Create Card Secure Session

POST

/api/v1/issuing/card/{cardNo}/secureSession

Create a single-use session for displaying the full card number, expiry date and CVV to your end user.

The response contains an iframe URL. Render it in your frontend:
<iframe src="{displayUrl}" width="400" height="240" frameborder="0"></iframe>

The credentials are rendered by the card network directly into the end user's browser. They never pass through your backend or ours, which means there is no server-side way to read the card number or CVV.

Constraints:

Only cards in ACTIVE status are eligible.

displayUrl is single-use and expires in about 60 seconds. Request a new session each time you need to display credentials.

Do not persist, log, screenshot or forward the URL or the rendered credentials.

Request

Path Params

Responses

🟢200

application/json

Secure session created successfully

Bodyapplication/json

🟠401Unauthorized

🟠404NotFound

🟠422CardNotActive

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/api/v1/issuing/card/CD260811X9Y8Z7/secureSession'

Response Example

200 - Example 1

{
    "code": 200,
    "message": "success",
    "data": {
        "displayUrl": "string",
        "expiresAt": "2019-08-24T14:15:22.123Z"
    }
}

Modified at 2026-08-11 10:11:22

Get Card

List Transactions