# Payment tokens

Use payment tokens to reduce the scope of [PCI DSS compliance](https://www.rebilly.com/docs/pci-compliance/).

A payment token can be made using a different authentication scheme (public key authentication), which enables you to create a payment token directly from the browser.
This bypasses the need to send sensitive cardholder info to your servers.
We recommend using this with the FramePay library, which helps you integrate a form into this API resource and create payment tokens.

- [POST /tokens](/docs/dev-docs/api/payment-tokens/posttoken.md): Creates a payment token which can be exchanged into a payment instrument. [FramePay](https://www.rebilly.com/docs/dev-docs/framepay) is the recommended way to create a payment token because it minimiz
- [GET /tokens](/docs/dev-docs/api/payment-tokens/gettokencollection.md): Retrieve a list of tokens.
- [GET /tokens/{token}](/docs/dev-docs/api/payment-tokens/gettoken.md): Retrieves a token with a specified ID.
- [POST /digital-wallets/validation](/docs/dev-docs/api/payment-tokens/postdigitalwalletvalidation.md): Validates a digital wallet session. We recommend using [FramePay](https://www.rebilly.com/docs/dev-docs/framepay) to validate a digital wallet session.