Manage Card Token

Use the Manage Card Token endpoint to delete, suspend, or resume a single token. To use this endpoint, the MTLCM product parameter must be set. This endpoint is currently valid only for Mastercard.

Status codes

See Global Response Statuses for status codes that are common across endpoints.

Form Data
string
required

Web service username, as provided by Galileo.
Pattern: Max 50 characters
Example: "AbC123-9999"

string
required

Web service password, as provided by Galileo.
Pattern: Max 15 characters
Example: "4sb62fh6w4h7w34g"

int32
required

Galileo-issued provider identifier.
Pattern: Max 10 digits
Example: 9999

string
required
1 to 60

A unique provider-generated ID to identify this API call. A UUID is preferred.
Pattern: 60 characters or less
Example: "9845dk-39fdk3fj3-4483483478"

string
required
≤ 18

The PRN, PAN or CAD of the account. For card-specific endpoints such as this one, the CAD is preferred. Do not use the PRN if more than one card has ever been associated with this account.
Pattern: PAN, PRN, or CAD
Example: "999103447228"

string | null

A unique reference assigned to a token and used to identify the token for the duration of its lifetime. Also called the TUR.
Pattern: 48-char alphanumeric
Example: "DWSPMC00000000010906a349d9ca4eb1a4d53e3c90a11d9c"

string
enum
required

Operation to perform.
Pattern: String
Example:"SUSPEND"

Allowed:
string | null

The reason for operation. See Manage Card Token Values for valid values.
Pattern: String
Example: "STOLEN"

boolean | null

If operation: DELETE, specify whether to delete the token from the cardholder device only or from both the device and the MDES platform:

  • true — Delete the token from the cardholder device only.
  • false — Delete the token from both the device and the MDES platform.

Pattern: String
Example: true

string | null

The ID of the agent performing the token management operation. Used to track who made the change in notes.
Pattern: String
Example: "agent123"

string | null

The ID of the user performing the token management operation. Used to track who made the change in notes.
Pattern: String
Example: "user456"

Headers
string
enum
Defaults to json

Use this header instead of the standard accept header to specify the response format.

Allowed:
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Response

Language
URL
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/xml

© Galileo Financial Technologies, LLC 2026    Privacy Disclosure

All documentation, including but not limited to text, graphics, images, and any other content, are the exclusive property of Galileo Financial Technologies, LLC and are protected by copyright laws. These materials may not be reproduced, distributed, transmitted, displayed, or otherwise used without the prior written permission of Galileo Financial Technologies, LLC. Any unauthorized use or reproduction of these materials are expressly prohibited.