Get full card details by kit number

Retrieve complete card details including full card number (PAN), name on card, expiry date, and CVV using the kit number. This API returns sensitive card data and must be used only for authorized operations.

Both kitNo and token are explicitly validated by the backend. The token is a security token unique to your tenant, provided by M2P during onboarding. It is validated against the m2pBitUrlKey configuration.

Ensure secure storage and transmission of the response data in compliance with PCI DSS.

This is the recommended API for retrieving card details in external integrations, replacing the older deprecated generateCVV endpoint.

When Click to Pay (CTP) is enabled for the tenant, the response includes additional fields: ctpStatus (card-level CTP enrollment status) and ctpPaymentInstrumentId (Visa CTP payment instrument identifier). These fields are only present when CTP is enabled via the BUSINESSCUSTOMFIELD click.to.pay.enable configuration.

curl -X POST "https://api.m2p.com/Yappay/business-entity-manager/getDetailsByKitNo" \  -H "Content-Type: application/json" \  -d '{    "kitNo": "10000001",    "token": "S1H0AJON4DRPNNJ8G6BKG0D94N0DR5UFSVS4R4LI"  }'

{
  "result": {
    "expiryDate": "2804",
    "actualExpiryDate": "2028-04-30",
    "cvv": "123",
    "nameOnCard": "ABCDEF",
    "cardNo": "1111111111111111",
    "status": "ALLOCATED"
  },
  "exception": null,
  "pagination": null
}

{
  "result": null,
  "exception": {
    "detailMessage": "Mandatory field kitNo is missing",
    "shortMessage": "Missing mandatory field",
    "errorCode": "Y105",
    "languageCode": "en"
  },
  "pagination": null
}

{
  "result": null,
  "exception": {
    "detailMessage": "Token Verification Failed",
    "shortMessage": "Token Verification Failed",
    "errorCode": "Y303",
    "languageCode": "en"
  },
  "pagination": null
}