Request Card Reveal Token

Request a short-lived token to reveal card details for a specific user.

Authentication Required: Private API Key

• Requires X-API-Key: <private_key> header
• Private key validates customer and grants full access

Additional Requirements:

• X-User-ID header required
• Valid mandate_id in request body
• Mandate validation performed automatically

Authorizations

X-API-Key · string · header · required

Private API key for full access to SDK operations

Headers

x-user-id · string · required

End-user identifier within a customer organization. Required for user-scoped operations.

Body

application/json

Request model for card reveal token generation.

mandate_id · string · required

Mandate identifier for authorization

Response

201

application/json

Short-lived token for card reveal operation

token · string · required

expires_at · string<date-time> · required