---
title: "Get Card PAN"
method: POST
path: "/cards/{card_id}/pan"
tags: ["Cards"]
---

# Get Card PAN

`POST /cards/{card_id}/pan`

## Request

- Base URL: `https://api.meow.com/v1`
- URL: `https://api.meow.com/v1/cards/{card_id}/pan`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/meow/apis/meow-api/docs/cards/:card_id/pan/post.ts> (a function with typed inputs; its response is checked against the schema)

Claims the PAN for an agent card, such as one created via the API, and returns a short-lived reveal grant. GET the `reveal_url` with your API key and `Authorization: Bearer <reveal_token>` to receive the card number, CVC, and expiration. Requires the `cards:write` scope. Pass the `card_id` returned by Create Card. This can be called only once per card; subsequent calls return an error. A vendor failure before the reveal grant is created does not consume the one-time retrieval, so that request can be retried. Revoke and recreate the card if the PAN is needed again after a successful call.

## Path parameters

- `card_id` string, uuid, required: Card to act on. Use list_cards to find one.

## Headers

- `x-entity-id` string, uuid

## Response `200`

Successful Response

- CardPanGrantResponse
  - `reveal_url` string, required: URL to fetch the card number from. GET this URL with your API key and `Authorization: Bearer <reveal_token>` to receive the PAN, CVC, and expiration.
  - `reveal_token` string, required: Short-lived bearer token for the reveal URL.
  - `token_expires_in_seconds` integer, required: Seconds until the reveal token expires.
  - `exp_month` integer, nullable: Expiration month (1-12).
  - `exp_year` integer, nullable: Expiration year (4-digit).

## Other responses

- `400`: The request could not be processed.
- `401`: Authentication failed.
- `403`: The API key is not authorized for this operation, or the user of a global API key is an admin or controller without approved KYC. The KYC case returns the message `KYC is required for controllers and admins.` until that user completes KYC in the Meow dashboard.
- `429`: Too many requests.

---

[API](https://skmtc.dev/meow/apis/meow-api.md) - [All operations](https://skmtc.dev/meow/apis/meow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/meow/apis/meow-api/revisions/ea2d7e25b63b?raw)