Optional organization the token belongs to. A third party can tokenize a card without naming one, in which case the token belongs to the caller's account rather than to a particular organization.

Optional contact to link the token to. The token does not need one: a third party can tokenize a card without holding a platform contact for its owner. A contact belongs to an organization, so giving contactId requires orgId as well.

The card to tokenize.

Billing address for the card.

Optional caller-supplied reference for the token, external to the platform.

Optional caller-supplied key that makes the call idempotent. Repeating a call with the same key from the same account — the named organization, or the caller's own account when none is named — returns the token created by the first call instead of tokenizing again. The key is remembered for an hour after that first call.