Reveal card CVV (step-up required)

GET

/v1/cards/{id}/cvv

Returns card CVV. Requires step-up token (card:reveal). Short-lived sensitive data; never stored in responses cache.

Authentication: Bearer JWT (user session). Step-up: X-Step-Up-Token required for operation card:reveal.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

API Key

Add parameter in header

X-Step-Up-Token

Example:

X-Step-Up-Token: ********************

Path Params

Header Params

🟢200

application/json

Card CVV

Bodyapplication/json

🟠400BadRequest

🟠401Unauthorized

🟠403Forbidden

🟠404NotFound

🟠409Conflict

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location '/v1/cards//cvv' \
--header 'X-Step-Up-Token;' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Example 1

{
    "cvv": "string"
}

Modified at 2026-06-23 04:24:01