Cards

Reveal card details

POSThttps://api.firstleeward.com/v0/cards/:id/reveal

Generates a short-lived URL to securely display card details (PAN, CVV, expiry) in an iframe or WebView. The URL is valid for 5 minutes and is single-use. Do not store, log, or expose this URL beyond the immediate display context.

Authorizations

Authorizationstring · headerrequired

API key as Bearer token, e.g. Bearer YOUR_API_KEY

Headers

Leeward-Versionenum<string>required

API version (YYYY-MM-DD). Available option: 2026-09-18

Path Parameters

idstring<uuid>required

Body

application/json

stylesheetUrlstring<uri> | nulldefault: null

URL to a custom stylesheet for the card details iframe

showCopyPanButtonbooleandefault: false

Display copy PAN button in the iframe

Response

200Card reveal response

revealUrlstring<uri>required

URL to load in an iframe or WebView to display card details (PAN, CVV, expiry). Valid for 5 minutes. Do not store or expose this URL beyond the immediate display context.

expiresAtstring<date-time>required

ISO 8601 expiration timestamp for the reveal URL

400Card operation not allowed in current status

errorobjectrequired

Show child attributes

codestringrequired

messagestringrequired

detailobject | nullrequired