Skip to main content
POST
Reveal card details

Authorizations

Authorization
string
header
required

API key as Bearer token

Headers

Reap-Version
enum<string>
required

API version (YYYY-MM-DD)

Available options:
2025-02-14
Example:

"2025-02-14"

Path Parameters

id
string<uuid>
required

Body

Request body for revealing card details

stylesheetUrl
string<uri> | null

URL to a custom stylesheet for the card details iframe

showCopyPanButton
boolean
default:false

Display copy PAN button in the iframe

Response

Card reveal response

revealUrl
string<uri>
required

URL to load in an iframe or WebView to display card details (PAN, CVV, expiry). Valid for 5 minutes. Do not store or expose this URL beyond the immediate display context.

expiresAt
string<date-time>
required

ISO 8601 expiration timestamp for the reveal URL

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$