curl -X POST https://api.sandbox.zafapay.com/v1/tokens \
  -H "Authorization: Bearer pk_test_xxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "card": {
      "number": "4242424242424242",
      "exp_month": 12,
      "exp_year": 2027,
      "cvc": "123",
      "cardholder_name": "John Doe"
    }
  }'

const response = await fetch('https://api.sandbox.zafapay.com/v1/tokens', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer pk_test_xxxxx',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    card: {
      number: '4242424242424242',
      exp_month: 12,
      exp_year: 2027,
      cvc: '123',
      cardholder_name: 'John Doe'
    }
  })
});

{
  "id": "tok_xxxxxxxxxxxxxxxxxxxxxx",
  "card": {
    "last4": "4242",
    "brand": "visa",
    "exp_month": 12,
    "exp_year": 2027
  },
  "created_at": "2026-04-07T10:30:00.000Z",
  "expires_at": "2026-04-07T11:00:00.000Z"
}