Skip to content
rigid.fi

Mint a single-use secure-data grant

POST/v1/cards/{id}/secure-data

Requires an API client bearer token.

Mints a show-once, 60-second grant token for revealing the card PAN. The token is returned once in the response body (never in a URL) and is redeemed via POST /v1/cards/{id}/secure-data/redeem. Not idempotency-keyed.

Parameters

Path parameters

NameRequiredDescription
idrequired

Example

curl -X POST https://api.rigid.fi/v1/cards/{id}/secure-data \
  -H "Authorization: Bearer $RIGID_API_TOKEN"

Responses

201

Minted secure-data grant. The token is shown exactly once.

tokenstringrequired
expires_atstringrequired
401

Authentication required

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
403

Forbidden

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
404

Card not found

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
500

Internal server error

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring