---
title: "Card Insights"
method: POST
path: "/insights/cards"
tags: ["Payments", "Insights"]
---

# Card Insights

`POST /insights/cards`

## Request

- Base URL: `https://api.evervault.com`
- URL: `https://api.evervault.com/insights/cards`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/evervault/apis/evervault-api/docs/insights/cards/post.ts> (a function with typed inputs; its response is checked against the schema)

The Card Insights API allows you to perform address verification (AVS), name verification (ANI), CVV, email, and phone verification checks. You can also check the card's push and pull transaction capabilities and retrieve the Payment Account Reference (PAR).

Provide exactly one credential per request: either a `card` or a `networkToken`.

## Request body

- object
  - `card` object: The card details. Provide either `card` or `networkToken`, but not both.
    - `number` string, required: The card number. This should be a valid Evervault encrypted card number or a valid plaintext card number.
    - `expiry` CardExpiry: The card expiry date.
      - `month` string, required: The card expiry month, in MM format (e.g. 12 for December)
      - `year` string, required: The card expiry year, in YY format (e.g. 29 for 2029)
    - `cvv` string: The card security code. This should be a valid Evervault encrypted CVV or a valid plaintext CVV. Required if the `cvv` extension is requested.
  - `networkToken` object: The network token details. Provide either `card` or `networkToken`, but not both. The `cvv` extension is not available for network tokens.
    - `number` string, required: The network token number. This should be a valid Evervault encrypted token number or a valid plaintext token number.
    - `cryptogram` string, required: The token cryptogram. This should be a valid Evervault encrypted cryptogram or a valid plaintext cryptogram.
    - `expiry` NetworkTokenExpiry, required: The network token expiry date.
      - `month` string, required: The network token expiry month, in MM format (e.g. 12 for December)
      - `year` string, required: The network token expiry year, in YY format (e.g. 29 for 2029)
    - `transactionIdentifier` string: The transaction identifier for the token. Required for Amex and Discover network tokens.
    - `brand` 'visa' | 'mastercard' | 'amex' | 'discover': The card brand the token belongs to. Required for Amex and Discover network tokens.
    - `funding` 'credit' | 'debit' | 'prepaid': The funding type of the card the token belongs to. Required for Amex and Discover network tokens.
    - `eci` string: The Electronic Commerce Indicator associated with the token.
  - `extensions` string[]: The extensions to the card insight request.
  - `cardholder` object: Details about the cardholder that the name verification (ANI) is for. Required if the `cardholder` extension is requested.
    - `firstName` string: The first name of the cardholder
    - `lastName` string: The last name of the cardholder
    - `middleName` string: The middle name of the cardholder
    - `suffix` string: The name suffix of the cardholder
    - `ownerType` 'primary' | 'secondary': Whether the cardholder is the primary or secondary account owner.
  - `email` string: The cardholder's email address that the email verification is for. Required if the `email` extension is requested.
  - `phone` string: The cardholder's phone number, in ISD format (`00` followed by the country calling code and the national number), that the phone verification is for. Required if the `phone` extension is requested.
  - `address` object: Details about the cardholder's address that the address verification (AVS) is for. Required if the `address` extension is requested.
    - `postalCode` string, required: The ZIP or postal code.
    - `line1` string: Street address line 1
    - `line2` string: Street address line 2
    - `city` string: The city name
    - `state` string, iso-3166-2-subdivision: The state or province code. Required when `country` is `us`, `ca`, or `au`.
    - `country` string, iso-3166-1-alpha-2: The country code.
  - `externalCustomerReference` string: An optional reference of your choice, such as a correlation ID, that is attached to the request. The reference will be visible in your logs. Must be between 1 and 255 characters.

