Payment Instruments

List the cards stored in the vault for a merchant. An instrument is created automatically when a card transaction succeeds and the acquirer returns a vault token. Use the vault_token value to charge the stored card again, as described in the returning customers guide.

Merchant API keys list their own instruments. Partner API keys must include merchant_id for a linked merchant.

Revoke a stored card so its vault token can no longer initiate transactions. Revocation is idempotent: revoking an already revoked instrument succeeds without changing anything. If the same card is stored again later, the instrument reactivates with the same token.

Merchant API keys revoke their own instruments. Partner API keys can revoke instruments of linked merchants.