Retrieve Confirmation Token
Retrieves a token’s display-safe preview — never the underlying payment credential. Public and rate-limited: the account_id query param must match the account the token was minted for.
Headers
Pins the request to a dated API version.
"2026-08-25-2"
Path Parameters
Confirmation token ID, prefixed ctok_.
Query Parameters
The account (biz_) the token was minted for.
Response
confirmation token retrieved
Enough of the billing details to raise a customer record and recognise the method — email, name, country and postal code. The street address is collected for the charge but never returned; this endpoint is a display-safe preview.
When the token was created, as an ISO 8601 timestamp.
"2026-01-01T12:00:00.000Z"
When the token expires, as an ISO 8601 timestamp. Tokens are single-use and short-lived.
"2026-01-01T12:00:00.000Z"
"ctok_xxxxxxxxxxxxxx"
Always confirmation_token.
"confirmation_token"
Display-only preview of the collected method — never the underlying token.
Save-consent state the element displayed at collection: off_session, on_session, or null. Confirm may vault only if attested here.
"off_session"
pending until it is used, then consumed; expired once its short lifetime elapses. Only a pending token can be charged.
pending, consumed, expired "pending"

