Skip to main content
GET

Card Display Guide

Display stored card details to authorized users
This is not an API call you make from your server: you build the URL with the query parameters below and use it as the src of an iframe element on your page, or redirect the customer’s browser to it. The browser then loads the hosted Card Display Form directly from PCI Booking. For the element classes you can target with custom CSS, see the form structure reference.

Parameters

Authentication

This is a browser-facing endpoint. Use one of the authentication methods below instead of the API key shown above.
accessToken
string
Recommended. A long-lived token for browser-side calls. How to generate.
sessionToken
string
Alternative. Valid for 5 minutes. How to generate.
If both are provided, the session token takes precedence.

Path Parameters

cardtoken
string
required
The token ID as returned by one of the tokenization methods.

Query String

accessToken2
string
A second Access Token, required when the card includes a CVV. Used for the “Clear CVV” method.

Display Options

language
string
required
The form’s language in ISO 639-1 (2-letter) format. See here. If an unsupported language is received, English will be displayed. To add languages, contact our support team.
css
string
The CSS resource name. See our guide on managing stylesheets. If omitted, PCI Booking uses the default CSS.
postMessageHost
string
The domain name of the host site where the iframe is displayed. Read more on setting up the postMessage mechanism.
formatCardNumber
boolean
Whether to display the card number in blocks of digits or as a single string of numbers.

Response

200 - The browser renders the hosted Card Display Form.