TokenExchange Connect is a client‑side JavaScript library from MagTek that enables secure, browser‑based tokenization of sensitive payment data before it ever reaches your servers. Part of the Magensa TokenExchange ecosystem, TokenExchange Connect allows merchants, ISVs, and developers to capture cardholder data directly from a web browser and exchange it for a PCI‑compliant, vaultless token—without requiring the underlying PAN to pass through the merchant's infrastructure. The library works by establishing a direct, encrypted connection between the end‑user's browser and Magensa's PCI‑certified TokenExchange service, where the card data is tokenized in real time. The resulting token can then be safely stored or transmitted to your application for subsequent payment operations (e.g., Sale, Auth, Capture) via the TokenExchange REST API or Magensa Payment Protection Gateway (MPPG). TokenExchange Connect supports all major web browsers, integrates easily with existing checkout forms, and helps reduce PCI DSS scope by eliminating inbound cardholder data handling. The service is ideal for e‑commerce websites, recurring billing portals, and any web‑based application requiring secure card capture.

The official MagTek TokenExchange Connect support page is a central hub containing all the resources you'll need. There you can find product brochures (including the Magensa TokenExchange Connect overview), programmer's manuals and API references (covering the TokenExchange Connect JavaScript library and integration with TokenExchange v2.0), software downloads including the latest version of the TokenExchange Connect library and sample code, developer guides with step‑by‑step integration examples, a comprehensive FAQ section, and instructional videos.

TokenExchange Connect Support Page

Magensa's Account Management API allows Resellers to manage their merchants' account. The goal is to provide an API that parallels the current Reseller Portal UI.

Web-based Demos

This archive page provides access to historical and reference documentation for legacy Magensa web services, security architectures, and integration tools, including decryption services, payment gateways, tokenization, remote device management, and browser-based middleware that help developers securely process transactions and manage MagTek hardware.

Archive Services

This page is your entry point for integrating with MPPG/Unigate, Magensa's API for omni-commerce payment processing across both card-present and card-not-present channels. Use the Unigate API reference below to explore transaction types, credentials, and processor responses in an interactive Postman collection, or open a web-based demo to watch the full flow in action — from a MagTek reader, through the browser, to the gateway and back — with or without physical hardware.

Unigate API

Wedget™ is a developer tool and keyboard extension application for both iOS and Android mobile devices that simplifies card data acquisition from MagneSafe® Secure Card Reader Authenticators (SCRAs). Instead of requiring complex programming with a full SDK, Wedget allows developers to securely capture and process sensitive payment and ID card data by simply creating a standard text box in their application workflow. When the user selects the Wedget keyboard and presents a card, the extension acts as a bridge, parsing the data into a JSON format that the target application can then pass along to MagTek’s Magensa Services for processing. The application supports a wide range of MagTek devices, including the eDynamo and DynaFlex II Go..

The official MagTek Wedget support page is a central hub containing all the resources you'll need. There you can find product brochures (including the Wedget Brochure, the MagTek Hardware and Magensa Gateway Solutions Product Catalog, and the Magensa Services Overview), user manuals (such as the Wedget Installation and Operation Manual for both iOS and Android), and developer resources (including the Pursuing L3 Certification developer guide).

Wedget Support

Magensa is MagTek's cloud-based payment protection gateway that secures sensitive data and processes transactions across in-person, online, and mobile channels using advanced tokenization, dynamic encryption, and authentication services. On this page, developers and integrators can explore detailed documentation and code examples for key Magensa offerings, including API documentation, code samples in multiple languages, developer guides covering EMV acceptance and Level 3 certification, and links to portals for merchants and resellers to manage accounts, view transactions, and generate reports.

Magensa API Documentation and Code Demos

MagneFlex is a comprehensive suite of software integration tools from MagTek, designed to dramatically speed up time-to-market and reduce the complexities and headaches that come with payment device certification compliance. At its core, MagneFlex serves as a bridge that drives the hardware, interfaces with your POS application, and issues the commands to pack, parse, and send transaction data out for processing. Available as both a browser-based application and middleware,

MagneFlex includes several variants to suit different development environments:

• MagneFlex Navy is a full-function HTML browser for Windows that integrates device drivers to control MagTek payment devices from an HTML over HTTP(S) context.

