Get saved cards

Returns the cards saved for pg_user_id: their tokens pg_card_token, masked numbers and status.

Cards are saved by Save card, Save card without a charge and Save card for payouts.

If saving cards for payouts is enabled for the merchant, the list contains payout cards too: they have pg_is_full = 0 and cannot be used for payments.

If the client has no saved cards, the response contains only pg_salt and pg_sig.

Request flow

Result

Response	Meaning	Next step
One or more `card` elements	Saved cards of the client.	Pay by a card with Create payment.
Only `pg_salt` and `pg_sig`	The client has no saved cards.	Save a card with Save card.
`pg_status = error`	The request is rejected.	See «Errors» below.

Errors

The error is returned in pg_error_code and pg_error_description; the HTTP status depends on the error. Error responses are not signed.

HTTP	`pg_error_code`	When	What to do
`200`	`0`	A parameter is missing or invalid: `pg_error_description` names it.	Fix the request.
`401`	`1100`	The signature is missing or invalid.	Check the signature: see Merchant API Overview.

Request example

Required fields only. pg_sig is calculated with the secret key test_secret_key.
Line breaks in the body are added for readability: send the body as one line.

Responses

🟢200Success

application/xml

Bodyapplication/xml

Examples

Two saved cards (pg_extend_data = 1)No saved cards

<?xml version="1.0" encoding="utf-8"?>
<response>
    <card>
        <pg_merchant_id>13991</pg_merchant_id>
        <pg_status>approved</pg_status>
        <pg_card_token>fbf5aa8b-3780-47f8-809a-e61a94c69b47</pg_card_token>
        <pg_card_hash>4716-04XX-XXXX-1981</pg_card_hash>
        <pg_is_full>1</pg_is_full>
        <pg_card_id></pg_card_id>
        <created_at></created_at>
        <pg_recurring_profile_id></pg_recurring_profile_id>
        <bank_alias>innforunionpaycardnetwork</bank_alias>
        <brand_alias>UNIONPAY</brand_alias>
        <expiry_year>30</expiry_year>
        <expiry_month>12</expiry_month>
    </card>
    <card>
        <pg_merchant_id>13991</pg_merchant_id>
        <pg_status>approved</pg_status>
        <pg_card_token>a783d897-4167-46ba-85dc-2dbd8246fc48</pg_card_token>
        <pg_card_hash>4111-11XX-XXXX-1111</pg_card_hash>
        <pg_is_full>1</pg_is_full>
        <pg_card_id></pg_card_id>
        <created_at></created_at>
        <pg_recurring_profile_id></pg_recurring_profile_id>
        <bank_alias>UNKNOWN</bank_alias>
        <brand_alias>UNKNOWN</brand_alias>
        <expiry_year>30</expiry_year>
        <expiry_month>12</expiry_month>
    </card>
    <pg_salt>eBjYyfeB</pg_salt>
    <pg_sig>5769db51b29e49fddf2d1530aaac8494</pg_sig>
</response>

🟢200Error

🟠401Unauthorized

Request flow#

Result#

Errors#

Request example#

Request

Responses

Request flow

Result

Errors

Request example