Skip to content
rigid.fi

Redeem a secure-data grant for the full PAN

POST/v1/cards/{id}/secure-data/redeem

Requires an API client bearer token.

Redeems a show-once secure-data token (sent in the request body, never the URL) for the full card PAN, returned exactly once. Single-use: a second redeem of the same token returns 404. Not idempotency-keyed.

Parameters

Path parameters

NameRequiredDescription
idrequired

Request body

tokenstringrequired

Example

curl -X POST https://api.rigid.fi/v1/cards/{id}/secure-data/redeem \
  -H "Authorization: Bearer $RIGID_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "string"
}'

Responses

200

The full plaintext PAN, returned exactly once.

panstringrequired
400

Validation error

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
401

Authentication required

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
403

Forbidden

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
404

Grant unknown, expired, or already redeemed; or card not found

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
500

Internal server error

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring
503

Secure data temporarily unavailable — retry with the same token

typestringrequired
titlestringrequired
statusintegerrequired
detailstring
instancestring