---
title: "Get account cards"
method: GET
path: "/wallet/v1/cards"
tags: ["Cards"]
---

# Get account cards

`GET /wallet/v1/cards`

Get cards for specified account with paging and filter options. The account is parsed from the token, which must be an account token.

Accounts can have multiple customers, typically to accommodate primary and additional cardholders, but only one owner.

**Note:** This endpoint takes an account token - an access token encoded with a Pismo account ID.

## Query parameters

- `page` string
- `perPage` string
- `format` 'paged'
- `status` string[]
- `modes` string[]
- `types` string[]

## Response `200`

CardInfoResponse object array

- CardInfoResponse2[]
  - `id` integer — ID of card to create relationship for
  - `hash` string — Encrypted Primary Account Number (PAN). This field does not exist until the card PCI data is asynchronously created.
  - `status` 'ACTIVE' | 'SUSPENDED' | 'PENDING' — Card status
  - `printed_name` string — Printed name on physical card
  - `customer_id` integer — Pismo customer ID.
  - `name` string — Card alias name for a `VIRTUAL` card. This field is **REQUIRED** to be unique for each `VIRTUAL` card a customer owns. No matter what is passed for a `PLASTIC` card, the value is always `PLASTIC`.
  - `type` 'PLASTIC' | 'VIRTUAL' | 'RECURRING' | 'TEMPORARY' — Card type
  - `bin` string — Bank Identification Number (BIN). A 6 or 8 digit number identitying the card network, issuer, and product.
  - `brand` string — Card network, i.e., Visa, Mastercard, ELO, RuPay, Private
  - `template_id` string — Template ID. Templates are used to implement the BIN override feature. For more information, refer to the [BIN override](https://developers.pismo.io/pismo-docs/docs/bin-override-feature) guide.
  - `program_id` number — Pismo program ID.
  - `issuing_date` string — Date/time when card was issued in RFC3339 format, i.e., 2019-07-03T17:23:18Z
  - `transaction_limit` string — Optional for virtual cards. Maximum amount allowed per transaction. Set up to the approved limit. If not set, account limit is used.
  - `expiration_date` string — Card expiration date (format = yymm). If passed, the card expiration date is not calculated using the "Card expiration (# of months)" program parameter.
  - `last_4_digits` string — Last 4 PAN digits
  - `track_number` integer — Sequential counter incremented every time card is reissued.
  - `reissued_card_id` integer — Last issued card ID
  - `contactless_enabled` boolean — For physical cards. Is card enabled for contactless transactions? With contactless transactions, you hold or tap the card on contactless-enabled card reader to complete a transaction. This requires that both the card and the terminal have Near Field Communication (NFC) technology. Most embossers can create plastic contactless cards. Default is `true`.
  - `abu_enabled` boolean — This field is **DEPRECATED**. For more information, refer to the [ABU documentation](https://developers.pismo.io/pismo-docs/docs/cards-overview-1#mastercards-automatic-billing-updater-option) in the Cards overview guide. When a card is created or reissued, or its account credentials change, Mastercard is notified if this feaure is enabled. Notification updates are sent to Mastercard on a daily basis. For more information, refer to Mastercard's <a href="https://developer.mastercard.com/product/automatic-billing-updater-abu/" target="_blank">ABU</a> documentation.
  - `dual_message_debit` boolean — For Mastercard - if card is DMC, where the debit has authorization and confirmation at different times, base I and base II, respectively. Unlike Mastercard's Maestro debit, where authorization and confirmation take place at the same time (base I). Default is `false`.
  - `embossing_custom_field` string — For physical cards. Additional information for embossing company. For example: tracking number or whether the card should be plastic or metal. You can use this field for any embossing needs specific to your business. Whatever is sent must be agreed upon with the embosser&mdash;what to send, what values to send, what format to send, what size to send for each value, and so on.
  - `mode` 'CREDIT' | 'DEBIT' | 'COMBO' | 'MULTIPLE' — Mode enum: `CREDIT` - Single credit card `DEBIT` - Single debit card `COMBO` - Card has both a credit and debit *mode*, meaning it is associated with both a credit and debit program and account. `MULTIPLE` - Combination card created with the DEPRECATED [Create combo card](https://developers.pismo.io/pismo-docs/reference/post-v1-combocard-relationship) endpoint. For more information, refer to the [mode documentation](https://developers.pismo.io/pismo-docs/docs/cards-overview-1#create-a-combination-card-with-card-modes) in the Card management guide.
  - `password_tries` integer — Number of times the password was tried
  - `validity_period_hours` integer — How long, in hours, the card is valid. Cannot exceed the card's `expiration_date`. Once this period is exceeded, and the card has a `NORMAL`, `BLOCKED`, `PENDING`, `WARNING` or `REISSUED` status, its status becomes `INOPERATIVE`. This field is used to calculate the datetime value for `valid_until`. For `VIRTUAL` and `PLASTIC` cards. Setting this field for `TEMPORARY` or `RECURRING` cards returns a **400 Bad request** error.
  - `valid_until` string — Card is valid until this datetime. ISO 8601 format. Once this time is exceeded, and the card has a `NORMAL`, `BLOCKED`, `PENDING`, `WARNING` or `REISSUED` status, its status becomes `INOPERATIVE`. This field's value is calculated using the `validity_period_hours`.
  - `metadata` string — Any data object with key/value pairs. No limit on length. **Note**: This field must not be used to send Personally Identifiable Information (PII), Payment Card Industry (PCI) data, or any sensitive/regulated information. Metadata fields are intended for operational, non-sensitive data only. For sensitive data, use the specific parameters designed for that purpose. For more information, refer to [Get started with Pismo APIs](https://developers.pismo.io/pismo-docs/reference/get-started-with-pismo-apis#metadata).

## Other responses

- `401` — Access token is missing or invalid
- `403` — The request has been lost
- `404` — Not Found
- `500` — Internal server error

---

[API](https://skmtc.net/pismo/apis/platform-authentication.md) · [All operations](https://skmtc.net/pismo/apis/platform-authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pismo/platform-authentication/versions/935b62e16de4/schema)
