GET/api/v2/cards/{cardId}

Get detailed card information including sensitive data

Authentication

Send your API key in the x-api-key header on every request.

Request parameters
Field	Type	Required	Description
userId (query)	unknown	No	User ID (mandatory)
cardId (path)	unknown	Yes	Card ID (mandatory)

200 — OK

Response 200 fields
Field	Type	Required	Description
CardNo	string	No	Full card number (PAN) - only available for card details endpoint
CVV	string	No	Card CVV/CVC security code
ExpYear	string	No	Card expiration year (4 digits)
ExpMonth	string	No	Card expiration month (2 digits)
CreatedAt	string (date-time)	No	Created at timestamp (shadows inherited string property with DateTime)
UpdatedAt	string (date-time)	No	Updated at timestamp (shadows inherited string property with DateTime)
Id	unknown	No
UserId	unknown	No
ExternalCardId	string	No
DeliveryAddressId	string	No
Nickname	string	No
CardType	string	No
CardNumber	string	No
ExpiryDate	string	No
Status	CardStatusV2	No
Balance	CardBalanceV2	No
Currency	string	No
VelocityControl	object	No
CardTypeId	unknown	No
CardTypeTierId	unknown	No
TierId	unknown	No
AutoLockEnabled	boolean	No
AutoLockActiveUntil	string (date-time)	No
TransakOrder	string	No
RequiredAmount	string	No
AvailableAmount	string	No
Shortfall	string	No
Message	string	No
Errors	array of InterLaceCheck	No

400 — Bad Request

Response 400 fields
Field	Type	Required
Message	string	No
Code	string	No
Status	unknown	No
ValidationErrors	object	No
Details	string	No

401 — Unauthorized

Response 401 fields
Field	Type	Required
Message	string	No
Code	string	No
Status	unknown	No
ValidationErrors	object	No
Details	string	No

404 — Not Found

Response 404 fields
Field	Type	Required
Message	string	No
Code	string	No
Status	unknown	No
ValidationErrors	object	No
Details	string	No

500 — Internal Server Error

Response 500 fields
Field	Type	Required
Message	string	No
Code	string	No
Status	unknown	No
ValidationErrors	object	No
Details	string	No

curl -X GET "https://{base_url}/api/v2/cards/{cardId}" \
  -H "x-api-key: YOUR_API_KEY"

This page is generated from the live OpenAPI specification and always matches the current API.