> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usenumero.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Reveal Card Details

> Fetch the full PAN, CVV and expiry for a card (sensitive).

Returns the full card number, CVV and expiry, fetched live from the issuer. **Sensitive** — Numero never stores the full PAN. Only call this from a PCI-aware context and never log the response.

> Card endpoints use the same base URL and API key as the rest of the API, and are signature-gated:
> send `X-Numero-Signature` and `X-Numero-Signature-Version: v2` as well. See [Request signing](/03-request-signing).

## Endpoint

```
POST /api/v1/business/card/{reference}/reveal
```

**Signature required:** Yes

## Headers

| Header                       | Required | Description                                                                                                                                                                    |
| ---------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `X-Numero-Api-Key`           | Yes      | Your API key                                                                                                                                                                   |
| `X-Numero-Signature`         | Yes      | Base64 HMAC-SHA256 over the exact raw request body (POST) or the canonicalised query string (GET), keyed with your **Public Key**. See [Request signing](/03-request-signing). |
| `X-Numero-Signature-Version` | Yes      | Always `v2`.                                                                                                                                                                   |

## Path parameters

| Parameter   | Type   | Required | Description        |
| ----------- | ------ | -------- | ------------------ |
| `reference` | string | Yes      | The card reference |

## Request example

```bash theme={null}
curl -X POST "https://api.usenumero.com/numeroaccount/api/v1/business/card/NCRD24AD18BEBD474A/reveal" \
  -H "X-Numero-Api-Key: your_api_key" \
  -H "X-Numero-Signature: $SIGNATURE" \
  -H "X-Numero-Signature-Version: v2"
```

## Response

```json theme={null}
{
  "data": {
    "cardReference": "NCRD24AD18BEBD474A",
    "pan": "4288520000006353",
    "cvv": "123",
    "expiryMonth": "06",
    "expiryYear": "2029",
    "cardholderName": "Ada Obi"
  },
  "error": null,
  "meta": {
    "request_id": "req_365123ebc73323f1482508560ce6400e",
    "pagination": null
  }
}
```