---
title: "Get a PAN JWT token"
method: GET
path: "/v3/spend/cards/{cardId}/pan-jwt"
tags: ["cards"]
---

# Get a PAN JWT token

`GET /v3/spend/cards/{cardId}/pan-jwt`

## Request

- Base URL: `https://gateway.stage.bill.com/connect`
- URL: `https://gateway.stage.bill.com/connect/v3/spend/cards/{cardId}/pan-jwt`
- Auth: none declared

Get a JWT token for a vendor card.

The JWT token for a card contains all the information required for retrieving details about the card (16-digit PAN, CVV, and expiration date). The JWT token lifespan is 5 minutes. 
You can decode the JWT token to get PAN details with `POST https://app-dev-bdc-stg.divvy.co/de/rest/pan`.

```
curl --request POST 'https://app-dev-bdc-stg.divvy.co/de/rest/pan'
--header 'Content-Type: application/json'
--header 'x-divvy-api-token: {api_token}'
--data '{"token": "{JWT_token}"}'
```

**Note**: Use `POST https://api.divvy.co/de/rest/pan` in the production environment.

## Path parameters

- `cardId` string, required: BILL-generated ID or UUID of the card

## Headers

- `apiToken` string, nullable: Access token for Spend & Expense API authentication

## Response `200`

Get a PAN JWT token response

- CardPanTokenResponseDto: Card PAN token response.
  - `token` string: PAN JWT token

## Other responses

- `4XX`: List of errors.
- `5XX`: List of errors.

## Changes

- **2026-11-03** `54edddceb0a5`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/bill/apis/bill-v3-api/changes/v3/spend/cards/:cardId/pan-jwt/get.md)

---

[API](https://skmtc.dev/bill/apis/bill-v3-api.md) - [All operations](https://skmtc.dev/bill/apis/bill-v3-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bill/apis/bill-v3-api/revisions/54edddceb0a5?raw)