> ## Documentation Index
> Fetch the complete documentation index at: https://docs.meru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Card Secrets

> This endpoint retrieves sensitive card details including the full card number and CVV (requires session ID for security)

### Params

<ParamField path="cardId" type="string" required>
  The unique card identifier
</ParamField>

### Headers

<ParamField header="session-id" type="string" required>
  A valid session ID for authentication and security. This ensures that sensitive card data is only accessed during an active, authenticated session.
</ParamField>

### Response

<ResponseField name="success" type="boolean">
  Indicates whether the call was successful
</ResponseField>

<ResponseField name="cardNumber" type="string">
  The full card number (PCI-sensitive data)
</ResponseField>

<ResponseField name="cvv" type="string">
  The card CVV/CVC code
</ResponseField>

<ResponseField name="expirationMonth" type="string">
  Card expiration month (MM)
</ResponseField>

<ResponseField name="expirationYear" type="string">
  Card expiration year (YYYY)
</ResponseField>

<RequestExample>
  ```bash cURL theme={null}
  curl --location --request GET 'https://stablecoin-api.sandbox.getmeru.com/api/v1/cards-program/cards/7a8b9c0d-1e2f-3a4b-5c6d-7e8f9a0b1c2d/secrets' \
  --header 'Content-Type: application/json' \
  --header 'api-key: <api-key>' \
  --header 'session-id: <session-id>'
  ```

  ```js Javascript theme={null}
  const response = await fetch('https://stablecoin-api.sandbox.getmeru.com/api/v1/cards-program/cards/7a8b9c0d-1e2f-3a4b-5c6d-7e8f9a0b1c2d/secrets', {
    method: 'GET',
    headers: {
      'Content-Type': 'application/json',
      'api-key': '<api-key>',
      'session-id': '<session-id>'
    }
  });

  const data = await response.json();
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "success": true,
    "cardNumber": "4242424242424242",
    "cvv": "123",
    "expirationMonth": "12",
    "expirationYear": "2027"
  }
  ```
</ResponseExample>

### Error Responses

<ResponseExample>
  ```json 401 theme={null}
  {
    "success": false,
    "error": "Unauthorized. Please check your authentication credentials."
  }
  ```

  ```json 400 theme={null}
  {
    "success": false,
    "error": "Session ID header is required"
  }
  ```

  ```json 404 theme={null}
  {
    "success": false,
    "error": "Card not found."
  }
  ```
</ResponseExample>

### Security Note

This endpoint returns highly sensitive cardholder data. Ensure that:

* You have a valid, active session
* All communication is over HTTPS
* The data is handled in a PCI-compliant manner
* Session IDs are properly managed and expire appropriately