> ## Documentation Index
> Fetch the complete documentation index at: https://developer.finogates.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify a Saved Card

> Get a ready-made web page link that lets one of your users verify a saved
card — confirm the security code and billing address, and (when enabled)
complete the card-network authentication step. Show this page inside your
own website in an iframe.

Use this when a charge could not proceed until the card is verified (the
charge response asked for verification), or any time you want a card
confirmed before charging it.

### What you get back
- ``token`` — load it inside the verify iframe.
- ``embed_url`` — the base page URL; append ``#token=<token>&mode=<mode>``.
- ``expires_at`` — when the link stops working (about 10 minutes).

The link contains no details about which company processes the card behind
the scenes. Treat it as a plain string with no meaning of its own.



## OpenAPI

````yaml POST /v1/platform/card/verify-token/{payment_method_id}
openapi: 3.1.0
info:
  title: Finogate Platform API v1
  version: 0.1.0
servers:
  - url: https://api-sandbox.finogates.com
    description: Sandbox
  - url: https://api.finogates.com
    description: Production
security: []
tags:
  - name: auth
  - name: users
  - name: payees
  - name: verification
  - name: bank accounts
  - name: card processing
  - name: digital-assets
  - name: international
  - name: fees
  - name: onboarding
  - name: pending-applications
  - name: wallets
  - name: payments
  - name: document mailing
  - name: merchant onboarding
  - name: catalog
  - name: webhooks
  - name: screening
  - name: Platform - File Scanning
  - name: phone-numbers
  - name: sms
  - name: calls
  - name: listings
  - name: Card Transfers
  - name: embed-tokens
paths:
  /v1/platform/card/verify-token/{payment_method_id}:
    post:
      tags:
        - card processing
      summary: Get a Link for the User to Verify a Saved Card
      description: >-
        Get a ready-made web page link that lets one of your users verify a
        saved

        card — confirm the security code and billing address, and (when enabled)

        complete the card-network authentication step. Show this page inside
        your

        own website in an iframe.


        Use this when a charge could not proceed until the card is verified (the

        charge response asked for verification), or any time you want a card

        confirmed before charging it.


        ### What you get back

        - ``token`` — load it inside the verify iframe.

        - ``embed_url`` — the base page URL; append
        ``#token=<token>&mode=<mode>``.

        - ``expires_at`` — when the link stops working (about 10 minutes).


        The link contains no details about which company processes the card
        behind

        the scenes. Treat it as a plain string with no meaning of its own.
      operationId: >-
        create_card_verify_token_v1_platform_card_verify_token__payment_method_id__post
      parameters:
        - name: payment_method_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
            description: The unique ID of the saved card to verify.
            examples:
              - e5f6a7b8-c9d0-1234-5678-9abcdef01234
            title: Payment Method Id
          description: The unique ID of the saved card to verify.
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
                - $ref: '#/components/schemas/CardVerifyTokenCreate'
                - type: 'null'
              title: Payload
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CommonResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - _AuthenticatedBearer: []
components:
  schemas:
    CardVerifyTokenCreate:
      properties:
        parent_origin:
          anyOf:
            - type: string
              maxLength: 255
            - type: 'null'
          title: Parent Origin
          description: >-
            Optional origin of the embedding page (e.g.
            ``https://app.example.com``), used as the postMessage
            ``targetOrigin``. Must be a bare origin: scheme + host + optional
            port, no path.
      type: object
      title: CardVerifyTokenCreate
      description: >-
        Request body for ``POST
        /v1/platform/card/verify-token/{payment_method_id}``.


        Mints a short-lived ``verify_card`` embed token so a user can complete

        cardholder-present verification (CVV/AVS + 3DS) of a saved card inside a

        Finogate-hosted iframe.
    CommonResponse:
      properties:
        status_code:
          type: integer
          title: Status Code
          description: HTTP status code for the response.
        data:
          title: Data
          description: Payload or error details.
        query_generated_time:
          type: integer
          title: Query Generated Time
          description: >-
            UTC timestamp (milliseconds since epoch) when response was
            generated.
      type: object
      required:
        - status_code
        - data
        - query_generated_time
      title: CommonResponse
      description: |-
        Standard response wrapper for single-object responses and errors.

        Generic over the payload type. A route that declares
        ``CommonResponse[SomeModel]`` gets the real ``data`` schema rendered in
        OpenAPI/Swagger; a bare ``CommonResponse`` leaves ``data`` untyped.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    _AuthenticatedBearer:
      type: oauth2
      flows:
        password:
          scopes: {}
          tokenUrl: /v1/platform/auth/token

````