---
title: "Show Card PAN - HTML"
method: POST
path: "/cards/{cardId}/reveal-html"
tags: ["Card"]
---

# Show Card PAN - HTML

`POST /cards/{cardId}/reveal-html`

## Path parameters

- `cardId` string, uuid, required

## Headers

- `Accept-Version` string, required — Specifies the API version to use for this request.

## Request body

- object
  - `publicKey` string, nullable — Uses base64 format. • When **publicKey** is provided, we return the **accessUrl** for the iframe in an encrypted format. • When **publicKey** is not provided, we return the **accessUrl** without any encryption
  - `stylesheetUrl` string — URL to your stylesheet that can be used for customizing the CSS of the iframe's content.
  - `copyPan` boolean — Display a button to copy the card PAN to clipboard.

## Response `200`

accessUrl containing card information, which can be accessed for upto 60 seconds.

- object
  - `accessUrl` string, required — Valid for 1 minute. • When **publicKey** is provided, we return the **accessUrl** for the iframe in an encrypted format ( base64 format). • When **publicKey** is not provided, we return the **accessUrl** without any encryption.

## Other responses

- `400` — Invalid inputs

---

[API](https://skmtc.net/reap-global/apis/reap-api.md) · [All operations](https://skmtc.net/reap-global/apis/reap-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/reap-global/reap-api/revisions/525072733e02/schema)