American Express Token Service

Overview

American Express Token Service replaces card numbers with payment tokens for online and mobile commerce. It is best suited to issuers, merchants, and payment partners operating within the American Express network. Its combination of token controls and lifecycle management is useful, but market access and certification requirements may rule it out for some teams.

The service covers card-on-file payments, digital wallets, Click to Pay, virtual cards, browser autofill card numbers, and digital or numberless cards. Card-on-file tokenization focuses on stored e-commerce credentials, including recurring charges and subscriptions.

Key features

Token controls and provisioning

Tokens are unique substitutes for payment card numbers and can be restricted by retailer, use count, lifetime, and other variables. That makes them more controllable than simply storing reusable card credentials, and the service follows EMVCo Payment Tokenization specifications. During provisioning, issuers can assess whether a card is active, suspected of fraud, eligible for tokenization, and associated with the card member requesting the token.

Lifecycle management

When a card is replaced, lifecycle management can keep its tokens current, reducing the need for card members to update stored payment details themselves. The lifecycle application supports Apple Pay, Google Pay, Samsung Pay, Card-on-File Tokenization, and Click to Pay. That range is useful for payment programs spanning wallet and merchant-stored credentials, though network authorization certification is required for digital wallet and card-on-file transactions.

Merchant infrastructure and API

Merchants storing tokens instead of card credentials may be able to reduce PCI-compliant infrastructure needs and PCI audit requirements. The Token Service Cryptogram API provides the channel for eCommerce Cryptogram, which supports dynamic cryptographic authentication for e-commerce and card-on-file tokenization. The service uses a vendor-hosted token vault, supports detokenization through an API, and is deployed in the cloud.

Pricing

The American Express Token Service plan is free. No deployment or use fees are stated for the plan, but that does not make access universal: availability varies by market, and issuer, merchant, acquirer, or service-provider enablement is required. There is no free trial. Market availability is handled through an American Express relationship manager, so this is a network-connected option rather than a self-serve tokenization product.

Platforms

Platforms include Android, iOS, web, and API. Payment methods include payment cards, card-on-file credentials, digital wallets, wearables, Click to Pay, and QR code payments. The broad channel coverage suits programs that need to support multiple digital payment experiences, subject to enablement and certification.

Who it's for

Issuers seeking token provisioning with eligibility and fraud checks, merchants storing credentials for repeat online payments, and payment partners supporting wallet or Click to Pay use cases are the clearest fit. Merchants can benefit from reduced exposure to stored card credentials, while issuers gain lifecycle management that can keep credentials usable through card replacement. Teams without an American Express relationship or those needing an immediately deployable, market-agnostic service should look elsewhere.

Pros and cons

• Pros: Tokens can be scoped by retailer, use count, and lifetime, providing practical controls over credential use.
• Pros: Provisioning checks and card-replacement lifecycle support address both eligibility and ongoing credential upkeep.
• Pros: The token vault, detokenization API, cryptogram API, and multiple wallet and stored-credential use cases cover a broad payment workflow.
• Cons: Market availability and relationship-manager enablement make access dependent on network reach and coordination.
• Cons: Network authorization certification is required for digital wallet and card-on-file transactions, adding a qualification step.

Alternatives

Choose Very Good Security if you want a paid tokenization option with a free plan and a published Starter Package at $1,000 a month. Basis Theory is another paid alternative, with a Standard platform plan at $995 a month and 20,000 tokens included; its additional-token charge and payload and retention limits may matter when estimating usage.

Cashfree Token Vault is another paid option. FIS Data Integrity Manager is a paid, web-based alternative without a free plan. Purse Vault has custom pricing. Mastercard Decision Intelligence has custom pricing. DeloPay offers a Power plan at $2.25 a month, billed at 2.25% per transaction for monthly volume from $100,000 to $500,000. NORBr Network Tokenization is another paid API and web option. Browse the Payment Tokenization Software list for more choices.

Verdict

American Express Token Service is a strong fit for issuers and merchants already positioned to work with the network, especially those needing scoped tokens, provisioning risk checks, and automatic credential upkeep. Its breadth is a reason to choose it; market-dependent availability and certification are the main reasons to seek a more directly accessible alternative.