Create Card Secure Session

POST

/api/v1/issuing/card/{cardNo}/secureSession

Create a single-use session for displaying the full card number, expiry date and CVV to your end user.

The response contains an iframe URL. Render it in your frontend:
<iframe src="{displayUrl}" width="400" height="240" frameborder="0"></iframe>

The credentials are rendered by the card network directly into the end user's browser. They never pass through your backend or ours, which means there is no server-side way to read the card number or CVV.

Constraints:

Only cards in ACTIVE status are eligible; any other status returns 409.

displayUrl is single-use and expires in about 60 seconds. Request a new session each time you need to display credentials.

Do not persist, log, screenshot or forward the URL or the rendered credentials.

This endpoint takes no request body. Any body sent is ignored and Content-Type is not required.

Request

Path Params

Responses

🟢200

application/json

Secure session created successfully

Bodyapplication/json

🟠401Unauthorized

🟠404NotFound

🟠409CardNotActive

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/api/v1/issuing/card/CD260811X9Y8Z7/secureSession'

Response Example

200 - Example 1

{
    "code": 200,
    "message": "success",
    "data": {
        "displayUrl": "string",
        "expiresAt": "2019-08-24T14:15:22.123Z"
    }
}

Modified at 2026-10-13 09:37:41

Get Card

Adjust Card Limit