HTTP Integration

Use direct HTTP calls if you need full control.

Authentication

Pass your API key in one of the following headers:

• Authorization: Bearer <API_KEY>

• X-API-Key: <API_KEY>

Core endpoints

• POST /tokenize

• POST /detokenize

• POST /tokenize/bulk

• POST /detokenize/bulk

• POST /tokenize/format

• POST /detokenize/format

Base URL:

• Production: https://app.veilio.xyz/api

Tokenize

curl -X POST "$VEILIO_BASE_URL/tokenize" \
  -H "Authorization: Bearer $VEILIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"data":"[email protected]","type":"email"}'

Detokenize

curl -X POST "$VEILIO_BASE_URL/detokenize" \
  -H "Authorization: Bearer $VEILIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"token":"tok_abc123...","reason":"Support ticket resolution"}'

Bulk tokenize

curl -X POST "$VEILIO_BASE_URL/tokenize/bulk" \
  -H "Authorization: Bearer $VEILIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "fields": [
      { "data": "[email protected]", "type": "email" },
      { "data": "[phone]", "type": "phone" }
    ]
  }'

Response and retry strategy

• Handle 429 with exponential backoff

• Read Retry-After header before retry

• Add idempotency in your app for replayed business operations