ledger-card accounts
Get a card account with its sensitive details (PAN/CVV/expiry) revealed.
Changed onAs GET /card-accounts/{cardAccountId}, but also returns the card's PAN/CVV/expiry, RSA-encrypted for transport with the caller-supplied public key (X-Public-Key header, base64-encoded DER/X.509 SubjectPublicKeyInfo) - mirrors onboard-wallet-cards' includeDetails/public-key reveal flow. Requires the MANAGE permission specifically, stricter than the plain read above, since a business has multiple users at different permission tiers.
get/ledger/card-accounts/{cardAccountId}/details
Request
- Base URLhttps://external.dev.onboardpay.co
- AuthAPI key in header x-api-key
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Path parameters
cardAccountIdstring uuid required
The unique card account ID
Headers
X-Public-Keystring required
Base64-encoded DER (X.509 SubjectPublicKeyInfo) RSA public key.
Response
Card account with encrypted sensitive details fetched successfully
Example response
{
"currency": "USD"
}Changes
- info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status
- info
- info
endpoint added
- info