Skip to main content
GET
/
cards
/
{cardId}
Get Card Details
curl --request GET \
  --url https://api.fyatu.com/api/v3/cards/{cardId} \
  --header 'Authorization: Bearer <token>'
{
  "success": true,
  "status": 200,
  "message": "Card retrieved successfully",
  "data": {
    "id": "crd_8f3a2b1c4d5e6f7890abcdef12345678",
    "cardholderId": "ch_1a2b3c4d5e6f7890abcdef1234567890",
    "name": "JAMES WILSON",
    "last4": "4829",
    "maskedNumber": "****4829",
    "cardNumber": "5412750000004829",
    "cvv": "847",
    "expiryMonth": "09",
    "expiryYear": "2028",
    "expiration": "09/28",
    "brand": "MASTERCARD",
    "status": "ACTIVE",
    "suspendedReason": null,
    "isReloadable": true,
    "balance": {
      "available": 245.5,
      "holding": 3
    },
    "spendingLimit": 5000,
    "spendingPeriod": "MONTHLY",
    "cardInvoiceDebt": 0,
    "declineCount": 0,
    "billingAddress": {
      "line1": "742 Evergreen Terrace",
      "city": "Springfield",
      "state": "Illinois",
      "country": "US",
      "zipCode": "62701"
    },
    "createdAt": "2026-01-10 14:30:00",
    "suspendedAt": null,
    "terminatedAt": null
  },
  "meta": {
    "requestId": "req_a1b2c3d4e5f6",
    "timestamp": "2026-01-17T10:00:00+00:00"
  }
}

Documentation Index

Fetch the complete documentation index at: https://docs.fyatu.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

Retrieve full card details including the card number, CVV, and expiration date. This endpoint returns sensitive PCI data that should be handled securely.
Security Notice: This endpoint returns full card details (card number, CVV). Never expose this data in client-side code, logs, or analytics.

​
Path Parameters

ParameterTypeDescription
cardIdstringThe unique card identifier

​
Example Usage

<?php
$cardId = 'crd_8f3a2b1c4d5e6f7890abcdef12345678';

$response = file_get_contents(
    'https://api.fyatu.com/api/v3/cards/' . $cardId,
    false,
    stream_context_create([
        'http' => [
            'method' => 'GET',
            'header' => 'Authorization: Bearer ' . $accessToken
        ]
    ])
);

$result = json_decode($response, true);
$card = $result['data'];

echo "Card Number: " . $card['cardNumber'] . "\n";
echo "CVV: " . $card['cvv'] . "\n";
echo "Expiry: " . $card['expiryMonth'] . '/' . $card['expiryYear'] . "\n";
echo "Balance: $" . $card['balance']['available'] . "\n";

​
Response Fields

FieldTypeDescription
idstringUnique card identifier
cardholderIdstringThe cardholder this card belongs to
namestringName printed on the card
last4stringLast 4 digits of the card number
maskedNumberstringMasked card number (e.g. ****4829)
cardNumberstringFull 16-digit card number (PCI sensitive)
cvvstring3-digit security code (PCI sensitive)
expiryMonthstringCard expiration month (MM format)
expiryYearstringCard expiration year (YYYY format)
expirationstringShort expiration date (MM/YY format, e.g. 09/28)
brandstringCard brand: MASTERCARD or VISA
statusstringCard status: ACTIVE, FROZEN, SUSPENDED, TERMINATED
suspendedReasonstring|nullReason for suspension, or null
isReloadablebooleanWhether the card can be funded
balance.availablenumberAvailable balance in USD
balance.holdingnumberHeld/pending balance in USD
spendingLimitnumberSpending limit amount in USD (0 if no limit)
spendingPeriodstringPeriod for the spending limit: DAILY, MONTHLY, YEARLY, or empty
cardInvoiceDebtnumberOutstanding unpaid fee debt for this card in USD
declineCountintegerNumber of declined transactions (insufficient funds) on this card
billingAddressobjectCard billing address
createdAtstringCard creation timestamp (YYYY-MM-DD HH:MM:SS)
suspendedAtstring|nullWhen the card was suspended, or null
terminatedAtstring|nullWhen the card was terminated, or null
Decline Count: The number of consecutive insufficient-funds declines before automatic suspension depends on the card product — it can be 3, 15, or unlimited depending on the product’s configuration. Monitor declineCount and notify cardholders before reaching their product’s limit.

Authorizations

​
Authorization
string
header
required

JWT access token obtained from /auth/token

Path Parameters

​
cardId
string
required

Card ID

Response

Card details retrieved

​
success
boolean
Example:

true

​
status
integer
Example:

200

​
message
string
​
data
object
​
meta
object