This is the standard way to create a purchase, where card data is never collected by the merchant. Use this method when tokenizing cards through Bamboo's components (Tokenization Form, Hosted Fields, or any flow where the merchant never handles raw card data). You send a token (CommerceToken or TransactionToken) instead of the card number.

✅

This is the right endpoint for non-PCI merchants. If your business is PCI-certified and you collect raw card data, use Create a Purchase (PCI) instead — the request body is the only difference.

📘

Review the Create a Purchase Integration Guide for flow descriptions, parameter definitions, capture rules, redirection behavior, and response handling.

Endpoint

Staging
https://api.stage.bamboopayment.com/v3/api/Purchase

Production
https://api.bamboopayment.com/v3/api/Purchase

This endpoint is used when the purchase is created using a token (CommerceToken or TransactionToken).