ONonkernel
Vaults

Read card capture state

Changed on

Capability-only browser protocol for embedded card capture. Authorization is Bearer <capture_token>, not an API key. No cookies. Cross-origin GET, POST and OPTIONS are allowed without credentials. Query strings are rejected.

get/vault/card-captures/current

Request

  • Base URL
    https://api.onkernel.com
  • URL
    https://api.onkernel.com/vault/card-captures/current
  • Auth
    none required

Headers

Authorizationstring required

Bearer <capture_token> from a Kernel card_enrollment action.

Response

Capture state; active includes create-only Collect credentials, completed includes only status.

access_tokenstring
capture_sessionstring

Stored as the capture_session meta of each card the Collect form creates. Enrollment accepts only a card that carries it.

environment'sandbox' | 'live'
expires_atstring date-time
status'active' | 'completed' required
vault_idstring

Changes