Sign in

v1

latestOpenAPI 3.0.02026-07-26167441.9 MB

Invoke Forward Proxy

Forwards your request to the destination indicated in the yuno-proxy-destination-url header, replacing {{vaulted_token.<TOKEN>.<field>}} expressions in the body and header values with real card data inside Yuno's PCI DSS Level 1 environment. The destination's status code, headers, and body are returned unchanged. GET, PUT, PATCH, and DELETE are also supported and forwarded verbatim. The full destination (including its path and query string) is specified in yuno-proxy-destination-url; a query string on the /pci-proxy/forward request itself is rejected. Every proxy response carries a yuno-proxy-request-id header; a 401 returned before the request reaches the proxy is the only exception.

post/pci-proxy/forward

Headers

yuno-proxy-destination-urlstring required
Example:https://api.example-processor.com/charges

The complete destination URL, including its path and any query string (for example https://api.example-processor.com/charges/ch_123/capture?expand=true). Must be a public HTTPS hostname on port 443, and the host must be registered on your destination allowlist; IP addresses and internal networks are rejected. It must not contain {{vaulted_token...}} expressions (card data must never appear in a URL).

yuno-proxy-timeoutinteger
Example:30

Destination timeout in seconds. Default 30, maximum 120.

yuno-account-idstring
Example:acc_123

Optional account scope. Narrows which allowlisted destinations are permitted for this request; it does not affect token resolution (vaulted tokens are always scoped to your organization). Like all yuno-* headers it is removed before forwarding and never reaches the destination.

Request body

object required

Example request

{
  "amount": 2500,
  "currency": "USD",
  "card": {
    "number": "{{vaulted_token.1a2b3c4d-5678-90ab-cdef-111213141516.number}}",
    "expiration_month": "{{vaulted_token.1a2b3c4d-5678-90ab-cdef-111213141516.expiration_month}}",
    "expiration_year": "{{vaulted_token.1a2b3c4d-5678-90ab-cdef-111213141516.expiration_year}}",
    "holder_name": "{{vaulted_token.1a2b3c4d-5678-90ab-cdef-111213141516.holder_name}}"
  }
}

Response

Response from the destination, passed through unchanged (the actual status code is whatever the destination returned; check yuno-proxy-destination-status).

object required

The destination's response body, unchanged.