Get Card Details | Bitnob API Reference

Get Card Details (Sensitive)

Retrieve sensitive card data including the full card number, CVV, and expiry date. This endpoint returns PCI-sensitive information and should be used with extreme care.

Security Warning

Only call this endpoint when absolutely necessary. Never log or store the full card number or CVV. Display card details securely in the UI and consider implementing additional verification (e.g., 2FA) before showing details to end users.

Get card details (secure)GET/api/cards/:cardId/secure

Request

Call GET /api/cards/:cardId/secure to fetch the sensitive card credentials. Treat the response as PCI-regulated.

Get Card Details

Path Parameters

successBoolean

Top-level flag indicating whether the request was processed successfully.

messageString

Human-readable status message describing the outcome.

data.detailsObject

Envelope wrapping the sensitive card credentials.

data.details.card_idUUID

Identifier of the card whose credentials are being returned.

data.details.card_numberString

Full 16-digit PAN. PCI-sensitive — do not log, store, or transmit outside a PCI-compliant surface. Render directly to the end-user's device and drop immediately after use.

data.details.cvvString

3-digit card verification value. PCI-sensitive — apply the same handling rules as card_number.

data.details.expiry_monthString

Two-digit expiry month, zero-padded (e.g. '04').

data.details.expiry_yearString

Four-digit expiry year (e.g. '2029').

data.details.nameString

Name associated with the card (cardholder name).

metadata.request_idString

Unique identifier for this API request, useful for log correlation and support.

timestampDate

Top-level RFC 3339 / ISO 8601 server timestamp of when the response was generated (UTC).

PCI-Sensitive Payload

This response carries the unmasked PAN and CVV — treat the entire payload as PCI-regulated. Never log it, never persist it, and never forward it to non-compliant services. Render directly in an iframe or PCI-scoped surface and discard immediately.

Response Body