Card details
Cards
Get Card Details
Retrieve full details of a single card. Optionally reveal the unmasked card number and CVV (audit-logged).
GET
Card details
Overview
GET /cards/{id} returns full details of a single card. By default, the card number and CVV are returned as masked or as opaque encrypted tokens (PCI DSS requirement). Append ?reveal=true to receive the cleartext PAN and CVV — every reveal call is audit-logged and visible in your dashboard.
When to use it
- Display a card’s status and balance to the cardholder.
- One-time reveal of the PAN/CVV for the cardholder to use the card (e.g. in a “show card” UI immediately after creation).
- Reconcile your local cache against Cartevo’s source of truth (use
?sync=true).
Prerequisites
- The card must belong to your company.
- For
?reveal=true: nothing extra — but be aware every reveal is audit-logged.
Request
Headers
Path parameters
Query parameters
Response
200 — Success (default, masked)
200 — With ?reveal=true
Field reference
About the opaque tokens: Whenrevealis not set, thenumberandcvvfields contain encrypted tokens (e.g.tkMplr_...). These are not decryptable client-side and not usable as a real card number. They exist so that field shapes are stable across both response variants. Always store them only if you are sure why.
Error responses
Security and PCI DSS
- Every call with
?reveal=trueis audit-logged. - Never store revealed PAN/CVV in your own logs, databases, or analytics.
- Pass revealed data only over HTTPS, only to the cardholder, and never to third parties.
- For more details, see the Cards Overview → PCI DSS section.
Code examples
cURL
Node.js (axios)
Related
- Cards Overview — security model and statuses.
GET /cards/{id}/transactions— transaction history for this card.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Query Parameters
Set to true to reveal unmasked card details (number, CVV). Default is false.