---
title: "Add a card on file by reading the card at the terminal and tokenizing it.
Uses the gateway's token-only endpoint: the card is never authorized or charged,
so — unlike a real auth — there is no hold to release afterwards and nothing to void."
method: POST
path: "/Payments/terminal/auth-only"
tags: ["Payments"]
---

# Add a card on file by reading the card at the terminal and tokenizing it.
Uses the gateway's token-only endpoint: the card is never authorized or charged,
so — unlike a real auth — there is no hold to release afterwards and nothing to void.

`POST /Payments/terminal/auth-only`

## Request body

- CreateAuthOnlyDto — Request to add a card on file via terminal auth-only transaction.
  - `clientId` string, required
  - `amount` union — Auth amount. Use 0.00 for card validation only (requires zip code).
    - number, double
    - string, double
  - `description` string, nullable
  - `zip` string, nullable — Billing zip code - required for $0.00 auth card validation.
  - `terminalName` string, nullable — Optional named terminal to send the auth to.

## Response `200`

OK

- AuthOnlyResultDto — Result of an auth-only transaction for card enrollment.
  - `success` boolean
  - `token` PaymentTokenSummaryDto
    - `id` string
    - `last4` string
    - `brand` string
    - `expirationMonth` union
      - integer
      - string, int32
    - `expirationYear` union
      - integer
      - string, int32
    - `isDefault` boolean
    - `nickname` string, nullable
  - `message` string, nullable
  - `authorizationCode` string, nullable

## Other responses

- `400` — Bad Request

---

[API](https://skmtc.net/clinicos/apis/pawthosx-business-api-v1.md) · [All operations](https://skmtc.net/clinicos/apis/pawthosx-business-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/clinicos/pawthosx-business-api-v1/revisions/a905bde4e796/schema)