Browse the docs

Get card

GET /v2/api-gateway/cards/{card_id}

Card detail including pan / cvv. With a cardholder JWT the card must be linked to that cardholder, otherwise 404.

Request

Authentication: your API key in the x-api-key header.

Path parameters

Field	Type	Description
`card_id` required	string, uuid	Card UUID (the card `id` returned by the card endpoints).

Example request

cURL

curl --request GET \
     --url 'https://api.themooncard.com/v2/api-gateway/cards/7c9e6679-7425-40de-944b-e07fc1f90ae7' \
     --header 'x-api-key: YOUR_API_KEY'

Responses

200 Success

Field	Type	Description
`id` required	string	Card id.
`balance` required	string, nullable	Current balance, "0.00" style string, or null.
`true_balance` required	string, nullable	Balance including pending holds, or null.
`expiration` required	string, date-time, nullable	Expiration as an ISO-8601 timestamp, or null when unknown.
`display_expiration` required	string	Expiration formatted for display, e.g. "12/29".
`available_balance` required	string, nullable	Spendable balance, or null.
`terminated` required	integer	1 when the card is terminated, otherwise 0.One of: `0`, `1`
`card_product_id` required	string	Card product this card was issued from.
`pan` required	string	Full card number.
`cvv` required	string, nullable	Card verification value, or null when not available.
`support_token` required	string	Token to reference this card in support requests.
`frozen` required	integer	1 when the card is frozen, otherwise 0.One of: `0`, `1`
`activated` required	integer	1 when the card is activated, otherwise 0.One of: `0`, `1`
`metadata` required	object	The key-value data you stored on this card, returned exactly as you sent it. An empty object when you never set any — it is never null.
`card_type` required	string, nullable	Card type, e.g. "virtual" or "physical"; null when unknown.

JSON

{
  "id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
  "balance": "25.50",
  "true_balance": "25.50",
  "expiration": "2029-12-31T23:59:59Z",
  "display_expiration": "12/29",
  "available_balance": "25.50",
  "terminated": 0,
  "card_product_id": "a8358b18-be77-41b7-af4d-f4e9760cba86",
  "pan": "4111111111111111",
  "cvv": "123",
  "support_token": "ST-8QK2-4M7D",
  "frozen": 0,
  "activated": 1,
  "metadata": {
    "order_id": "ORD-10294"
  },
  "card_type": "VIRTUAL"
}

400 Error

Validation failed (errors[] lists each offending field) or a domain rule rejected the request ({ message, code }).

The body is the standard error object: see Errors.

401 Error

Missing or invalid credentials, e.g. { "message": "Invalid API Key", "code": "UNAUTHORIZED" }.

The body is the standard error object: see Errors.

404 Error

Card not found, not owned by your organization, or not linked to the calling cardholder.

The body is the standard error object: see Errors.

500 Error

Unexpected server error. Body is { message: "Internal server error", code: "INTERNAL_SERVER_ERROR" }.

The body is the standard error object: see Errors.

Last updated June 5, 2026