> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ozura.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Proxy Service

# Proxy Service

The proxy lets you send payment requests to your PSP (Stripe, Elavon, etc.) **without your servers ever seeing raw card data**. You send a token (and optional CVC session ID), the request body with placeholders like `${cardNumber}`, and the proxy injects the real card data and forwards the request to the PSP.

Card and bank payment flows both use the proxy to send tokenized data to your processor. See [Card Payments](/guides/vault/card-payments/overview) and [Bank Payments](/guides/vault/bank-payments/overview) for the full journey (API, Elements, or Checkout).

## How it works

1. Your backend calls **POST /proxy/transaction** with a `token`, `proxy_url` (PSP endpoint), and `request_data` containing placeholders.
2. Vault detokenizes the card and replaces placeholders (`${cardNumber}`, `${expirationMonth}`, `${expirationYear}`, `${cvv}`) in the body.
3. Vault forwards the request to the PSP with your `http_headers` (e.g. PSP API key).
4. The PSP response is returned to you. Your server never sees the card number or CVV.

## Why use the proxy

* **PCI** — You don’t handle card data; scope stays with Vault and the PSP.
* **Security** — No PAN or CVV in your logs or memory.
* **Simplicity** — One call: token + placeholders + PSP URL.

## Endpoint and formats

* **Endpoint:** `POST /proxy/transaction`
* **Content types:** JSON, form-encoded, or XML — see [JSON](/guides/vault/proxy/json), [Form-encoded](/guides/vault/proxy/form-encoded), [XML](/guides/vault/proxy/xml).
* **CVC:** If you need to send CVV, tokenize with `cvv` and pass the returned `cvc_session_id` in the proxy request. See [CVC sessions](/guides/vault/proxy/cvc-sessions).

Full request/response reference: **[API Reference → POST /proxy/transaction](/api-reference/vault/proxy-transaction)**.

## Next steps

* [JSON requests](/guides/vault/proxy/json) — Most common format.
* [CVC sessions](/guides/vault/proxy/cvc-sessions) — Using CVV in proxy calls.