> ## Documentation Index
> Fetch the complete documentation index at: https://developers.pcibooking.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Request a Card Display Form

> Create a Card Display form for displaying stored credit card data within an e-commerce site.

<Card title="Card Display Guide" icon="book" href="/use-tokens/card-display">
  Display stored card details to authorized users
</Card>

The response is the HTML content of the Card Display Form. You can use the request URL as the page URL that a customer is directed to, or as the source URL of an iframe element on your page.

## Parameters

### Authentication

<Warning>
  This is a browser-facing endpoint. Use one of the authentication methods below instead of the API key shown above.
</Warning>

<ParamField query="accessToken" type="string">
  Recommended. A long-lived token for browser-side calls. [How to generate](/getting-started/authentication#access-token).
</ParamField>

<ParamField query="sessionToken" type="string">
  Alternative. Valid for 5 minutes. [How to generate](/api-reference/general/start-temporary-session).
</ParamField>

If both are provided, the session token takes precedence.

### Path Parameters

<ParamField path="cardtoken" type="string" required>
  The token ID as returned by one of the tokenization methods.
</ParamField>

### Query String

<ParamField query="accessToken2" type="string">
  A second Access Token, required when the card includes a CVV. Used for the "[Clear CVV](/api-reference/manage-tokens/clear-cvv)" method.
</ParamField>

### Display Options

<ParamField query="language" type="string" required>
  The form's language in ISO 639-1 (2-letter) format. [See here](/account-setup/custom-translations). If an unsupported language is received, English will be displayed. To add languages, [contact our support team](mailto:support@pcibooking.net).
</ParamField>

<ParamField query="css" type="string">
  The CSS resource name. See our guide on [managing stylesheets](/account-setup/stylesheets). If omitted, PCI Booking uses the [default CSS](/account-setup/stylesheets).
</ParamField>

<ParamField query="postMessageHost" type="string">
  The domain name of the host site where the iframe is displayed. Read more on [setting up the postMessage mechanism](/capture-cards/postmessage-notifications).
</ParamField>

<ParamField query="formatCardNumber" type="boolean">
  Whether to display the card number in blocks of digits or as a single string of numbers.
</ParamField>

<RequestExample>
  ```javascript Node.js theme={null}
  const params = new URLSearchParams({
    language: 'en',
    formatCardNumber: 'true',
    postMessageHost: 'https://www.yoursite.com'
  });

  const response = await fetch(
    `https://service.pcibooking.net/api/payments/paycard/tok_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4/display?${params}`,
    {
      headers: {
        'Authorization': 'APIKEY your-api-key'
      }
    }
  );

  const html = await response.text();
  console.log(html);
  ```

  ```python Python theme={null}
  import requests

  response = requests.get(
      'https://service.pcibooking.net/api/payments/paycard/tok_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4/display',
      params={
          'language': 'en',
          'formatCardNumber': 'true',
          'postMessageHost': 'https://www.yoursite.com'
      },
      headers={
          'Authorization': 'APIKEY your-api-key'
      }
  )

  print(response.text)
  ```
</RequestExample>

## Response

<ResponseExample>
  ```html 200 theme={null}
  HTML content of form
  ```
</ResponseExample>