---
title: "Reveal card details"
method: POST
path: "/v1/cards/{card_id}/reveal"
tags: ["Payment Cards"]
---

# Reveal card details

`POST /v1/cards/{card_id}/reveal`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/cards/{card_id}/reveal`
- Auth: HTTP bearer

Reveal full card details (PAN/CVV or gift-card redemption). Humans must re-authenticate with their account password via the `X-Auth-Confirm` header. Agents may reveal only when a human has enabled a per-card reveal policy. Once revealed, the card can be used anywhere up to its balance — 1Claw has no further control.

## Path parameters

- `card_id` string, uuid, required

## Headers

- `X-Auth-Confirm` string

## Response `200`

Revealed card details (sensitive)

- CardRevealResponse: Revealed card details — sensitive. Returned only by the reveal endpoint.
  - `id` string, uuid, required
  - `pan` string
  - `cvv` string
  - `exp_month` integer
  - `exp_year` integer
  - `brand` string
  - `redemption` object: Gift-card redemption payload (URL/code/PIN) when applicable.
  - `disclaimer` string, required

## Other responses

- `403`: Insufficient permissions
- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)