---
title: "Get card info"
method: GET
path: "/api/fma/v1/card"
tags: ["Managed Custody Mode"]
---

# Get card info

`GET /api/fma/v1/card`

Fetch card metadata and a short-lived cardToken for secure card display. The response never exposes real PAN, CVV, or expiry; render them through UR's card display script using cardToken, which expires after 5 minutes.

## Headers

- `X-Api-Signature` string, required
- `X-Api-Deadline` string, required
- `X-Api-PublicKey` string, required
- `X-Ur-Id` string
- `X-External-User-Id` string

## Response `200`

Standard envelope. Business errors return HTTP 200 with a non-zero code.

- McCardResponse — Standard UR OpenAPI response envelope. code 0 means success; a non-zero code is a business error described by message.
  - `code` integer, required — 0 on success; non-zero business error code.
  - `message` string, required — Human-readable explanation. May be empty on success.
  - `data` McCardData
    - `security` McCardSecurity
      - `contactlessEnabled` boolean
      - `withdrawalEnabled` boolean
      - `internetPurchaseEnabled` boolean
      - `overallLimitsEnabled` boolean
    - `currencies` string[] — Currencies available for card transactions.
    - `tokenId` integer — The user's URID token ID.
    - `limits` McCardLimits
      - `account` McCardLimitItem
        - `restartDate` string — Date when the limit window restarts.
        - `restartDateMs` integer — Restart timestamp in milliseconds.
        - `used` number — Used allowance.
        - `available` number — Remaining allowance.
        - `max` number — Maximum allowance.
      - `withdrawal` McCardLimitItem
        - `restartDate` string — Date when the limit window restarts.
        - `restartDateMs` integer — Restart timestamp in milliseconds.
        - `used` number — Used allowance.
        - `available` number — Remaining allowance.
        - `max` number — Maximum allowance.
      - `internetPurchase` McCardLimitItem
        - `restartDate` string — Date when the limit window restarts.
        - `restartDateMs` integer — Restart timestamp in milliseconds.
        - `used` number — Used allowance.
        - `available` number — Remaining allowance.
        - `max` number — Maximum allowance.
    - `cardDesign` string
    - `cardHolder` string
    - `status` string — Card status, for example Active.
    - `currency` string — Default card transaction currency.
    - `masked` McCardMasked — Masked card fields. Real PAN, CVV, and expiry are rendered only through UR's card display script.
      - `cardNumber` string
      - `cvv2` string
      - `expiry` string
    - `cardToken` string — Short-lived token for card detail display only. Expires after 5 minutes. Do not store or log it.
    - `activeTokens` McCardTokenInfo[]
      - `id` string
      - `type` string
      - `createdAt` string
    - `inactiveTokens` McCardTokenInfo[]
      - `id` string
      - `type` string
      - `createdAt` string
    - `externalId` string — Stable card management ID. Use it for card management APIs.

---

[API](https://skmtc.net/ur/apis/ur-api.md) · [All operations](https://skmtc.net/ur/apis/ur-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ur/ur-api/revisions/087dcf516ce2/schema)