---
title: "Get Card PIN"
method: GET
path: "/cms/api/v1/issuers/{issuerId}/cards/{cardId}/pin"
---

# Get Card PIN

`GET /cms/api/v1/issuers/{issuerId}/cards/{cardId}/pin`

## Request

- Base URL: `https://api.d1.thalescloud.io/authz/v1`
- URL: `https://api.d1.thalescloud.io/authz/v1/cms/api/v1/issuers/{issuerId}/cards/{cardId}/pin`
- Auth: none declared
- TypeScript: <https://skmtc.dev/thalescloud/apis/d1-oauth-api/docs/cms/api/v1/issuers/:issuerId/cards/:cardId/pin/get.ts> (a function with typed inputs; its response is checked against the schema)

This request is used by D1 to retrieve the PIN value of a physical card.

## Response `200`

The response body to get PIN to be displayed. This value is encrypted using the JWE encryption

- GetPinBlock
  - `type` 'ISO0', required: The type of the PIN Block.
  - `encryptedPinBlock` string, required: JWE encrypted PIN object containing PIN Value and Key version. See "PIN Block ISO0" to get the PIN structure once decrypted

## Other responses

- `400`: Bad Request, Invalid request URI or header, or unsupported non-standard parameter
- `401`: The provided Authorization header is missing or invalid
- `403`: Forbidden action, check the state of the linked end user (consumer) or account or card
- `404`: Resource not found, Unknown issuerId or consumerId or accountId or card id
- `500`: Internal Server Error

---

[API](https://skmtc.dev/thalescloud/apis/d1-oauth-api.md) - [All operations](https://skmtc.dev/thalescloud/apis/d1-oauth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/thalescloud/apis/d1-oauth-api/revisions/96089514858c?raw)