v1

latestOpenAPI 3.0.1MIT2026-07-261190449.2 KB
Card Sensitive Data

Get OTP for PCI Widget

This endpoint is used to get an OTP for the PCI Widget (Web and Mobile). The OTP is used to authenticate the cardholder request and to retrieve the sensitive card data. The request has to be made from the backend of your application. Directly calling this endpoint from your frontend is not allowed due to security reasons.

A dedicated host URL pci-api.getpliant.com is used for this endpoint! Please refer to the documentation for more information.

get/card-details/widget/{cardId}/otp

Path parameters

cardIdstring uuid required

The Pliant card id (UUIDv4) of the card for which the OTP is requested.

Headers

Pliant-Trace-Idstring uuid required

A random, unique trace id (UUIDv4) per request, generated by the partner. This id is used for logging and troubleshooting purposes throughout all systems. It has to be newly generated per request.

Response

Ok

string required

The OTP for the PCI Widget

Example response

"12345678"