Create a digital wallet token provisioning request for Google Wallet as part of UPP - Marqeta Docs

POST///

Use this endpoint to retrieve the card data needed to provision a digital wallet token into Google Wallet as part of Unified Push Provisioning (UPP). The returned card data is encrypted using the digital wallet provider’s encryption key, thereby reducing your Payment Card Industry (PCI) compliance overhead.

You need to configure Google Unified Push Provisioning (UPP) first. See Configuring Google Unified Push Provisioning (UPP).

Request body

Fields	Description
card_token string Required	Unique identifier of the card resource to use for the provisioning request. Allowable Values: 1–36 chars
device_id string Required	Unique identifier of the user’s Google device, as provided by Google during the provisioning process. Allowable Values: 1–24 chars
device_type string Required	Type of device into which the digital wallet token will be provisioned. Allowable Values: `MOBILE_PHONE`, `TABLET`, `WATCH`
provisioning_app_version string Required	Version of the application making the provisioning request. Used for debugging and fraud prevention. Allowable Values: 1–50 chars
wallet_account_id string Required	User’s Google Wallet account ID, as provided by Google during the provisioning process. Allowable Values: 1–50 chars
server_session_id string Optional	Unique identifier of the session, used to generate a card object that is the Google Opaque Payment Card (OPC), for adding cards to cardholders’ Google accounts. Must be a UUID in the format which includes 32 hexadecimal digits with 4 hyphens. For example, `123e4567-e89b-12d3-a456-426614174000`. Required only if Google OPC is needed. Allowable Values: 1–50 chars
token_requestor_id string Optional	Identifier of the token requestor. Required when tokenizing a Visa card to a Fitbit device; omitting this field in that scenario will cause the request to fail. Allowable Values: 1–15 chars

Sample request body

JSON

{
  "card_token": "test-card-token",
  "device_type": "MOBILE_PHONE",
  "wallet_account_id": "google_wallet_user_abc123xyz",
  "device_id": "device_987654321",
  "provisioning_app_version": "2.1.0",
  "token_requestor_id": "40010075001",
  "server_session_id": "sdfadfafsfa"
}

Response body

Fields	Description
card_token string Returned	Unique identifier of the card resource to use for the provisioning request. Allowable Values: 1–36 chars
created_time datetime Returned	Date and time when the digital wallet provisioning request was created, in UTC. Allowable Values: datetime Format: yyyy-MM-ddThh:mm:ssZ
last_modified_time datetime Returned	Date and time when the digital wallet token provisioning request was last updated, in UTC. Allowable Values: datetime Format: yyyy-MM-ddThh:mm:ssZ
push_tokenize_request_data object Returned	Contains details about a card tokenization push request. Allowable Values: `card_type`, `display_name`, `opaque_payment_card`, `last_digits`, `network`, `token_service_provider`
push_tokenize_request_data.display_name string Conditionally returned	Name of the card as displayed in the digital wallet, typically showing the card brand and last four digits of the primary account number (PAN). `Visa 5678`, for example. Allowable Values: Any value
push_tokenize_request_data.opaque_payment_card string Conditionally returned	Encrypted data field created by the issuer and passed to Google Wallet during the push provisioning process. Allowable Values: Any value
push_tokenize_request_data.last_digits string Conditionally returned	Last four digits of the primary account number of the physical or virtual card. Allowable Values: 4 chars
push_tokenize_request_data.network string Conditionally returned	Specifies the card network of the physical or virtual card. Allowable Values: `Visa`, `Mastercard`
push_tokenize_request_data.token_service_provider string Conditionally returned	Specifies the network that provides the digital wallet token service. Allowable Values: `TOKEN_PROVIDER_VISA`, `TOKEN_PROVIDER_MASTERCARD`
push_tokenize_request_data.user_address object Conditionally returned	Specifies the cardholder address. Allowable Values: `name`, `address1`, `address2`, `city`, `state`, `postal_code`, `country`, `phone`
push_tokenize_request_data.user_address.name string Returned	Name of the cardholder. Allowable Values: Any value
push_tokenize_request_data.user_address.address1 string Returned	Street address of the cardholder. Allowable Values: Any value
push_tokenize_request_data.user_address.address2 string Returned	Additional address information for the cardholder, such as a suite or apartment number. `Suite 600`, for example. Allowable Values: Any value
push_tokenize_request_data.user_address.city string Returned	City of the cardholder. Allowable Values: Any value
push_tokenize_request_data.user_address.state string Returned	Two-character state, provincial, or territorial abbreviation. `CA`, for example. For the complete list, see Valid state, provincial, territorial, and federal abbreviations. Allowable Values: Any value
push_tokenize_request_data.user_address.postal_code string Returned	Postal code of the cardholder, such as a United States ZIP code. `94612`, for example. Allowable Values: 255 char max
push_tokenize_request_data.user_address.country string Returned	Two-character ISO 3166 alpha-2 country code. `US`, for example. Allowable Values: 255 char max
push_tokenize_request_data.user_address.phone string Returned	Telephone number of the cardholder. Allowable Values: 255 char max
google_opaque_payment_card string Conditionally returned	Encrypted data field created by the issuer and passed to Google Wallet during the push provisioning process. Allowable Values: Encrypted string

Sample response body

JSON

{
  "created_time": "2025-11-06T22:43:20Z",
  "last_modified_time": "2025-11-06T22:43:20Z",
  "card_token": "my_card_token_1111",
  "push_tokenize_request_data": {
    "display_name": "Visa Card",
    "last_digits": "3264",
    "network": "Visa",
    "token_service_provider": "TOKEN_PROVIDER_VISA",
    "opaque_payment_card": "my_opaque_payment_card_RUza...",
    "user_address": {
      "name": "John Doe",
      "address1": "180 Grand Ave",
      "address2": "Suite 500",
      "city": "Oakland",
      "state": "CA",
      "postal_code": "94612",
      "country": "US",
      "phone": "5105551212"
    }
  },
  "google_opaque_payment_card": "my_google_opaque_payment_card_sfawe..."
}