Card Update CVV
Refresh the CVV on an already-stored card without re-sending the card number or expiry.
Card verification values cannot be stored, so the CVV captured at tokenization expires while the rest of the card stays valid. Charging a stored card after that point requires the buyer to re-enter their CVV. This endpoint applies that value to the existing card, and the cardToken continues to reference the same card.
PCI scope warning: this endpoint accepts the raw CVV directly on your server, which brings your systems into PCI DSS scope. To stay out of scope, collect it with the client SDK’s CVC element instead, which captures the value inside a Henry Labs-hosted iframe so it never reaches your backend.
Authorizations
Path Parameters
Card token returned when the card was tokenized
"card_live_abc123xyz"
Body
Card verification value (3 digits for Visa/MC, 4 for Amex)
^\d{3,4}$"123"