to a digital wallet. This ensures that any operation performed through the API endpoints impacts the specific token, and the changes are displayed in the digital wallet in real-time.
To retrieve a list of tokens associated with a card by the card ID, send a request to the GET List Tokens for a Card. For more information, see List Tokens for Card.

​
Supported Actions via API Endpoints

A token is generated when a card is provisioned to a digital wallet. A card can be added to a digital wallets in either of the following ways:

  • Push Provisioning: A cardholder logs in to the issuer-provided channel and selects their card for addition to appropriate digital wallets.
  • Pull Provisioning: A cardholder logs into a digital wallet and adds their card.

When you send a request to this endpoint, the activation data is encrypted and securely transmitted to the relevant card Scheme token service (MDES/VTS). The Scheme generates a network token that replaces the original card number (FPAN).

Related API Endpoint: Generate Token

If a token is in an inactive state, you can activate the token via the Activate Token Endpoint.
If you want to suspend a token temporarily, especially when either the device is lost or during any interim risk mitigation, send a request to the Suspend Token Endpoint.
When a token is suspended:
  • It only prevents the token usage for a short while.
  • The token is still provisioned to the wallet.
  • You can unsuspend/reactivate the token later.
To reactivate a suspended token, send a request to the Unsuspend Token Endpoint. This reactivates the token, without the need of reprovisioning. You can reactivate the token when either you have recovered the lost device or when the interim risk is resolved.
If you to permanently disable a token, send a request to the Deactivate Token Endpoint.
When a token is deactivated:
  • It cannot be returned to the active state.
  • A new provisioning request is required to generate a new token.
  • Deactivate a token when the device is stolen/the device is compromised due to fraud.
Additional operations that you can perform via the Token API are: