Toqio Card Details API

The Card Details API from Toqio — 6 operation(s) for card details.

Operations 6

GET /customers/{customerId}/cards/{cardId}/image/url Get card image URL #
GET /customers/{customerId}/cards/image/url Get card image URL by template #
GET /customers/{customerId}/cards/{cardId}/settings Get card settings #
POST /customers/{customerId}/cards/{cardId}/pan Get card PAN (Primary Account Number) #
GET /customers/{customerId}/cards/{cardId}/pin Get card PIN #
GET /customers/{customerId}/cards/{cardId}/pin/async Get card PIN asynchronously (POC only) #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/toqio-card-details-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

toqio-card-details-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Card Management Card Details API
  description: Comprehensive API for managing customer cards including physical and virtual cards, debit and credit cards, with full lifecycle management
  version: 1.0.0
  contact:
    name: Toqio Integration Hub
servers:
- url: https://your_connector_url/
  description: Your connector base URL
tags:
- name: Card Details
paths:
  /customers/{customerId}/cards/{cardId}/image/url:
    get:
      tags:
      - Card Details
      summary: Get card image URL
      description: 'Retrieves the URL for the card''s visual design image.


        **Business Context**: Used to display card artwork in the frontend application. Returns the URL of the card image that can be rendered in the UI.'
      operationId: getCardImageUrl
      parameters:
      - $ref: '#/components/parameters/customerId'
      - $ref: '#/components/parameters/cardId'
      responses:
        '200':
          description: Card image URL retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToqioResponseString'
              example:
                data: https://cdn.provider.com/card-designs/corporate-blue-123.png
                code: '200'
                message: Card image URL retrieved successfully
                httpStatus: 200
                requestId: 26b0f78a-79f9-426d-a20b-79841345ae51
                date: 1736935800000
  /customers/{customerId}/cards/image/url:
    get:
      tags:
      - Card Details
      summary: Get card image URL by template
      description: 'Retrieves the card image URL based on the customer''s default card template/design.


        **Business Context**: Used to show the default card design before a card is issued, helping users preview what their card will look like.'
      operationId: getCardImageUrlByTemplate
      parameters:
      - $ref: '#/components/parameters/customerId'
      responses:
        '200':
          description: Template card image URL retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToqioResponseString'
  /customers/{customerId}/cards/{cardId}/settings:
    get:
      tags:
      - Card Details
      summary: Get card settings
      description: 'Retrieves configuration settings for a specific card from the banking provider.


        **Business Context**: Used to retrieve provider-specific card configuration and capabilities.'
      operationId: getCardSettings
      parameters:
      - $ref: '#/components/parameters/customerId'
      - $ref: '#/components/parameters/cardId'
      responses:
        '200':
          description: Card settings retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToqioResponseCardSettingsResponse'
  /customers/{customerId}/cards/{cardId}/pan:
    post:
      tags:
      - Card Details
      summary: Get card PAN (Primary Account Number)
      description: 'Retrieves sensitive card details including PAN, CVV, and expiry date. Requires security verification (encrypted security code).


        **Business Context**: Called when user needs to view full card details. Security code is encrypted using RSA public key before transmission. Supports both standard encryption and MEA Wallet wrapped key encryption.'
      operationId: getPan
      parameters:
      - $ref: '#/components/parameters/customerId'
      - $ref: '#/components/parameters/cardId'
      requestBody:
        description: Security parameters for PAN retrieval (encrypted security code)
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                encryptedSecurityCode:
                  type: string
                  description: RSA-encrypted security code
                wrappedKey:
                  type: string
                  description: MEA Wallet wrapped key (if using MEA Wallet encryption)
                iv:
                  type: string
                  description: Initialization vector for encryption
                tag:
                  type: string
                  description: Authentication tag for encryption
              required:
              - encryptedSecurityCode
      responses:
        '200':
          description: PAN retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToqioResponseCardPanResponse'
        '401':
          description: Unauthorized - Invalid security code
  /customers/{customerId}/cards/{cardId}/pin:
    get:
      tags:
      - Card Details
      summary: Get card PIN
      description: 'Retrieves the card PIN number. Requires elevated security permissions.


