Reveal a stored card to its owner
Issues a single-use link, valid for two minutes, that answers the card’s number, expiry and holder name to the customer who owns the card. Call it only after the platform has verified the customer is present (for example with a fresh step-up), and hand the link only to that customer’s browser, for Evervault’s Reveal component to open: the link goes through Evervault’s Relay, which decrypts the number on the way, so whoever opens it receives the card number in plaintext. The link never answers a security code. Only an ACTIVE card can be revealed. Each issue and each opening is recorded in the card’s audit log with the customer as the actor.
Authorizations
API token authentication using format <api token id>:<api client secret>
Path Parameters
System-generated unique customer identifier
System-generated unique stored card identifier
Response
The link
A single-use link that answers a stored card's details to its owner.
The single-use link on Evervault's Relay. Open it with Evervault's Reveal component in the owner's browser; it answers StoredCardRevealDetails without cvc, once, until expiresAt. It is a bearer secret: do not log or store it.
2048When the link stops working, two minutes after it was issued.