# Generate Acceptor Token

Tokenizes card data to generate an Acceptor Token for use in the Process payment endpoint. Available in two variants: Card Data and Brand Token.

**POST** `/instore/v2/external/payments/tokens`

## Request parameters

### Header

- `Authorization` (string, required)
  Bearer access token.

- `trace-id` (string, required)
  Traceability identifier.

- `card` (object, optional)
  Card data. Use card_data for Card Data variant or brand_token for Brand Token variant.

  - `card.card_data` (object, optional)
  Card data for tokenization. Use this variant when the wallet has direct access to card data.

  - `card.card_data.number` (string, optional)
  Card number.

  - `card.card_data.security_code` (string, optional)
  Card security code (CVV).

  - `card.card_data.expiration_month` (integer, optional)
  Card expiration month (integer).

  - `card.card_data.expiration_year` (integer, optional)
  Card expiration year (integer).

  - `card.card_data.entry_mode` (string, optional)
  Card entry mode. Use MANUAL for manual entry.

  - `card.brand_token` (object, optional)
  Brand token data. Use this variant when the wallet uses tokenized card credentials from the card network.

  - `card.brand_token.original_bin` (string, optional)
  Original BIN of the card.

  - `card.brand_token.original_last4` (string, optional)
  Last 4 digits of the original card number.

  - `card.brand_token.token` (string, optional)
  Token issued by the card network.

  - `card.brand_token.cryptogram` (string, optional)
  Transaction cryptogram (base64 encoded).

  - `card.brand_token.security_indicator` (string, optional)
  Security indicator. Use eci.

  - `card.brand_token.par` (string, optional)
  Payment Account Reference.

  - `card.brand_token.expiration_month` (integer, optional)
  Token expiration month (integer).

  - `card.brand_token.expiration_year` (integer, optional)
  Token expiration year (integer).

  - `card.brand_token.token_requestor_id` (string, optional)
  Token requestor identifier.

  - `card.holder` (object, optional)
  Card holder information.

  - `card.holder.name` (string, optional)
  Card holder name.

  - `card.holder.identification_type` (string, optional)
  Holder identification type. For Argentina: DNI.

  - `card.holder.identification_number` (string, optional)
  Holder identification number.

## Response parameters

- `token` (string, optional)
  Acceptor Token generated by Mercado Pago for use in the card.acceptor_token field of the Process payment endpoint. Valid for a limited time window defined by expiry_at.

- `created_at` (string, optional)
  ISO 8601 timestamp indicating when the Acceptor Token was generated.

- `expiry_at` (string, optional)
  ISO 8601 timestamp indicating when the Acceptor Token expires. Do not use the token after this date — generate a new one.

## Errors

| Status | Error | Description |
| ------- | ------- | ----------- |
| 404 | — | Not Found |
| 500 | — | Internal Server Error |

## Request example

### cURL

```bash
curl -X POST \
  'https://api.mercadopago.com/instore/v2/external/payments/tokens' \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer <ACCESS_TOKEN>' \
  -d '{
  "card": {
  "card_data": {
  "number": "4509953566233704",
  "security_code": "123",
  "expiration_month": 12,
  "expiration_year": 2031,
  "entry_mode": "MANUAL"
  },
  "brand_token": {
  "original_bin": "450995",
  "original_last4": "3704",
  "token": "4509953566233704",
  "cryptogram": "/gAAAAAC2/mj+KoAmbV0gmQAAAA=",
  "security_indicator": "eci",
  "par": "V0010015822051006609916940054",
  "expiration_month": 12,
  "expiration_year": 2031,
  "token_requestor_id": "123"
  },
  "holder": {
  "name": "Test Test",
  "identification_type": "DNI",
  "identification_number": "33485274"
  }
  }
  }'
```

## Response example

```json
{
  "token": "APP_USR-4934588586838432",
  "created_at": "2024-01-17T11:37:47.000-04:00",
  "expiry_at": "2024-01-17T17:37:47.000-04:00"
}
```