        **Business Context**: Used when cardholder needs to retrieve their PIN for ATM or POS transactions.'
      operationId: getPin
      parameters:
      - $ref: '#/components/parameters/customerId'
      - $ref: '#/components/parameters/cardId'
      responses:
        '200':
          description: PIN retrieved successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToqioResponsePinResponse'
  /customers/{customerId}/cards/{cardId}/pin/async:
    get:
      tags:
      - Card Details
      summary: Get card PIN asynchronously (POC only)
      description: Asynchronous PIN retrieval endpoint for proof-of-concept testing only. Not for production use.
      operationId: getPinAsync
      deprecated: true
      parameters:
      - $ref: '#/components/parameters/customerId'
      - $ref: '#/components/parameters/cardId'
      responses:
        '202':
          description: PIN retrieval initiated
components:
  schemas:
    ToqioResponsePinResponse:
      type: object
      properties:
        data:
          type: object
          properties:
            pin:
              type: string
              description: Card PIN
              example: '1234'
        code:
          type: string
          description: Response code
          example: '200'
        errorSeverity:
          type: string
          enum:
          - INFO
          - WARNING
          - ERROR
          - FATAL
          description: Severity level of the response (only present on errors)
        message:
          type: string
          description: Human-readable response message
          example: Card PIN retrieved successfully
        httpStatus:
          type: integer
          description: HTTP status code
          example: 200
        requestId:
          type: string
          description: Unique request identifier for tracing
          example: 26b0f78a-79f9-426d-a20b-79841345ae51
        date:
          type: integer
          format: int64
          description: Timestamp as epoch milliseconds
          example: 1736935800000
    ToqioResponseCardPanResponse:
      type: object
      properties:
        data:
          type: object
          properties:
            pan:
              type: string
              description: Full card number
              example: '4111111111111111'
            cvv:
              type: string
              description: CVV security code
              example: '123'
            expiryDate:
              type: string
              description: Expiry date
              example: 12/27
        code:
          type: string
          description: Response code
          example: '200'
        errorSeverity:
          type: string
          enum:
          - INFO
          - WARNING
          - ERROR
          - FATAL
          description: Severity level of the response (only present on errors)
        message:
          type: string
          description: Human-readable response message
          example: Card PAN retrieved successfully
        httpStatus:
          type: integer
          description: HTTP status code
          example: 200
        requestId:
          type: string
          description: Unique request identifier for tracing
          example: 26b0f78a-79f9-426d-a20b-79841345ae51
        date:
          type: integer
          format: int64
          description: Timestamp as epoch milliseconds
          example: 1736935800000
    ToqioResponseString:
      type: object
      properties:
        data:
          type: string
          description: Response data as string
          example: https://cdn.provider.com/resource
        code:
          type: string
          description: Response code
          example: '200'
        errorSeverity:
          type: string
          enum:
          - INFO
          - WARNING
          - ERROR
          - FATAL
          description: Severity level of the response (only present on errors)
        message:
          type: string
          description: Human-readable response message
          example: Resource retrieved successfully
        httpStatus:
          type: integer
          description: HTTP status code
          example: 200
        requestId:
          type: string
          description: Unique request identifier for tracing
          example: 26b0f78a-79f9-426d-a20b-79841345ae51
        date:
          type: integer
          format: int64
          description: Timestamp as epoch milliseconds
          example: 1736935800000
    ToqioResponseCardSettingsResponse:
      type: object
      properties:
        data:
          type: object
          description: Card settings from provider
          additionalProperties: true
        code:
          type: string
          description: Response code
          example: '200'
        errorSeverity:
          type: string
          enum:
          - INFO
          - WARNING
          - ERROR
          - FATAL
          description: Severity level of the response (only present on errors)
        message:
          type: string
          description: Human-readable response message
          example: Card settings retrieved successfully
        httpStatus:
          type: integer
          description: HTTP status code
          example: 200
        requestId:
          type: string
          description: Unique request identifier for tracing
          example: 26b0f78a-79f9-426d-a20b-79841345ae51
        date:
          type: integer
          format: int64
          description: Timestamp as epoch milliseconds
          example: 1736935800000
  parameters:
    customerId:
      name: customerId
      in: path
      description: Unique identifier of the customer
      required: true
      schema:
        type: string
      example: cust-123
    cardId:
      name: cardId
      in: path
      description: Unique identifier of the card
      required: true
      schema:
        type: string
      example: card-abc123
x-source-pages:
- https://integrate.toq.io/reference/activatecard
- https://integrate.toq.io/reference/activatecardotp
- https://integrate.toq.io/reference/cancelcard-1
- https://integrate.toq.io/reference/cancelscheduledpayment
- https://integrate.toq.io/reference/deletecard
- https://integrate.toq.io/reference/fetchcreditstatement
- https://integrate.toq.io/reference/getavailablecardlimits
- https://integrate.toq.io/reference/getcard-1
- https://integrate.toq.io/reference/getcardimageurl
- https://integrate.toq.io/reference/getcardimageurlbytemplate
- https://integrate.toq.io/reference/getcardlimitsminmax
- https://integrate.toq.io/reference/getcardsettings
- https://integrate.toq.io/reference/getcreditdetails
- https://integrate.toq.io/reference/getpan
- https://integrate.toq.io/reference/getpartnertoken
- https://integrate.toq.io/reference/getpin
- https://integrate.toq.io/reference/getpinasync
- https://integrate.toq.io/reference/gettotpsecret
- https://integrate.toq.io/reference/issuecard
- https://integrate.toq.io/reference/linkedexternalaccounts
- https://integrate.toq.io/reference/linkexternalaccount
- https://integrate.toq.io/reference/removelinkedexternalaccount
- https://integrate.toq.io/reference/scheduleautopay
- https://integrate.toq.io/reference/scheduledcreditpayments
- https://integrate.toq.io/reference/schedulepaymentcard
- https://integrate.toq.io/reference/suspendcard-1
- https://integrate.toq.io/reference/updatecard-1
- https://integrate.toq.io/reference/updatecardalias
- https://integrate.toq.io/reference/updatecardreadonly