## Response `201`

Returns the Card Insight object

- CardInsight
  - `id` string, required: The unique identifier for the Card Insight
  - `fingerprint` string: A unique, cryptographically secure identifier for the card number. Useful for deduplication.
  - `bin` object: The BIN details for the supplied card. This includes details such as the card brand, funding type, issuer, 3D Secure support and more.
    - `brand` 'visa' | 'mastercard' | 'american-express' | 'discover' | 'diners-club' | 'jcb' | 'unionpay': The card brand associated with the payment card.
    - `funding` 'debit' | 'credit' | 'prepaid' | 'deferred-debit' | 'charge': The card funding type specifies the method by which transactions are financed.
    - `segment` 'consumer' | 'commercial' | 'business' | 'government' | 'payouts' | 'all': The card segment indicates the primary market or usage category of the card.
    - `country` string, iso-3166-1-alpha-2: The country associated with the card.
    - `currency` string: The currency associated with the card (ISO 4217)
    - `issuer` string: The name of the issuer bank
    - `type` 'null' | 'card' | 'network-token', nullable: Type of card or network token identified during the lookup.
    - `productName` string: The name of the product associated with the card
    - `fastFunds` CardFastFunds: Specifies the availability of instant payment capabilities for card transactions, indicating whether funds can be transferred immediately both within the same country and across international borders.
      - `domestic` boolean: When true, indicates that instant payments are supported for transactions within the same country/domestic market. This allows for immediate funds availability for local transfers.
      - `crossBorder` boolean: When true, indicates that instant payments are supported for international transactions between different countries. This enables immediate funds availability for cross-border transfers.
    - `matchPrecision` number: Indicates how many leading digits of the submitted BIN are confirmed by the matched data. A higher value means a more specific match. When multiple matches are found, the value represents the least precise BIN range the submitted BIN could belong to.
    - `threeDS` CardThreeDSMetadata: Metadata about 3DS capabilities, including supported versions and ACS (Access Control Server) indicators.
      - `supportedVersions` object, required: The 3DS versions supported by the ACS and DS
        - `accessControlServer` string[]
        - `directoryServer` string[]
      - `acsInfoIndicators` object[]: Array of ACS information indicators
        - `code` string: The indicator code, the following values are supported: - `authentication-available` - `attempts-supported` - `decoupled-authentication-supported` - `trustlist-supported` - `device-binding-supported` - `webauthn-authentication-supported` - `spc-authentication-supported` - `tra-exemption-supported` - `trustlist-exemption-supported` - `low-value-exemption-supported` - `secure-corporate-payments-exemption-supported` - `emvco-reserved` - `ds-reserved` **American Express only:** - `issuer-tra-exemption-supported` - `issuer-trustlist-exemption-supported` - `issuer-low-value-exemption-supported` - `issuer-secure-corporate-payments-exemption-supported` - `bridging-message-extension-supported` **Mastercard only:** - `smart-auth-direct-stand-in-only` - `smart-auth-direct` - `payment-transactions-supported` - `non-payment-transactions-supported` - `app-channel-supported` - `browser-channel-supported` - `app-acs-challenge-supported` - `browser-acs-challenge-supported` **Visa only:** - `issuer-tra-exemption-supported` - `data-only-supported` - `delegated-authentication-supported` - `digital-auth-framework-supported`
        - `indicator` string, required: The raw numeric indicator value, ranges from 01 to 99
        - `description` string: Human-readable description of the indicator
  - `capabilities` object: The push and pull capabilities of the card
    - `push` CardInsightCapabilities
      - `enabled` boolean: Indicates if push or pull transactions are enabled for the supplied card
      - `network` string: The card network for the supplied card
      - `type` string: The funding type of the card
      - `availability` 'immediate' | 'next-day' | 'next-few': Indicates the typical time for payouts
      - `regulated` boolean: Indicates if the issuer is a regulated institution
      - `currency` object: The currency of the card
        - `alphaCode` string, required: The ISO 4217 alphabetic code for the currency
        - `numericCode` string, required: The ISO 4217 numeric code for the currency
      - `country` object: The country the card is issued in
        - `alphaCode` string, required: The ISO 3166-1 two character alphabetic code for the country
