TAP Card SDK
Pay with a credit card
SDK creates tok_... → POST /api/charges. After pay / 3DS you land on /result.html. Backend truth is the webhook (PostUrl).
Sandbox card
Mastercard 3DS 5123450000000008 · expiry 01/39 · CVV 100 · any name on card
Each tok_ can be charged only once — re-enter the card if TAP says source already used.
Published server: site must be https:// (not http), and your domain should be allowed in the TAP dashboard for Card SDK. Prefer the self-hosted script /js/tap-card-sdk.js if the CDN is blocked.