---
title: "Retrieve Card Ranges"
method: POST
path: "/3ds/cardRanges"
tags: ["3DS Authentication"]
---

# Retrieve Card Ranges

`POST /3ds/cardRanges`

## Request

- Base URL: `https://eu-west-1.api.silverflow.com/v1`
- URL: `https://eu-west-1.api.silverflow.com/v1/3ds/cardRanges`
- Auth: one of:
  - HTTP basic
  - HTTP bearer
- TypeScript: <https://skmtc.dev/silverflow/apis/silverflow-api/docs/3ds/cardRanges/post.ts> (a function with typed inputs; its response is checked against the schema)

Obtain information about which 3DS versions and features are supported for the given PAN. In case of co-branded cards information from both brands is retrieved.

Requires `threeDs:Create` permission.

## Request body

- union
  - ThreeDsCardRangesCardNumberRequest
    - `cardNumber` string, password, required: Full digits of the card or network token.
    - `infoSource` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa': The card network to query for PAN information. Diners support is <a class="experimental-tag-link" href="https://docs.silverflow.com/guides/api-lifecycle#tag/EXPERIMENTAL-Tag"><span class="tag experimental-tag">EXPERIMENTAL</span></a>.
  - ThreeDsCardRangesProcessorTokenRequest
    - `processorTokenKey` string, required: The key to a card stored using [Processor Tokenization](#tag/Processor-Tokenization).

## Response `200`

PAN information.

- ThreeDsCardRangesResponse[]
  - `network` 'american-express' | 'bancontact' | 'diners' | 'mastercard' | 'visa', required: The card network to query for PAN information. Diners support is <a class="experimental-tag-link" href="https://docs.silverflow.com/guides/api-lifecycle#tag/EXPERIMENTAL-Tag"><span class="tag experimental-tag">EXPERIMENTAL</span></a>.
  - `startRange` string, required: Starting range of the PAN.
  - `endRange` string, required: Ending range of the PAN.
  - `acsStartProtocolVersion` string, required: ACS start protocol version.
  - `acsEndProtocolVersion` string, required: ACS end protocol version.
  - `dsStartProtocolVersion` string, required: DS start protocol version.
  - `dsEndProtocolVersion` string, required: DS end protocol version.
  - `threeDSMethodURL` string: URL to call from the iFrame to gather browser's information.
  - `threeDSServerTransID` string: The `threeDSServerTransID` to use when executing the 3DS Method flow. Include this field in the 3DS authentication request if the 3DS Method has been executed.
  - `acsInfoIndicator` string[]: An array of ACS indicators that consist of the following values: - 01 = Authentication Available at ACS - 02 = Attempts Supported by ACS or DS - 03 = Decoupled Authentication Supported - 04 = Trust List Supported - 05 = Device Binding Supported - 06 = WebAuthn Authentication Supported - 07 = SPC Authentication Supported - 08 = Transaction Risk Analysis Exemption Supported - 09 = Trust List Exemption Supported - 10 = Low Value Exemption Supported - 11 = Secure Corporate Payments Exemption Supported - 12–79 = Reserved for EMVCo future use (values invalid until defined by EMVCo) - 80–99 = Reserved for DS use

## Other responses

- `400`: Bad Request
- `401`: Authentication Required
- `409`: Conflict
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/silverflow/apis/silverflow-api.md) - [All operations](https://skmtc.dev/silverflow/apis/silverflow-api/llms.txt) - [OpenAPI document](https://skmtc.dev/silverflow/apis/silverflow-api/revisions/43ecbe4fd6ea?raw)