Skip to main content
The Retrieve Card Details endpoint returns the full, unmasked card number directly in the API response. If the retrieveCvv parameter is set, it also returns the CVV. Unlike Token Replacement in Request or the Universal Payment Gateway, this method delivers raw card data to your system rather than routing it directly to a third party.
Using this endpoint means your system receives raw card data in the API response. This puts your system, network, and all connected components in scope of PCI DSS compliance.We strongly recommend:
  • Do not use this endpoint in production. Use it only in your sandbox environment with test card data to verify that card details were stored correctly.
  • If you have a legitimate production need to retrieve full card details, consult with your PCI QSA before implementing. Consider using Card Display instead, which renders card details in a secure iframe without exposing raw data to your systems.

How It Differs from Token Replacement in Request

PCI Booking offers two distinct “token replacement” concepts. Understanding the difference is important: For production use, Token Replacement in Request is the recommended approach. PCI Booking acts as a proxy, replacing tokens with real card data in the outbound request body and forwarding it to the destination. Your systems never see the real card details.

When to Use This Endpoint

  • Sandbox verification. Confirm that card data was stored correctly during integration development.
  • PCI-compliant environments. If your system is already fully PCI DSS compliant and you need raw card data for a workflow that cannot use proxy-based token replacement.
  • Migration validation. After migrating cards from another vault, verify that the data was transferred accurately.
For most production scenarios, use one of these methods instead:

Next Steps

Card Display

View card details in a secure iframe without handling raw data.

Token Replacement in Request

Inject card data into outbound requests without PCI scope.

Use Tokens Overview

All ways to use your tokens.