latestOpenAPI 3.1.02026-08-108094177.6 KB

087dcf516ce2

Managed Custody Mode

Get card info

Fetch card metadata and a short-lived cardToken for secure card display. The response never exposes real PAN, CVV, or expiry; render them through UR's card display script using cardToken, which expires after 5 minutes.

get/api/fma/v1/card

Headers

X-Api-Signaturestring required

0x-prefixed 65-byte hex EIP-191 signature over the Partner Auth message. See the Signature and verify guide.

X-Api-Deadlinestring required

Unix seconds. UR rejects the request when the current time is past the deadline. Keep the validity window at or under 5 minutes.

X-Api-PublicKeystring required

0x-prefixed partner signer address registered with UR.

X-Ur-Idstring

Send at least one of X-Ur-Id or X-External-User-Id. When both are present, UR resolves the user by X-Ur-Id first.

X-External-User-Idstring

Send at least one of X-Ur-Id or X-External-User-Id. When both are present, UR resolves the user by X-Ur-Id first.

Response

Standard envelope. Business errors return HTTP 200 with a non-zero code.

codeinteger required

0 on success; non-zero business error code.

messagestring required

Human-readable explanation. May be empty on success.