Payment methods

/v1/payment-methods — métodos de pago tokenizados sobre tu cuenta de Wompi. Ver también el concepto Método de pago.

El objeto PaymentMethod

{
  "id": "pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  "type": "CARD",
  "brand": "VISA",
  "last4": "4242",
  "exp_month": 12,
  "exp_year": 2029,
  "is_default": true,
  "state": "available",
  "created_at": "2026-08-24T15:00:00Z"
}

Campo	Tipo	Descripción
`id`	string	Identificador único
`customer_id`	string	Cliente dueño del método de pago
`type`	string	Actualmente solo `CARD`
`brand`	string	Marca de la tarjeta (`VISA`, `MASTERCARD`, …)
`last4`	string	Últimos 4 dígitos
`exp_month`	integer	Mes de vencimiento
`exp_year`	integer	Año de vencimiento
`is_default`	boolean	Si es el método por defecto del cliente
`state`	string	`pending` · `available` · `verification_pending`
`created_at`	datetime	Fecha de creación

Obtener configuración de tokenización

GET /v1/payment-methods/setup

Devuelve la llave pública de Wompi de tu cuenta, los acceptance tokens y la URL de tokenización. Ningún secreto sale del servidor.

curl https://api.rekurra.dev/v1/payment-methods/setup \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"

const res = await fetch("https://api.rekurra.dev/v1/payment-methods/setup", {
  headers: { Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" },
});
const setup = await res.json();

import requests
 
res = requests.get(
    "https://api.rekurra.dev/v1/payment-methods/setup",
    headers={"Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"},
)
setup = res.json()

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods/setup"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .GET()
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var response = await http.GetAsync("https://api.rekurra.dev/v1/payment-methods/setup");
Console.WriteLine(await response.Content.ReadAsStringAsync());

Response — `200 OK`

{
  "public_key": "pub_prod_XXXXXXXXXXXXXXXXXXXX",
  "acceptance_token": "eyJhbGciOi...",
  "tokenization_url": "https://production.wompi.co/v1/tokens/cards"
}

Crear un método de pago

POST /v1/payment-methods

Request body

{
  "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  "type": "CARD",
  "token": "tok_test_1234_abcd",
  "acceptance_token": "eyJhbGciOi...",
  "accept_personal_auth": "eyJhbGciOi...",
  "set_default": true
}

Campo	Tipo	Requerido	Descripción
`customer_id`	string	Sí	Cliente al que pertenece el método
`type`	string	Sí	Tipo de método; actualmente `CARD`
`token`	string	Sí	Token devuelto por Wompi al tokenizar la tarjeta
`acceptance_token`	string	Sí	Token de aceptación de términos de Wompi
`accept_personal_auth`	string	Sí	Token de autorización de datos personales de Wompi
`set_default`	boolean	No	Si se marca como método por defecto del cliente

curl -X POST https://api.rekurra.dev/v1/payment-methods \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{
    "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
    "type": "CARD",
    "token": "tok_test_1234_abcd",
    "acceptance_token": "eyJhbGciOi...",
    "accept_personal_auth": "eyJhbGciOi...",
    "set_default": true
  }'

const res = await fetch("https://api.rekurra.dev/v1/payment-methods", {
  method: "POST",
  headers: {
    Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    customer_id: "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
    type: "CARD",
    token: "tok_test_1234_abcd",
    acceptance_token: "eyJhbGciOi...",
    accept_personal_auth: "eyJhbGciOi...",
    set_default: true,
  }),
});
const paymentMethod = await res.json();

import requests
 
res = requests.post(
    "https://api.rekurra.dev/v1/payment-methods",
    headers={
        "Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX",
        "Content-Type": "application/json",
    },
    json={
        "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
        "type": "CARD",
        "token": "tok_test_1234_abcd",
        "acceptance_token": "eyJhbGciOi...",
        "accept_personal_auth": "eyJhbGciOi...",
        "set_default": True,
    },
)
payment_method = res.json()

