curl --request POST \
  --url https://services.sandbox.pagosapi.com/toucan/tokens/transact/{tokenRefId} \
  --header 'Authorization: Bearer <token>' \
  --header 'x-merchant-id: <x-merchant-id>'

{
  "cryptogram": "<string>",
  "token": "<string>",
  "eci": "<string>",
  "metadata": "<string>",
  "expirationDate": {
    "year": "<string>",
    "month": "<string>"
  }
}