---
title: "Get updated card credentials"
method: POST
path: "/account-updater/cards"
tags: ["Standalone Account Updater"]
---

# Get updated card credentials

`POST /account-updater/cards`

## Request

- Base URL: `https://{prefix}.api.sandbox.checkout.com`
- URL: `https://{prefix}.api.sandbox.checkout.com/account-updater/cards`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `string` scopes: `vault:real-time-account-updater`
- TypeScript: <https://skmtc.dev/checkout/apis/checkout-com-api-reference/docs/account-updater/cards/post.ts> (a function with typed inputs; its response is checked against the schema)

Retrieve updated card credentials. <p/> 
The following card schemes are supported: 

- Mastercard
- Visa
- American Express

## Request body

- AccountUpdaterRequest
  - `source_options` object: The source to update. You must provide either `card` or `instrument` object, but not both.
    - `card` CardDetailsRequest: The card details
      - `number` string, required: The card number.
      - `expiry_month` integer, required: The expiry month of the card
      - `expiry_year` integer, required: The four-digit expiry year of the card
    - `instrument` Instrument: Instrument reference
      - `id` string, required: Unique instrument identifier

## Response `200`

Request was successful, updated card info is available in the response

- AccountUpdaterResponse
  - `account_update_status` 'CARD_UPDATED' | 'CARD_EXPIRY_UPDATED' | 'CARD_CLOSED' | 'UPDATE_FAILED', required: Result of the update operation.
  - `account_update_failure_code` 'CARDHOLDER_OPT_OUT' | 'UP_TO_DATE' | 'NON_PARTICIPATING_BIN' | 'UNKNOWN': This field is returned when the update fails and the scheme returns an appropriate reason code. <p/> For more information, see [Standalone Account Updater](https://checkout.com/docs/payments/store-and-manage-credentials/update-stored-credentials/standalone-account-updater)
  - `card` CardDetailsResponse: Updated card details. Fields vary depending on PCI compliance level.
    - `encrypted_card_number` string: The encrypted full Primary Account Number (PAN). Returned only for PCI SAQ D merchants.
    - `bin` string: The first 6 digits of the PAN.
    - `last4` string: Last 4 digits of the PAN.
    - `expiry_month` integer, required: Expiry month. Expressed in number.
    - `expiry_year` integer, required: Four-digit expiry year.
    - `fingerprint` string: Unique identifier for the card

## Other responses

- `401`: Unauthorized
- `403`: Not authorized to perform this action
- `404`: Not Found
- `422`: Invalid data was sent
- `500`: Internal Server Error
- `502`: Bad Gateway error

---

[API](https://skmtc.dev/checkout/apis/checkout-com-api-reference.md) - [All operations](https://skmtc.dev/checkout/apis/checkout-com-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/checkout/apis/checkout-com-api-reference/revisions/0f1abdb1c3e9?raw)