You use the card token in the request body, instead of the card number.
The card token is a randomly generated string linked to a card saved securely within the Judopay Card Vault. If validation is successful, a card token is returned as part of the response object.
You will not take on additional PCI scope, as the card token does not have any sensitive card information, so it can be stored in your database.
This token can then be stored and used for a payments/preauths request in the future, using the Web SDK’s Token Payment functionality.