Tokenization

Permission Error When Tokenizing a Card

You will identify why card tokenization was blocked and what information to send to request the feature to be enabled.

What This Error Means

This error indicates that your account does not yet have authorization to use the tokenization feature. Card tokenization is the process of replacing sensitive card data with a token, which can be used in authorized flows without resending the original card data.

While the feature is not enabled for your account, any attempt to tokenize a card will be blocked by the platform's permission rule.

When This Error Occurs

This error can occur when you try to start a tokenization flow before the feature is enabled on your account. It does not, by itself, indicate that the card data is incorrect or that there was a technical failure in the integration.

Before investigating the integration, confirm whether tokenization is enabled for the account used in the request.

How to Request Enablement

  1. Contact one of our account managers.
  2. Inform them that you need to enable the card tokenization feature.
  3. Share the integration context, including:
    • the account that will perform the tokenization;
    • the environment in which the error occurred;
    • the error message received;
    • the flow in which tokenization will be used.
  4. Wait for the enablement confirmation before making new tokenization attempts.

How to Validate After Enablement

Once the account manager confirms that the feature has been enabled, run the tokenization flow again using the same account. If the permission is active, the request should no longer return the message "You do not have permission to use this resource."

If the error persists, confirm that the request is using the correct account and send the updated error message to the account manager for further analysis.

Impact on Integration

Without enablement, your integration will not be able to generate card tokens. As a result, any step in your flow that depends on these tokens will be unavailable until the permission is granted.