The MagneSafe® Security Architecture (MSA) is MagTek's core digital identification and authentication framework, designed from the ground up to safeguard consumers and their personal data in payment, access, and other high-value electronic transactions. Exceeding standard PCI regulations, MSA integrates multiple layers of defense: strong encryption, secure tokenization, counterfeit detection, tamper recognition, data relevance and integrity, and dynamic digital transaction signatures—all working together to validate and protect each component of a transaction. This architecture is supported across the entire payment ecosystem, including MagTek terminals, devices from Verifone, Hypercom, and Ingenico, ATMs, PCs, and mobile platforms like iOS and Android.

The official MagTek MagneSafe Security Architecture support page is a central hub for key documentation and updates. There you can find a comprehensive White Paper ("Overview and Industry") that explores the security challenges in the payment industry and how MSA addresses them. While there are no software downloads, FAQs, or videos available at the moment, the page includes an RSS feed you can subscribe to for notifications on the latest software, SDKs, APIs, and demo programs related to MSA.

Magensa Decrypt & Forward (DaF) is a PCI-DSS-certified cloud gateway that acts as a secure "wrapper": it decrypts data captured by a MagTek MagneSafe reader, injects the decrypted card fields into a payload of your choosing, and forwards the request to any third-party endpoint on your behalf — even one with no decryption service of its own. Built on the MagneSafe Security Architecture with L3-certified hardware, TDEA/AES encryption, and DUKPT key management, it handles every major payment type — magstripe, EMV contact and contactless, NFC wallets like Apple Pay and Google Pay, QR codes, gift cards, and more — and is certified with the major US processors, giving ISVs and integrators a single integration point that speeds time to market and shrinks PCI scope. Use the references below to explore the DaF API and related payment operations, grab sample code from GitHub, or open the support hub for manuals, brochures, developer guides, and videos.

Decrypt & Forward APIs

The Magensa Payment Protection Gateway (MPPG) is a PCI‑DSS certified cloud payment gateway service built on the MagneSafe® Security Architecture and designed to make PCI compliance easier, safer, and faster. It supports traditional payment transactions including Sale, Auth, Capture, Void, and Refund to integrated processor endpoints. MPPG accepts a comprehensive range of payment types: magnetic stripe, EMV contact and contactless, NFC mobile wallets (including Apple Pay® and Google Pay™), QR codes, barcodes, manual entry, invoicing, subscriptions, cards on file, in‑app payments, touch‑free and unattended payments, as well as PayPal and Venmo. It is built for ISVs, ISOs, VARs, resellers, and integrators who supply payment processing solutions that work with both encrypted and decrypted data. MPPG secures transactions across retail, healthcare, restaurant, hospitality, government, education, and transportation industries. The gateway is certified with L3 processors, and a single integration with Magensa provides access to multiple processor endpoints. Additional features include hosted payment pages and iFrames for e‑commerce and in‑app payments, touch‑free QR‑based pay‑at‑the‑table, payment request links, and cross‑merchant tokens for payment credentials on file.

The official MPPG Service support page is a central hub containing all the resources you'll need. There you can find product brochures (including the MPPG overview brochure, the 2024 Hardware and Gateway Solutions Catalog, and the Magensa Services Overview); programmer's manuals covering the MPPG v4.0 API, Payment Request API, PayPal/Venmo API, and Google Pay/Apple Pay in‑app integration; user manuals for the Merchant Portal and Reseller Portal; developer guides for omnichannel development and L3 certification; sample code and developer sandbox tools on GitHub; XML/SOAP sample requests for both MPPG v3 and v4; white papers and use case studies (including Quantic, CryptoPay car wash, and laundromat); an RSS feed for software, SDKs, API, and demo program notifications; a Developer Portal with dedicated resources for Apple Pay, Google Pay, Payment Request, PayPal/Venmo, and Unigate MPPG v5+; a comprehensive FAQ section; and instructional videos.

