Request a Transfer In token

A Transfer In token will allow you to start a Transfer In transaction.

Token expiration
Tokens will expire in 30 minutes and can be used only for a single transaction (even if the transaction was wrong). You will need to request a new token when it expires.

🇨🇴 Colombia — Bre-B flow (real-time QR payments)

To pay through Bre-B instead of the traditional PSE redirect, send the optional processor object: "processor": { "name": "Bre-B Credibanco Processor", "flowType": "QR" }. Copy both values exactly as returned by Get Transfer In configuration (GET /transfer/v1/config). When you send processor, only amount and currency remain required — callbackUrl, userType, documentType, documentNumber, paymentDescription and email become optional, and bankId does not apply.

You do not need to call Get Bank List first: the customer authorizes the payment by scanning a QR in their banking app instead of choosing a bank.

Bre-B requires the processor enabled on your MID — contact your account executive to activate it. The traditional PSE integration is unchanged: a token without processor behaves exactly as before.

Direct API integrations only: request the token from your backend. Kajita and Kushki.js do not support the processor object yet.

Migrating from the BETA contract

If you integrated Bre-B during the BETA using the flow object ({ "flow": { "processorName": "BRE-B", "type": "QR" } }), replace it with the processor object shown above. The flow object is superseded by this release.

curl --location 'https://api-uat.kushkipagos.com/transfer/v1/tokens' \ --header 'Public-Merchant-Id: 20432ef8ccd94r51b36e5b738a81f511' \ --header 'Content-Type: application/json' \ --data-raw '{ "bankId": "1022", "amount": { "subtotalIva": 100000, "subtotalIva0": 0, "iva": 10000, "extraTaxes": { "tasaAeroportuaria": 0, "agenciaDeViajes": 0, "iac": 0 } }, "callbackUrl": "https://kushki.com", "userType": "1", "documentType": "NIT", "documentNumber": "1716458334", "paymentDescription": "Description of the payment.", "email": "user@example.com", "currency": "COP" }'

Token expiration#

Request

Responses

Token expiration