---
title: "Issue Card (Instant as PCI-DSS)"
method: POST
path: "/cards/{cardholderId}/instant-pci"
tags: ["Cards"]
---

# Issue Card (Instant as PCI-DSS)

`POST /cards/{cardholderId}/instant-pci`

## Request

- Base URL: `https://partner-api.getpliant.com/api`
- URL: `https://partner-api.getpliant.com/api/cards/{cardholderId}/instant-pci`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/getpliant/apis/pliant-customer-api/docs/cards/:cardholderId/instant-pci/post.ts> (a function with typed inputs; its response is checked against the schema)

This endpoint offers similar card issuing functionality as [the main card issuing endpoint](./issue-card), but specifically allows for a _synchronous_ and _instant_ card issuing, 
**including PCI-DSS compliant sensitive card data retrieval**, which can be then found in the response as object `sensitiveCardData`.
This endpoint issues cards instantly in a synchronous fashion and returns the sensitive card data like the cards PAN and CVV directly.
Meaning the card is active and usable when this endpoint returns a `200 Ok` response and you can directly use the card data to do a purchase of any kind.
The use case being here a fully automated card issuing flow, followed by an immediate card usage on API level.

**This endpoint can only be used after a separate configuration done by Pliant and the partner using this endpoint needs to be PCI-DSS certified!**

**A dedicated host URL `pci-api.getpliant.com` is used for this endpoint!** Please refer to the [documentation](/docs/api-pliant-pci-dss-certified) for more information.

## Path parameters

- `cardholderId` string, uuid, required

## Request body

- 0 (unresolved $ref)

## Response `200`

Ok. The card can be directly used now.

- Schema (unresolved $ref)

## Other responses

- `400` (unresolved $ref)
- `401` (unresolved $ref)
- `403` (unresolved $ref)
- `404` (unresolved $ref)
- `422` (unresolved $ref)
- `429` (unresolved $ref)
- `500` (unresolved $ref)

## Changes

- **2026-11-03** `a4fbf7d068b4`: 5 breaking, 1 warning, 43 info
  - added `#/components/schemas/0` to the request body `allOf` list
  - the response's body type changed from no type to `object` for status `400`
  - the response's body type changed from no type to `object` for status `401`
  - the response's body type changed from no type to `object` for status `403`
  - …45 more

[Operation history](https://skmtc.dev/getpliant/apis/pliant-customer-api/changes/cards/:cardholderId/instant-pci/post.md)

---

[API](https://skmtc.dev/getpliant/apis/pliant-customer-api.md) - [All operations](https://skmtc.dev/getpliant/apis/pliant-customer-api/llms.txt) - [OpenAPI document](https://skmtc.dev/getpliant/apis/pliant-customer-api/revisions/a4fbf7d068b4?raw)