# Cards (/en/docs/cartao)

The Credit Card API is the API you use to charge cards in your e-commerce, app or platform. A single integration covers the whole charge lifecycle: real-time authorization and capture, installments, 3D Secure authentication, risk analysis on PayZu's antifraud engine, recurring charges and refunds.

<Mermaid
  chart="`
flowchart LR
  Sua[&#x22;Your application&#x22;] <--> API[&#x22;PayZu Card API&#x22;]
  API --> CH[&#x22;Charges&#x22;]
  API --> TDS[&#x22;3D Secure&#x22;]
  API --> AF[&#x22;Antifraud&#x22;]
  API --> REC[&#x22;Recurrence&#x22;]
  API --> WH[&#x22;Webhooks&#x22;]

  click CH &#x22;/docs/cartao/endpoints/charges/post_charges&#x22; &#x22;POST /charges&#x22;
  click TDS &#x22;/docs/cartao/three-d-secure&#x22; &#x22;3D Secure&#x22;
  click AF &#x22;/docs/cartao/antifraud&#x22; &#x22;Antifraud&#x22;
  click REC &#x22;/docs/cartao/recurrence&#x22; &#x22;Recurrence&#x22;
  click WH &#x22;/docs/cartao/webhooks&#x22; &#x22;Webhooks&#x22;

  style API fill:#14ce71,stroke:#0eb464,color:#ffffff
`"
/>

## Where to start [#where-to-start]

<Cards>
  <Card title="Getting started" href="/docs/cartao/getting-started" description="From the mTLS certificate to your first approved charge in the sandbox." />

  <Card title="Endpoints" href="/docs/cartao/endpoints" description="Complete reference for token, charges and recurrences." />

  <Card title="3D Secure" href="/docs/cartao/three-d-secure" description="Buyer authentication with the issuing bank." />

  <Card title="Antifraud" href="/docs/cartao/antifraud" description="Risk analysis on PayZu's antifraud engine, integrated into the API." />

  <Card title="Recurrence" href="/docs/cartao/recurrence" description="Recurring charges managed by the API itself." />

  <Card title="Webhooks" href="/docs/cartao/webhooks" description="Charge status notifications via postbackUrl." />

  <Card title="Status and reasons" href="/docs/cartao/transaction-status" description="Transaction status, reasons and return codes." />

  <Card title="Test cards" href="/docs/cartao/test-cards" description="Card numbers to simulate transactions in the sandbox." />
</Cards>

## Environments [#environments]

| Environment    | Base URL                          |
| -------------- | --------------------------------- |
| **Production** | `https://api.payzu.io/v1`         |
| **Sandbox**    | `https://api.sandbox.payzu.io/v1` |

<Callout type="info">
  Authentication combines &#x2A;*mTLS (Mutual TLS)** with a **Bearer token**: the client certificate provided by PayZu accompanies every call and the token is obtained via [`POST /token`](/docs/cartao/endpoints/token/post_token). This mechanism guarantees client identity and communication security. See the step by step in [Authentication](/docs/cartao/authentication).
</Callout>

<Callout type="warn">
  All monetary values in the API (`amount`, `unitPrice`) are expressed in **cents**. Exchange rates (`rate.bid`, `rate.ask`) are the exception: they are decimal numbers.
</Callout>

## Other PayZu products [#other-payzu-products]

<QuickLinks>
  <QuickLink href="/docs/pix-processamento" title="Pix Processamento" />

  <QuickLink href="/en/docs" title="All products" />
</QuickLinks>

## Support [#support]

Ran into a problem or have an integration question? Write to [integracao@payzu.com.br](mailto:integracao@payzu.com.br).