Hi, I’m working on integrating CyberSource in sandbox with the Node.js SDK and I’m consistently getting a 403 Forbidden response when attempting to create a payment token.

Basic setup:

• Sandbox environment

• Node.js REST SDK

• Tokenization endpoint per docs

I’ve verified credentials, merchant ID, and environment configuration. No useful error body is returned, so debugging is difficult.

Questions:

1. Is this a known issue with the sandbox environment?

2. Are there additional headers or configuration steps required for tokenization?

3. Any working Node.js example would be very helpful.

Thanks.