> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ozura.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Quick Start

# Quick Start

Get from zero to a tokenized card and a proxied request in a few steps.

## Step 1: Get your API key and pub key

**X-API-Key:** Create an account at [Ozura Vault](https://ozuravault.com). Your first project is a **test project** by default — create an application inside it to get your API key. To create a production project, use the project dropdown in the top-left → **Create new project** → enable the **Production** switch.

**X-Pub-Key:** Required only for **production** vault API keys. If you're using a test vault API key (test project), you can omit `X-Pub-Key` entirely. For a production pub key tied to your domain, contact **[ammar@ozura.com](mailto:ammar@ozura.com)**.

Store your API key securely (e.g. in an environment variable) and never expose it in frontend code.

<Note>
  **Vault base URL** — `https://api.ozuravault.com` for both sandbox and production; the environment is determined by your vault key (test vs production project). Note: `vault.ozura.com` is the Vault web app, not the API.
</Note>

## Step 2: Tokenize a card

From your backend, call `POST /tokenize` with the card data. For test vault API keys, only **X-API-Key** is required. For production vault API keys, also include **X-Pub-Key**:

<CodeGroup>
  ```bash Production (X-Pub-Key required) theme={null}
  curl -X POST https://api.ozuravault.com/tokenize \
    -H "Content-Type: application/json" \
    -H "X-API-Key: YOUR_API_KEY" \
    -H "X-Pub-Key: YOUR_PUB_KEY" \
    -d '{
      "type": "card",
      "data": {
        "cardNumber": "4111111111111111",
        "expirationMonth": "12",
        "expirationYear": "2028",
        "cvv": "123"
      }
    }'
  ```

  ```bash Test vault key (no X-Pub-Key) theme={null}
  curl -X POST https://api.ozuravault.com/tokenize \
    -H "Content-Type: application/json" \
    -H "X-API-Key: YOUR_TEST_API_KEY" \
    -d '{
      "type": "card",
      "data": {
        "cardNumber": "4111111111111111",
        "expirationMonth": "12",
        "expirationYear": "2028",
        "cvv": "123"
      }
    }'
  ```
</CodeGroup>

<Info>
  See [Sandbox](/guides/sandbox) for how to create a Test project at ozuravault.com and grab a test vault key.
</Info>

You’ll get back a `token` and, because you sent CVV, a `cvc_session_id`. Store both; you’ll need them for the next step. Full request/response details: **[API Reference → POST /tokenize](/api-reference/vault/tokenize)**.

## Step 3: Process a payment (proxy)

Send the token (and CVC session if you have one) to your payment processor via the proxy so your server never sees raw card data:

```bash theme={null}
curl -X POST https://api.ozuravault.com/proxy/transaction \
  -H "Content-Type: application/json" \
  -H "X-API-Key: YOUR_API_KEY" \
  -d '{
    "token": "tok_...",
    "cvc_session_id": "550e8400-...",
    "proxy_url": "https://api.stripe.com/v1/charges",
    "request_data": {
      "amount": 2000,
      "currency": "usd",
      "source": {
        "number": "${cardNumber}",
        "exp_month": "${expirationMonth}",
        "exp_year": "${expirationYear}",
        "cvc": "${cvv}"
      }
    },
    "http_headers": { "Authorization": "Bearer sk_test_xxx" }
  }'
```

The proxy replaces `${cardNumber}`, `${expirationMonth}`, `${expirationYear}`, and `${cvv}` with real values and forwards the request. Full reference: **[API Reference → POST /proxy/transaction](/api-reference/vault/proxy-transaction)**.

## Step 4: Check audit logs (optional)

In the dashboard or via the audit-logs API you can confirm the tokenization and proxy calls. See [Audit logs](/guides/vault/audit-logs/overview).

## What’s next?

* [Card Payments](/guides/vault/card-payments/overview) — API, Elements, or Checkout for cards.
* [Bank Payments](/guides/vault/bank-payments/overview) — API, Elements, or Checkout for bank accounts.
* [Proxy](/guides/vault/proxy/overview) — How the proxy works and when to use it.
* [Error handling](/guides/vault/errors/overview) — How to handle errors and when to retry.

## Test cards

Use these in sandbox:

| Brand      | Number           | CVC   | Expiry     |
| ---------- | ---------------- | ----- | ---------- |
| Visa       | 4111111111111111 | Any 3 | Any future |
| Mastercard | 5555555555554444 | Any 3 | Any future |
| Amex       | 378282246310005  | Any 4 | Any future |