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
String body = """
    {
      "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
      "type": "CARD",
      "token": "tok_test_1234_abcd",
      "acceptance_token": "eyJhbGciOi...",
      "accept_personal_auth": "eyJhbGciOi...",
      "set_default": true
    }
    """;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .header("Content-Type", "application/json")
    .POST(HttpRequest.BodyPublishers.ofString(body))
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Text;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var json = """
    {
      "customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
      "type": "CARD",
      "token": "tok_test_1234_abcd",
      "acceptance_token": "eyJhbGciOi...",
      "accept_personal_auth": "eyJhbGciOi...",
      "set_default": true
    }
    """;
var content = new StringContent(json, Encoding.UTF8, "application/json");
 
var response = await http.PostAsync("https://api.rekurra.dev/v1/payment-methods", content);
Console.WriteLine(await response.Content.ReadAsStringAsync());

Response

201 Created — PaymentMethod con state: available.
202 Accepted — PaymentMethod con state: verification_pending (3DS pendiente).

Errores posibles

Status	`error.type`	Causa
`400`	`invalid_request`	Campos faltantes o `token` mal formado
`404`	`invalid_request`	`customer_id` no existe
`422`	`wompi_error`	Wompi rechazó la verificación (micro-cobro fallido)

Listar métodos de pago

GET /v1/payment-methods

Filtro opcional ?customer_id=, más paginación estándar.

curl "https://api.rekurra.dev/v1/payment-methods?customer_id=cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2" \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"

const res = await fetch(
  "https://api.rekurra.dev/v1/payment-methods?customer_id=cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  { headers: { Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" } }
);
const { data } = await res.json();

import requests
 
res = requests.get(
    "https://api.rekurra.dev/v1/payment-methods",
    params={"customer_id": "cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2"},
    headers={"Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"},
)
body = res.json()

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods?customer_id=cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .GET()
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var response = await http.GetAsync("https://api.rekurra.dev/v1/payment-methods?customer_id=cus_01HZXK7QJ5M8Z9X2R3TVQ7A1B2");
Console.WriteLine(await response.Content.ReadAsStringAsync());

Obtener un método de pago

GET /v1/payment-methods/{id}

curl https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2 \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"

const res = await fetch(
  "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  { headers: { Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" } }
);
const paymentMethod = await res.json();

import requests
 
res = requests.get(
    "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
    headers={"Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"},
)
payment_method = res.json()

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .GET()
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var response = await http.GetAsync("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2");
Console.WriteLine(await response.Content.ReadAsStringAsync());

Errores posibles

Status	`error.type`	Causa
`404`	`invalid_request`	El método de pago no existe

Marcar como método de pago por defecto

POST /v1/payment-methods/{id}/default

curl -X POST https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2/default \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"

const res = await fetch(
  "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2/default",
  {
    method: "POST",
    headers: { Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" },
  }
);
const paymentMethod = await res.json();

import requests
 
res = requests.post(
    "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2/default",
    headers={"Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"},
)
payment_method = res.json()

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2/default"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .POST(HttpRequest.BodyPublishers.noBody())
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var response = await http.PostAsync("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2/default", null);
Console.WriteLine(await response.Content.ReadAsStringAsync());

Eliminar un método de pago

DELETE /v1/payment-methods/{id}

curl -X DELETE https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2 \
  -H "Authorization: Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"

await fetch(
  "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
  {
    method: "DELETE",
    headers: { Authorization: "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX" },
  }
);

import requests
 
requests.delete(
    "https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2",
    headers={"Authorization": "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX"},
)

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
 
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2"))
    .header("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX")
    .DELETE()
    .build();
 
HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
 
using var http = new HttpClient();
http.DefaultRequestHeaders.Add("Authorization", "Bearer rk_live_XXXXXXXXXXXXXXXXXXXXXXXX");
 
var response = await http.DeleteAsync("https://api.rekurra.dev/v1/payment-methods/pm_01HZXK7QJ5M8Z9X2R3TVQ7A1B2");
Console.WriteLine(await response.Content.ReadAsStringAsync());

Errores posibles

Status	`error.type`	Causa
`404`	`invalid_request`	El método de pago no existe
`409`	`invalid_request`	Es el único método de pago de una suscripción activa

Customers Subscriptions

Payment methods

El objeto PaymentMethod

Obtener configuración de tokenización

Response — 200 OK

Crear un método de pago

Request body

Response

Errores posibles

Listar métodos de pago

Obtener un método de pago

Errores posibles

Marcar como método de pago por defecto

Eliminar un método de pago

Errores posibles

Response — `200 OK`