curl --request POST \
--url https://api.getovra.com/v1/cua/autofill-tokens \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"intentId": "<string>",
"cardId": "<string>",
"merchantOrigin": "https://shop.example.com",
"amountCentsMax": 5000000
}
'{
"aft_id": "aft_a1b2c3d4e5f6",
"expires_at": "2023-11-07T05:31:56Z"
}Mints aft_* token (30s TTL, single-use) bound to (intent, card, merchant_origin, amount_cents_max). The CUA harness later redeems via X-CUA-Harness-Secret to fetch the decrypted DPAN + cryptogram for CDP Input.insertText form-fill. The LLM never sees card data.
curl --request POST \
--url https://api.getovra.com/v1/cua/autofill-tokens \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"intentId": "<string>",
"cardId": "<string>",
"merchantOrigin": "https://shop.example.com",
"amountCentsMax": 5000000
}
'{
"aft_id": "aft_a1b2c3d4e5f6",
"expires_at": "2023-11-07T05:31:56Z"
}Documentation Index
Fetch the complete documentation index at: https://docs.getovra.com/llms.txt
Use this file to discover all available pages before exploring further.
API key (sk_sandbox_* / sk_test_* / sk_live_*) or Agent token (at_* / at_dlg_*)