m2pfintech
API LibraryCard Lifecycle

Fetch Card Details by Card Number V2

Retrieves detailed card and account information using an encrypted card number. The card number must be encrypted using AES-GCM encryption with the shared encryption key. The algorithm uses a 16-byte random IV and 128-bit authentication tag. The encrypted value should be Base64 encoded with the IV prepended to the ciphertext. Returns full card details including account information, card preferences, toggle settings, and the last PIN change date.

POST
/kit-manager/v2/fetchByCardNo

Authorization

tenantAuth
tenant<token>

The DCMS tenant name for multi-tenant isolation. Every API call must include this header to identify the client organization.

In: header

Header Parameters

tenant*string

The DCMS client or tenant name for multi-tenant isolation.

Request Body

application/json

encryptedCardNumber*string

AES-GCM encrypted full card number. Base64 encoded with IV prepended to ciphertext.

Response Body

application/json

curl -X POST "https://api.dcms.example.com/v1/kit-manager/v2/fetchByCardNo" \  -H "tenant: ACME_BANK" \  -H "Content-Type: application/json" \  -d '{    "encryptedCardNumber": "Rto42h3PmLXqSxd9GIGhp65K+zL1i+mTEAyEvmZ8G5ZMYUm6TGsHcYsIqPzeDeDzQ=="  }'
{
  "result": {
    "entityId": "validatePin0",
    "accountInfo": {
      "accountNo": 8642135,
      "accountStatus": "ACTIVE",
      "accountType": "SAVING",
      "accountsCurrency": "INR",
      "branchId": "BRANCH01",
      "defaultAccount": true,
      "ifscCode": "INDB0000001",
      "product": "Savings Account",
      "schemeCode": "2003",
      "kitDetails": {
        "cardIssuanceDate": "2023-12-18T10:14:11.552+00:00",
        "cardIssuanceType": "WELCOME_KIT",
        "cardName": "My Debit Card",
        "cardStatus": "ACTIVE",
        "cardType": "PHYSICAL",
        "encryptedCardNumber": "4faN/yNdT8E+5wVy/GlfTWYsVPHAYFPaPWDn+SSL59w=",
        "expDate": "2029-07-31T00:00:00.000+00:00",
        "kitNo": "4240181647",
        "lastPinChangedDate": "2024-05-15T10:12:33.421+00:00",
        "plasticCode": "PCLAS",
        "domestic": {
          "channelLimit": {
            "atm": 20000,
            "ecom": 30000,
            "pos": 50000
          },
          "totalLimit": 100000
        },
        "international": {
          "channelLimit": {
            "atm": 10000,
            "ecom": 20000,
            "pos": 20000
          },
          "totalLimit": 50000
        },
        "toggle": {
          "locationShield": false,
          "superOtp": true,
          "superPin": false,
          "swipeToPay": true
        }
      }
    }
  },
  "exception": null,
  "pagination": null
}

Apply For A Card POST

Applies for a new physical card when no card is available for the customer, or converts an existing virtual card to a physical card. When a kitNo is provided, the existing virtual card is converted to physical. When only entityId is provided without kitNo, a fresh physical card is issued. The deliveryAddress field specifies which address type (PERMANENT or COMMUNICATION) to use for card delivery.

Fetch Transaction POST

Retrieves card transaction details with comprehensive filtering options. Supports filtering by kit number, entity ID, account number, date range, transaction channel, and response code. Returns paginated results with detailed transaction information including acquirer details, merchant information, amount, currency, authentication flags, and processing metadata.