---
title: "Get Cryptogram"
method: POST
path: "/getCryptogram"
---

# Get Cryptogram

`POST /getCryptogram`

API call to get the token pan and cryptogram for processing a transaction

## Request body

- object
  - `user` object, required — Customer information
    - `externalId` string, required — Customer Id. Example-ExternalId against which Cards are stored
  - `entity` object, required — Merchant information
    - `entityId` string, required — Merchant Id
  - `amount` object, required — Amount information
    - `netAmount` number, required — Transaction Amount, With 2 decimal places

## Response `200`

- object
  - `status` object, required — Status
    - `status` string, required — Status of the request
  - `card` object, required — Card information
    - `type` number, required — Card Type whether CC/DC/PP. Example-130-CC, 110-DC, 131-PP
    - `expiryMm` number, required — Expiry month of the card. Example-xx
    - `expiryYy` number, required — Expiry year of the card. Example- xxxx
    - `name` number, required — Name on the card
    - `scheme` number, required — Card Network. Example-103: Visa, 104: MC, 105: AMEX, 199: RuPay
    - `remark` string, required — Any remarks during tokenize
    - `vaultId` string, required — Vault Id
    - `maskedNumber` string, required — Masked Card Number. Example-Xxxxxxxxxxxx1234
    - `product` string — Product information for the card number
    - `countryCode` string — Country code
    - `par` string, required — PAR value
    - `tokenReference` string, required — Token Reference Id
    - `bankName` string — Issuer Bank Name
    - `status` string, required — Status of the record. Example-ACTIVE/INACTIVE
    - `isExpired` boolean, required — Whether the card is expired. Example-true/false
    - `isDomestic` boolean, required — Whether the card is domestic. Example-true/false
    - `cvvLess` number — 1/0
    - `consent` object, required
      - `id` string, required — Consent id
      - `timestamp` string, required — Timestamp of the consent. Format: "2025-03-27T10:15:30.00Z"
  - `secure` object, required
    - `token` number, required — Token PAN provided by network for processing transaction
    - `tokenExpiry` string, required — Expiry of the Token. Format: mmyyyy
    - `cryptogram` string, required — Cryptogram provided by network for processing transaction

---

[API](https://skmtc.net/jiopay/apis/jiopay-pg.md) · [All operations](https://skmtc.net/jiopay/apis/jiopay-pg/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/jiopay/jiopay-pg/versions/55aa41b8482f/schema)