Get Secure Card Details

Security-critical endpoint. Call this only from a secure server environment. Never log the response, never return it to a browser or mobile client directly, and never persist the PAN/CVV in your own systems.

Request

curl --request GET \
  --url "$baseUrl/organization/cards/{id}/details" \
  --header 'x-api-key: YOUR_API_KEY'

Response

{
  "success": true,
  "statusCode": 200,
  "message": "Secure details retrieved",
  "data": {
    "pan": "4000000000004242",
    "cvv": "123"
  }
}

When to use this

Only when you have a specific, secure need for the full card number — e.g., displaying it once inside a PCI-compliant iframe for the cardholder to view. For everything else (listing, status checks, dashboards), use Get Card instead.