curl --request POST \
  --url https://services.prod.pagosapi.com/toucan/tokens/transact/{tokenRefId} \
  --header 'Authorization: Bearer <token>'

{
  "cryptogram": "<string>",
  "token": "<string>",
  "eci": "<string>",
  "metadata": "<string>",
  "expirationDate": {
    "year": "<string>",
    "month": "<string>"
  }
}