Welcome to the Toucan Sandbox

In November 2021, we introduced Toucan and explained how network tokenization can improve transaction security and decrease declines. If you’re curious about Toucan and want to try it out, consider signing up for a Toucan sandbox account! This guide will break down everything you need to know about how to get started and navigate around the Toucan sandbox.

What is a Sandbox?

A sandbox is an isolated test environment where you can experiment with a software product using test data. In other words, it’s a sandbox you can play in to determine if the product meets your needs! The Toucan sandbox comes with all the features and security of the Pagos production platform, but with no commitment required. You don’t need a Toucan subscription to access the sandbox; simply sign up for a sandbox account and start testing it out.

Toucan UI Overview

The Toucan UI has five key pages that enable you to register your business, tokenize cards, receive token statuses, and manage your tokens list. In each page, you’ll do the following:

• Dashboard: Input your business details to request network tokens 
• Webhooks: Configure endpoints to receive webhook notifications about stored tokens
• Tokenization: Enter individual or batch card details to tokenize cards
• Tokens: View a history of your tokenized cards
• Developers: Request API keys and review the API payload

Let’s dig into each one further with examples from the application.

Register Your Business

When you log into Toucan, you’ll land on the Dashboard. Here, you’ll see the business details you submitted during onboarding; if you didn’t enter your business details during onboarding, you can do so here. For every network you want to tokenize cards with, enter a separate Token Requestor ID (TRID). For example, to tokenize cards with both Visa and Mastercard, you’ll need to enter two TRIDs.

If you manually add your business details, fill out the fields and click On-board to update your Toucan Dashboard. If you ever need to edit your business details, you can do so by clicking the gear icon in the top-right corner and navigating to your Account & Business Details.

Set Up Webhook Notifications

In the Webhooks page, you can add hosted endpoints for receiving tokenization lifecycle events anywhere you’d like outside of the Toucan application. Use this functionality to get updates wherever works best for your business.

After you add the URL and description, we recommend clicking Test Webhook to ensure everything is working properly before you save your new endpoint.

You can also send a test event after you’ve entered a webhook. Simply click on the name of the webhook you’d like to test, then click Send test event in the top-right corner. 

Tokenize and Tokenize Batch

Now onto the main event: how to actually tokenize a card through Toucan! In the Tokenization page, we provide you with the flexibility to tokenize cards however works best for your business—either individually or in batches. 

To tokenize an individual card, simply enter the card details and click Tokenize. 

The Tokenization page includes a JSON tab as an extra resource for your developers. When you enter card details individually, this tab shows the JSON code that corresponds with the entered information. You can also edit the card information directly in the JSON tab. 

On the right side of this page, you can also search for any existing token, either by Token Reference ID or via the last four digits of the token.

To tokenize in a batch, click Tokenize Batch, upload a JSON file from your computer, then select Tokenize. Toucan will show you the array of cards from your JSON file, so you can confirm the information uploaded is correct. You can upload JSON files up to 1 MB in size at a time. 

Manage Your Tokenized Cards

So what happens next? Navigate to the Tokens tab to see a list of all of your tokenized cards. This page is the ultimate source of information for your tokenized cards and includes the following details for each card: primary account number (PAN), cardholder name, token, card expiration date, and the token reference ID. From here, you can copy your cardholder name or see the metadata associated with the card.

For your convenience, from the Recently Tokenized Cards list, you can create a cryptogram for any card on the list. A cryptogram is a limited-use key that acts as a password to join the network token with the customer PAN when completing a purchase.

In Toucan, you’re also able to suspend, resume, or delete tokens at any time.

Request and Manage APIs

And last, but not least, the Developer page is your resources for requesting and managing your APIs. Simply click + Request API Key and enter the required details to get your first API key. From then onward, your API key will be listed on this tab. Copy the key for later use or remove it and request a new one, if needed.

Sign up today!

Toucan by Pagos is the only tool that you need for network tokenization. If you want to learn more about Toucan Tokenization, please visit our API Reference Documentation. To get started in the Toucan sandbox, sign up today!