        - `numericCode` string, required: The ISO 3166-1 three digit code for the country
    - `pull` CardInsightCapabilities
      - `enabled` boolean: Indicates if push or pull transactions are enabled for the supplied card
      - `network` string: The card network for the supplied card
      - `type` string: The funding type of the card
      - `availability` 'immediate' | 'next-day' | 'next-few': Indicates the typical time for payouts
      - `regulated` boolean: Indicates if the issuer is a regulated institution
      - `currency` object: The currency of the card
        - `alphaCode` string, required: The ISO 4217 alphabetic code for the currency
        - `numericCode` string, required: The ISO 4217 numeric code for the currency
      - `country` object: The country the card is issued in
        - `alphaCode` string, required: The ISO 3166-1 two character alphabetic code for the country
        - `numericCode` string, required: The ISO 3166-1 three digit code for the country
  - `fees` unknown
  - `cardholder` CardInsightCardholder
    - `result` object: The result
      - `value` 'M' | 'N' | 'U', required: The raw result code returned for the ANI check
      - `code` 'match-performed' | 'no-match-performed' | 'unsupported', required: A human readable version of the ANI result code
    - `fullName` object: The result
      - `value` 'M' | 'P' | 'N' | 'U', required: The raw match code returned for the ANI check for the full name
      - `code` 'match' | 'partial-match' | 'no-match' | 'unsupported', required: A human readable version of the ANI match code
    - `firstName` object: The result
      - `value` 'M' | 'P' | 'N' | 'U', required: The raw match code returned for the ANI check for the first name
      - `code` 'match' | 'partial-match' | 'no-match' | 'unsupported', required: A human readable version of the ANI match code
    - `lastName` object: The result
      - `value` 'M' | 'P' | 'N' | 'U', required: The raw match code returned for the ANI check for the last name
      - `code` 'match' | 'partial-match' | 'no-match' | 'unsupported', required: A human readable version of the ANI match code
  - `address` CardInsightAddress
    - `networkIdentifier` string: A network generated transaction identifier that is unique to every authorization and financial request.
    - `networkResponseCode` object: Network response code returned when an authorization fails at the network or beyond
      - `code` string, nullable: A human readable version of the network response code. Always returns `null` until these codes are mapped.
      - `value` string: The raw network response code
    - `result` object: The result of the address verification check (AVS)
      - `value` string, required: The raw result code
      - `address` 'match' | 'no-match' | 'unknown' | 'unavailable', required: The match code for the address portion of the AVS (excludes zip code)
      - `zip` 'match' | 'no-match' | 'unknown' | 'unavailable', required: The match code for the zip code portion of the address (excludes line1, line2, etc.)
  - `cvv` object: The result of the CVV verification check
    - `value` string, required: The raw match code returned from the CVV verification check
    - `code` string, required: A human readable version of the CVV match code
  - `email` object: The result of the email verification check
    - `value` '1' | '2' | '3' | 'U', required: The raw match code returned from the email verification check
    - `code` 'match' | 'no-match' | 'not-performed' | 'unable-to-verify', required: A human readable version of the email match code
  - `phone` object: The result of the phone verification check
    - `value` '1' | '2' | '3' | 'U', required: The raw match code returned from the phone verification check
    - `code` 'match' | 'no-match' | 'not-performed' | 'unable-to-verify', required: A human readable version of the phone match code
  - `paymentAccountReference` string: The unique identifier of the Payment Account associated with this card.
  - `createdAt` integer, required: Unix timestamp of when the card insight was created

## Changes

- **2026-11-06** `8d0ca833fa04`: 6 breaking, 13 warning, 39 info
  - added `#/components/schemas/CardExpiry` to the `card/expiry` request property `allOf` list
  - the `card/expiry` request property type changed from `object` to no type
  - the response property `fees` became nullable for the status `201`
  - the response property `bin` became optional for the status `201`
  - …54 more
- **2026-04-17** `5e1eb58d42d5`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/evervault/apis/evervault-api/changes/insights/cards/post.md)

---

[API](https://skmtc.dev/evervault/apis/evervault-api.md) - [All operations](https://skmtc.dev/evervault/apis/evervault-api/llms.txt) - [OpenAPI document](https://skmtc.dev/evervault/apis/evervault-api/revisions/8d0ca833fa04?raw)