---
title: "Decrypt and return the fulfilled eSIM profile to its wallet owner"
method: GET
path: "/api/esim/orders/{orderId}/credentials"
---

# Decrypt and return the fulfilled eSIM profile to its wallet owner

`GET /api/esim/orders/{orderId}/credentials`

## Request

- Base URL: `https://api.x402card.org`
- URL: `https://api.x402card.org/api/esim/orders/{orderId}/credentials`
- Auth: one of:
  - API key in header `X-Esim-Delivery-Token`
  - HTTP bearer

Sensitive no-store response. Use the order-scoped delivery token returned by the paid purchase, or a wallet-authenticated owner session. QR/LPA material is encrypted at rest and excluded from generic order responses and logs.

## Path parameters

- `orderId` string, required

## Response `200`

Owner-only ICCID and installation material

## Other responses

- `404`: Order not found for this wallet
- `409`: Order is not fulfilled

---

[API](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api.md) · [All operations](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/llms.txt) · [OpenAPI document](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/revisions/90ffb84a664e?raw)