Network tokens

Every major scheme, under your TRID.

Veliro holds direct, mutual-TLS connections to Visa, Mastercard, and American Express token services. You provision once and get a processor-neutral tok_*, with the right cryptogram on every authorization.

A network token replaces the card number with a credential the scheme owns.

When a cardholder stores a card, the raw PANPrimary Account Number: the raw card numberdoes not have to live in your systems or your processor’s vault. Visa, Mastercard, and American Express each issue a network token — a scheme-managed stand-in for the PAN that authorizes like the underlying card, survives reissues and expiries, and carries a fresh cryptogram on every charge. Veliro provisions those tokens directly against VTSVisa Token Service, MDESMastercard Digital Enablement Service, and AETSAmerican Express Token Service under your own TRIDToken Requestor ID: your merchant identifier on the card networks, so the credential is registered to your business rather than to whichever PSP happens to be in the path today.

The TRID is what makes the token portable.

Most merchants inherit network tokens indirectly, provisioned under their PSP’s Token Requestor ID. That ties the stored credential to the processor: leave, and the tokens do not come with you. Veliro provisions every token under your own TRID and returns one processor-neutral tok_* reference. Add or switch acquirers, route by cost or authorization rate, and keep a single stable token per card across every scheme — with no re-collection and no re-tokenization project. Read the per-scheme detail for VTS, MDES, and AETS, or see how the credential moves in token portability.

Provision your first network token.

Capture with Secure Fields, call POST /v1/tokens, and watch the same credential authorize across schemes and acquirers.