Square will not let you mint a card nonce from stored card data

TL;DR

Do not try to generate a Square card nonce from stored card numbers on your server: there is no endpoint for it, and that is deliberate. Square keeps raw card data out of merchant systems entirely, so nonces only come from the SqPaymentForm in the buyer's browser.

Steps

1. Do not try to generate a Square card nonce from stored card numbers on your server: there is no endpoint for it, and that is deliberate. Square keeps raw card data out of merchant systems entirely, so nonces only come from the SqPaymentForm in the buyer's browser. If your flow needs server-side charging, tokenize once through the payment form, attach the card to a customer, and charge the customer card id from then on.

When to use

You are seeing this: Do not try to generate a Square card nonce from stored card numbers on your server: there is no endpoint for it, and that is deliberate. Use this skill when you run into "Square will not let you mint a card nonce from stored card data".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Source: Stack Overflow #37065795: A developer tried to generate a Square card_nonce server-side from card details stored in their database using a raw REST call, bypassing SqPaymentForm, and got errors. The answer states Square designed the API so merchant sites never store, process, or transmit raw cardholder data, which makes it impossible to mint a card nonce outside SqPaymentForm. There is no server-side nonce endpoint by design.

Verified resolution: Do not try to generate a Square card nonce from stored card numbers on your server: there is no endpoint for it, and that is deliberate. Square keeps raw card data out of merchant systems entirely, so nonces only come from the SqPaymentForm in the buyer's browser. If your flow needs server-side charging, tokenize once through the payment form, attach the card to a customer, and charge the customer card id from then on.

Source URL: https://stackoverflow.com/questions/37065795