Skip to main content
GET
Card details

Overview

GET /cards/{id} returns full details of a single card. By default, the card number and CVV are returned as masked or as opaque encrypted tokens (PCI DSS requirement). Append ?reveal=true to receive the cleartext PAN and CVV — every reveal call is audit-logged and visible in your dashboard.

When to use it

  • Display a card’s status and balance to the cardholder.
  • One-time reveal of the PAN/CVV for the cardholder to use the card (e.g. in a “show card” UI immediately after creation).
  • Reconcile your local cache against Cartevo’s source of truth (use ?sync=true).

Prerequisites

  • The card must belong to your company.
  • For ?reveal=true: nothing extra — but be aware every reveal is audit-logged.

Request

Headers

Path parameters

Query parameters

Response

200 — Success (default, masked)

200 — With ?reveal=true

Field reference

About the opaque tokens: When reveal is not set, the number and cvv fields contain encrypted tokens (e.g. tkMplr_...). These are not decryptable client-side and not usable as a real card number. They exist so that field shapes are stable across both response variants. Always store them only if you are sure why.

Error responses

Security and PCI DSS

  • Every call with ?reveal=true is audit-logged.
  • Never store revealed PAN/CVV in your own logs, databases, or analytics.
  • Pass revealed data only over HTTPS, only to the cardholder, and never to third parties.
  • For more details, see the Cards Overview → PCI DSS section.

Code examples

cURL
Node.js (axios)

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

id
string<uuid>
required

Query Parameters

reveal
boolean
default:false

Set to true to reveal unmasked card details (number, CVV). Default is false.

Response

Detailed information for a single card.

success
boolean
Example:

true

statusCode
integer
Example:

200

message
string
Example:

"Data retrieved successfully"

data
object