Yes, the credit card number fields of the API forms accept “password” type input. Despite the fact that the credit card entered will not be rendered on the screen, the data entered will be relayed just fine.