API Reference
Get card sensitive details
Returns the full card number and CVV, encrypted to your RSA public key. The decrypted text is {"pan": "...", "cvv": "..."}; it has no expiry. Decrypt it only in a secure client, and never log it.
Headers
Your RSA public key in PEM form (PUBLIC KEY or RSA PUBLIC KEY), then base64-encoded with the standard alphabet. Use a key of 2048 bits or more.
Path Parameters
ID of the card
Responses
| Status | Description |
|---|---|
200 |
The encrypted details |
400 |
Missing or invalid key header, or an unknown card |
200 response
Decrypt encrypted_key with your RSA private key (RSA-OAEP, SHA-256) to get an AES-256 key. Then decrypt ciphertext with AES-256-GCM using nonce (12 bytes); the last 16 bytes of ciphertext are the tag. All three values are standard base64.
400 response
What went wrong
{
"data": null,
"error": "x_client_public_key is required"
}
Authorization
- ApiKeyAuth
Was this page helpful?