---
title: "Get Card Tokens"
method: POST
path: "/getCardTokens"
tags: ["Accounts and Cards"]
---

# Get Card Tokens

`POST /getCardTokens`

Use the Get Card Tokens endpoint to retrieve information on tokens associated with a card. To use this endpoint, the MTLCM product parameter must be set. This endpoint is currently valid only for Mastercard.

> 🚧 Notice
>
> The token-management endpoints are available by special arrangement only. Enabling this feature requires additional setup and costs. Contact SoFi Tech Solutions for details.

## Response `default`

- object
  - `token_details_mc` object[]
    - `token_unique_reference` string, required — Unique reference assigned to a token, used to identify the token for the duration of its lifetime.
    - `expiration_date` string — Expiration date of the token. Conditional field, present once the token has been designated for the digitization. Format: MMYY.
    - `current_status_code` string — Current status of the token. See `current_status_description` field for the value descriptions: `U`, `A`, `S`, `D`.
    - `current_status_description` string — Description for the `current_status_code`: `"Unmapped"`, `"Active"`, `"Suspended"`, `"Deleted"`
    - `current_status_date_time` string — Date-time the status was updated. ISO 8601 format: YYYY-MM-DDThh:mm:ssTZD.
    - `token_requestor_id` string — The entity uniquely recognized by Mastercard as the Token Requestor
    - `token_requestor_name` string — The legal name of the token requestor. There can be more than one Token Requestor ID per token Requester Name (legal name), so you should use both the ID and the name to uniquely identify a token requestor.
    - `token_type` string — Type of token. Valid values: `S` (embedded secure element token), `C` (Mastercard cloud-based payments token), `F` (<<glossary:COF>> token)
    - `wallet_id` string, required — Identifier of the wallet provider that requested the tokenization of the card.
    - `payment_app_instance_id` string — Identifier of the Payment App instance within a device that will be provisioned with a token. Not present for CoF tokens.
  - `token_details_visa` object[]
    - `tokenRequestorId` integer, required — Unique ID assigned to the initiator of the token request.
    - `tokenReferenceId` string, required — Unique ID for the token associated with the <<glossary:PAN>>.
    - `entityOfLastAction` 'TOKEN_REQUESTOR' | 'ISSUER' — The entity that performed the last action.
    - `tokenType` 'SECURE_ELEMENT' | 'HCE' | 'CARD_ON_FILE' | 'ECOMMERCE' | 'QRC' — Type of token.
    - `tokenStatus` 'ACTIVE' | 'INACTIVE' | 'SUSPENDED' | 'DEACTIVATED' — Status of the token.

---

[API](https://skmtc.net/galileo-ft/apis/program-api.md) · [All operations](https://skmtc.net/galileo-ft/apis/program-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/galileo-ft/program-api/versions/bcd728f97a18/schema)