---
title: "Retrieve Confirmation Token"
method: GET
path: "/confirmation_tokens/{id}"
tags: ["Confirmation Tokens"]
---

# Retrieve Confirmation Token

`GET /confirmation_tokens/{id}`

Retrieves a token's display-safe preview — never the underlying payment credential. Public and rate-limited: the account_id query param must match the account the token was minted for.

## Query parameters

- `account_id` string, required

## Response `200`

confirmation token retrieved

- ConfirmationToken
  - `billing_details` PaymentBillingDetailsPreview, required
    - `country` string, nullable, required — ISO 3166-1 alpha-2 country code.
    - `email` string, nullable, required — Email supplied when the method was collected.
    - `name` string, nullable, required — Name on the payment method.
    - `postal_code` string, nullable, required — Postal or ZIP code.
  - `created_at` string, required — When the token was created, as an ISO 8601 timestamp.
  - `expires_at` string, required — When the token expires, as an ISO 8601 timestamp. Tokens are single-use and short-lived.
  - `id` string, required
  - `object` string, required — Always `confirmation_token`.
  - `payment_method_preview` PaymentMethodDisplay, required
    - `bank_debit` PaymentMethodDisplayPreview
      - `brand` string — Lowercase card brand, e.g. `visa`. Absent when the method carries no brand.
      - `last4` string — Last four digits of the instrument. Absent when the method carries none.
    - `card` PaymentMethodDisplayPreview
      - `brand` string — Lowercase card brand, e.g. `visa`. Absent when the method carries no brand.
      - `last4` string — Last four digits of the instrument. Absent when the method carries none.
    - `category` 'card' | 'wallet' | 'bank_debit' | 'bank_transfer' | 'voucher' | 'redirect' | 'crypto' | 'balance' | 'in_app_purchase' | 'saved', required — The family the type belongs to.
    - `display_name` string, required — Human-readable label for the method, e.g. `Visa •••• 4242`.
    - `id` string, nullable, required — The saved payment method this preview came from, or `null` when the buyer supplied a new one.
    - `saved` PaymentMethodDisplayPreview
      - `brand` string — Lowercase card brand, e.g. `visa`. Absent when the method carries no brand.
      - `last4` string — Last four digits of the instrument. Absent when the method carries none.
    - `type` string, required — The payment method type, e.g. `card`, `apple_pay`, `klarna`.
    - `wallet` PaymentMethodDisplayPreview
      - `brand` string — Lowercase card brand, e.g. `visa`. Absent when the method carries no brand.
      - `last4` string — Last four digits of the instrument. Absent when the method carries none.
  - `setup_future_usage` string, nullable, required — Save-consent state the element displayed at collection: `off_session`, `on_session`, or `null`. Confirm may vault only if attested here.
  - `status` 'pending' | 'consumed' | 'expired', required — `pending` until it is used, then `consumed`; `expired` once its short lifetime elapses. Only a `pending` token can be charged.

## Other responses

- `404` — Resource not found

## Changes

- **2026-08-29** `1b5d50d09479` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/whop/apis/whop-api/changes/confirmation_tokens/:id/get.md)

---

[API](https://skmtc.dev/whop/apis/whop-api.md) · [All operations](https://skmtc.dev/whop/apis/whop-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/whop/whop-api/revisions/4ddae15b5de8/schema)