---
title: "Card on File Authorized"
method: POST
path: "/checkout/card-on-file-authorized"
tags: ["checkout"]
---

# Card on File Authorized

`POST /checkout/card-on-file-authorized`

Checks if a user is authorized for card on file transactions with this card.

It is recommended to call this endpoint to confirm card on file transactions can be performed with a card before attempting any session (such as an auction) involving card on file transactions.

## Headers

- `x-coinflow-auth-user-id` string, required
- `x-device-id` string
- `x-coinflow-client-ip` string

## Request body

- object
  - `token` string, required

## Response `200`

Ok

- CheckoutCardOnFileAuthorizedResponse200
  - `authorized` boolean, required

## Other responses

- `403` — Card on file not enabled
- `410` — Validation for this card has expired. Revalidate the CVV for this card, and make a new purchase using the /api/checkout/card/token in order to begin using this endpoint again.
- `412` — 3DS Challenge required

---

[API](https://skmtc.net/coinflow/apis/api-reference.md) · [All operations](https://skmtc.net/coinflow/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/coinflow/api-reference/versions/c7b5afab1295/schema)