> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reap.global/llms.txt
> Use this file to discover all available pages before exploring further.

# Reveal PAN

> Returns the card details (PAN, CVV, expiry) as an encrypted payload. Available only to PCI-scoped partners approved by Reap; all other projects receive `403 PAN_REVEAL_NOT_ENABLED`. Decrypt with the private half of the RSA key pair registered with Reap. Never store or log the decrypted card details.



## OpenAPI

````yaml /api-reference/openapi.json post /cards/{id}/reveal-pan
openapi: 3.1.0
info:
  title: Reap API
  version: 1.0.0
  description: Reap platform API
servers:
  - url: https://sg.sandbox.api.reap.global
    description: Singapore sandbox
  - url: https://sg.prod.api.reap.global
    description: Singapore production
  - url: https://mx.sandbox.api.reap.global
    description: Mexico sandbox
  - url: https://mx.prod.api.reap.global
    description: Mexico production
  - url: https://sandbox.api.reap.global
    description: Singapore sandbox (alias)
  - url: https://prod.api.reap.global
    description: Singapore production (alias)
security:
  - bearerAuth: []
tags:
  - name: Accounts
  - name: Activities
  - name: Card Designs
  - name: Card Shipments
  - name: Card Transactions
  - name: Cards
  - name: Companies
  - name: Crypto Deposits
  - name: Crypto Withdrawals
  - name: Disputes
  - name: Fiat Deposits
  - name: Fraud Alerts
  - name: Policies
  - name: Simulation
  - name: Users
  - name: Virtual Asset Postings
  - name: Virtual Assets
  - name: Webhooks
  - name: Agentic
paths:
  /cards/{id}/reveal-pan:
    post:
      tags:
        - Cards
      summary: Reveal PAN
      description: >-
        Returns the card details (PAN, CVV, expiry) as an encrypted payload.
        Available only to PCI-scoped partners approved by Reap; all other
        projects receive `403 PAN_REVEAL_NOT_ENABLED`. Decrypt with the private
        half of the RSA key pair registered with Reap. Never store or log the
        decrypted card details.
      operationId: revealPan_cards
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
            format: uuid
        - name: Reap-Version
          in: header
          required: true
          schema:
            type: string
            enum:
              - '2025-02-14'
            description: API version (YYYY-MM-DD)
            example: '2025-02-14'
      responses:
        '200':
          description: Encrypted card details response
          content:
            application/json:
              schema:
                type: object
                properties:
                  encryptedData:
                    type: string
                    description: >-
                      Base64-encoded ciphertext of the card details JSON (`{
                      pan, cvv, expiryDate }`), encrypted per the `encryption`
                      scheme. Decrypt with the private half of the RSA key pair
                      registered with Reap.
                  encryption:
                    type: string
                    enum:
                      - RSA_OAEP_SHA1
                    description: Encryption scheme of `encryptedData`
                    example: RSA_OAEP_SHA1
                required:
                  - encryptedData
                  - encryption
        '400':
          description: Card operation not allowed in current status
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: object
                    properties:
                      code:
                        type: string
                        const: CARD_OPERATION_NOT_ALLOWED
                      message:
                        type: string
                      detail:
                        anyOf:
                          - type: object
                            additionalProperties: {}
                          - type: 'null'
                    required:
                      - code
                      - message
                      - detail
                required:
                  - error
                title: CardOperationNotAllowedError
        '403':
          description: PAN reveal is not enabled for this project
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: object
                    properties:
                      code:
                        type: string
                        const: PAN_REVEAL_NOT_ENABLED
                      message:
                        type: string
                      detail:
                        anyOf:
                          - type: object
                            additionalProperties: {}
                          - type: 'null'
                    required:
                      - code
                      - message
                      - detail
                required:
                  - error
                title: PanRevealNotEnabledError
        '404':
          description: Card not found
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: object
                    properties:
                      code:
                        type: string
                        const: CARD_NOT_FOUND
                      message:
                        type: string
                      detail:
                        anyOf:
                          - type: object
                            additionalProperties: {}
                          - type: 'null'
                    required:
                      - code
                      - message
                      - detail
                required:
                  - error
                title: CardNotFoundError
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: API key as Bearer token

````