TokenExchange is MagTek’s cloud-based, PCI-DSS certified tokenization service that removes sensitive data—like credit card PANs or PII—from your environment by replacing it with dynamically generated, vaultless tokens. Accessed via REST APIs, the service supports three token types: Payment Tokens (for eCommerce, card-on-file, and standard payment operations like Sale or Refund), Transaction Tokens (which create secure, tokenized payment links or QR codes for invoicing and remote collections), and PII Tokens. Built on the MagneSafe Security Architecture, tokens are created using AES/3DES encryption within an HSM and a DUKPT key management scheme, and are resilient against quantum computing attacks. The service is recommended for resellers, VARs, ISVs, and developers using the Magensa Payment Protection Gateway (MPPG) or Decrypt and Forward (DaF) service. 

The official MagTek TokenExchange support page is a central hub containing all the resources you'll need. There you can find product brochures (including the MagTek Hardware and Magensa Gateway Solutions Product Catalog, the Magensa Services Overview, and the Magensa TokenExchange brochure), programmer’s manuals covering Tokenization operations with sample SOAP requests/responses and the Token v2.0 REST API, developer documentation for the TokenExchange Connect client‑side JavaScript, API specifications and integration guides for MPPG v3 and v4, developer manuals for PayPal/Venmo and in‑app Apple Pay/Google Pay, as well as a comprehensive FAQ section and instructional videos.

TokenExchange Support

MagTek Remote Services is a cloud-based device management platform from Magensa that enables organizations to remotely configure, update, and maintain MagTek payment readers already deployed in the field. Traditionally, updating encryption keys or firmware on a device required physically removing it from the payment environment and shipping it back to the factory—a costly and time-consuming process that led to significant downtime. MagTek Remote Services eliminates this need by allowing administrators to perform remote key injection, device configuration, firmware updates, EMV tag and CAPK loading, and even run batch scripts—all from a central location without ever touching the terminal. The platform is built on top of the MagTek Reader Management System (RMS), a suite of applications and source code that automates configuration and updates across large, geographically distributed fleets of MagTek readers.

Remote Services is available in three versions:

• RS2, which supports legacy devices such as the uDynamo, iDynamo 5, cDynamo, eDynamo, DynaMAX, tDynamo, kDynamo, iDynamo 6, MICRSafe, and the DynaPro family.

• RS3, which supports the newer DynaFlex and DynaProx product lines.

• RMS, which supports a broader range including the DynaFlex II PED, DynaFlex II SCR, DynaFlex II Go, and DynaProx. MagTek’s Key Injection Facility and Magensa’s Remote Key Injection services are PCI PIN compliant and undergo regular external audits to maintain Attestation of Compliance.

The official MagTek Remote Services support page is a central hub containing all the resources you'll need. There you can find product brochures (including the Magensa Remote Services brochure, the MagTek Hardware and Magensa Gateway Solutions Product Catalog, and the Magensa Services Overview), programmer’s manuals and API references (including the Magensa Web Services Remote Services Operations Manual for both PPSCRAs and SCRAs, as well as the MICRSafe Remote Services Reference Manual), software downloads and configuration tools (including the MagTek Reader Configuration Program for Windows ClickOnce, Android, and iOS devices, which leverages Remote Services 2 and 3 web services), user manuals and installation guides (covering the Remote Services App for configuration and key injection, as well as the Virtual Terminal user manual), a comprehensive FAQ section, and instructional videos.

This page will help merchants and developers to integrating Apple Pay into an iOS app (In-App) or web app (In-Web). The Apple Pay tokens produced from the merchant's app will be processed through Magensa Payment Protection Gateway (MPPG v4/v3).

Magensa Decrypt is a PCI-DSS-certified cloud service that performs centralized decryption of data captured by MagTek MagneSafe readers — returning decrypted card data, MagnePrint scores, and transaction IDs without that sensitive data ever touching your own environment. It handles anything a MagneSafe reader encrypts, from full card swipes to individually encrypted fields, and is frequently paired with the Decrypt & Forward (DaF) service to route decrypted payloads on to third-party endpoints. Use the references below to explore the Decrypt web service and related MPPG payment operations, grab sample code from GitHub, or open the support hub for manuals, brochures, FAQs, and videos.

Decrypt APIs