Create member card reveal session
Mints a single-use, short-lived session that lets the member reveal their debit card number, expiry, and security code inside a provider-hosted iframe. Load embed_url as the iframe source; the card is never returned to the caller or to the hosting page. Sessions are consumed on reveal and rate limited per member and per organization. Returns 404 when the member or account is not visible to the caller, 409 when no card has been provisioned, and 429 when the provider rate limit is exceeded.
Request
- Base URL: https://api.vitablehealth.com
- URL: https://api.vitablehealth.com/v1/members/{member_id}/ichra-payment-accounts/{payment_account_id}/card-sessions
- Auth: HTTP bearer
Path parameters
Unique member identifier (mbr_*)
Headers
Organization to act as for this request (e.g. org_SGVsbG8gV29ybGQ). Optional when your credentials reach a single organization. Required when they reach several — omitting it then returns 400 organization_required. A malformed value returns 400 invalid_organization_header, and naming an organization you do not have access to returns 403 organization_access_denied.
Response
Changes
No recorded changes to this operation across all 1 revision of this API.