Visa Token Service (VTS) is Visa’s network tokenization platform. It replaces a primary account number (PAN) with a device- or merchant-scoped token that can be updated when a card is reissued, reducing involuntary churn for subscription and card-on-file merchants. VTS is the scheme layer, not a PSP product, though many gateways resell access wrapped in their own vault.
Merchants enroll with a Token Requestor ID (TRID) and provision tokens through Visa’s APIs (often via a token service provider). Each authorization for card-not-present traffic can include a Token Authentication Verification Value (TAVV) cryptogram and an Electronic Commerce Indicator (ECI) that signals tokenized authentication to the issuer. Visa publishes benchmark uplift for approval rates on eligible tokenized traffic; realizing that uplift requires correct cryptogram generation on every transaction, not just token creation.
VTS integrates with Visa’s broader digital enablement stack: token lifecycle events (provision, suspend, delete), account updater-style refreshes when PAN metadata changes, and scheme rules for recurring versus one-off commerce. Teams that only tokenize at checkout but authorize with stale PAN references leave authorization lift on the table.
Veliro connects to VTS directly over mutual TLS, outside your PSP’s vault path. That means tokens are provisioned under your TRID, cryptograms are fetched per authorization, and you can forward to any acquirer without re-provisioning when you change processors. Direct scheme access is how you decouple credential custody from routing.