---
title: "Get tokens for a given cardId"
method: GET
path: "/v1/card/{cardId}/tokens"
tags: ["Get tokens"]
---

# Get tokens for a given cardId

`GET /v1/card/{cardId}/tokens`

This operation returns list of tokens for a given card Id. The response consists of Token Unique Reference ID,  Token Requestor ID, Wallet Provider (Apple/Google/Samsung/M4M), and Token status.

## Path parameters

- `cardId` string, required

## Query parameters

- `auditUser` string, required

## Response `200`

Successful lookup of tokens for given card id

- CardTokenResponse[]
  - `tokenUniqueReferenceId` string — Token unique reference id
  - `tokenRequestorId` string — Identifier used by merchants and wallet providers to request tokens from the TSP
  - `tokenNumber` string — Scheme assigned token number.
  - `tokenId` string, bigint — Enfuce generated token ID from the scheme provided message. This ID is used within Enfuce systems for tracking, support, and operational purposes.
  - `walletProvider` string — Wallet provider name
  - `status` 'ACTIVE' | 'DEACTIVATED' | 'INACTIVE' | 'SUSPENDED' | 'SOFTDELETED' — - ACTIVE - Available for payments - DEACTIVATED - Permanently deactivated - INACTIVE - Waiting for activation - SUSPENDED - Temporarily not available for payments - SOFTDELETED - Deleted from consumer device
  - `deviceInfo` DeviceInfo — Information about the device a token is provisioned to. Present only for tokens bound to a physical device (e.g. mobile wallets such as Apple Pay, Google Pay, Samsung Pay). Null for tokens not provisioned to a device (for example, cloud tokens such as Visa Click to Pay).
    - `deviceName` string, required — Name of the device as registered with the wallet provider.
    - `deviceType` 'UNKNOWN_DEVICE' | 'MOBILE_PHONE' | 'TABLET' | 'WATCH' | 'ANDROID_DEVICE' | 'ENTERTAINMENT_DEVICE' | 'HOUSEHOLD_DEVICE' | 'WEARABLE' | 'VEHICLE', required — Type of device the token is provisioned to.
    - `deviceIdentifier` string, nullable — Opaque, masked identifier of the device. Null when not available.
    - `mobileNumberLast4` string, nullable — Last four digits of the mobile number associated with the device. Null when not available.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — The cardid that you are using does not exists
- `500` — Internal server error

---

[API](https://skmtc.net/enfuce/apis/transfer-api.md) · [All operations](https://skmtc.net/enfuce/apis/transfer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/enfuce/transfer-api/versions/dc4a41118f80/schema)