POST /api-service/card/login — Get Authorization Token

Authenticate with the Wasl Cards API using your merchant credentials and receive a session token required for all subsequent requests.

The Get Token endpoint authenticates your account and returns a session token that you must include in the Authorization header of every subsequent API call. Tokens are issued per session, so you should store the returned value securely and re-authenticate whenever your token expires or is rejected.

Endpoint

POST /api-service/card/login

Environment	Base URL
Development	https://development.payzah.net
Production	https://Payzah.net/production770

Request Headers

Header	Value
Content-Type	application/json
Token	token

The Authorization header is not required for this endpoint — you are requesting the token here. Include it in all subsequent calls once you have received your token.

Request Body

user_name · string · required

Your registered Wasl account username.

password · string · required

The password associated with your Wasl account.

Example Request

Request

{
  "user_name": "your_username",
  "password": "your_password"
}

Response

Response Fields

status · boolean

Indicates whether the request succeeded. Returns true on a successful authentication.

code · string

A status code for the response. "11111" indicates success.

token · string

Your session token. Pass this value in the Authorization header of every subsequent API request.

Example Response

Response

{
  "status": true,
  "code": "11111",
  "token": "unique token"
}

Usage Notes

Copy the token value from the response and include it as the Authorization header in all further requests:

Authorization: <your token>

If any subsequent API call returns error code 10000 (Incorrect Token Access), your token has expired or is invalid. Call this endpoint again to obtain a fresh token before retrying.

Avoid re-authenticating on every request. Store the token securely in your application’s session or secret store and reuse it until it is rejected.