List Saved Cards

GET/v1/customers/{id}/cardsRecommended

List a customer's saved card tokens (references only, never PANs).

Authentication

Signature Pattern

HMAC-SHA256(secretKey, "{timestamp}\nGET\n/v1/customers/{id}/cards\n{sha256(\"\")}")

Header	Value	Description
`X-Api-Key`	pk_live_a1b2c3d4e5f6g7h8	Merchant public API key
`X-Signature`	{hmac_sha256_hex}	Hex HMAC-SHA256 request signature
`X-Timestamp`	2026-04-13T10:00:00Z	ISO 8601 UTC request time (±5 min)

Response Parameters

Field	Type	Example
`items`	array	[…]
`items[].id`	string	"cuc_2b3c4d5e6f70"
`items[].customerId`	string	"cus_a1b2c3d4e5f6"
`items[].cardToken`	string	"tok_9f8e7d6c5b4a"
`items[].last4`	string	"4321"
`items[].brand`	string	"visa"
`items[].expMonth`	integer	12
`items[].expYear`	integer	2028
`items[].isDefault`	boolean	true
`items[].createdAt`	string	"2026-04-13T10:05:00Z"

Response Example

JSONResponse

{
  "items": [
    {
      "id": "cuc_2b3c4d5e6f70",
      "customerId": "cus_a1b2c3d4e5f6",
      "cardToken": "tok_9f8e7d6c5b4a",
      "last4": "4321",
      "brand": "visa",
      "expMonth": 12,
      "expYear": 2028,
      "isDefault": true,
      "createdAt": "2026-04-13T10:05:00Z"
    }
  ]
}

Status Codes

200Success

201Created

400Bad Request

401Unauthorized

404Not Found

429Rate Limited

Try itMock

GEThttps://api.pay.sandbox.kvell.group

← Attach Saved Card Get Default Card→