Skip to main content
GET
Get wallet token details

Authorizations

Authorization
string
header
required

JWT bearer token obtained via the OAuth2 client-credentials grant from the platform Authentication API. The token's scopes gate the endpoints it may call, and its audience names the Guardian instance. This is the standard way to authenticate to Guardian.

Path Parameters

id
string<uuid>
required

The ID of the wallet token to read.

Response

Success response

id
string<uuid>
required
kind
enum<string>
required

The specific credential kind.

Available options:
google_pay_pan_only,
google_pay_cryptogram_3ds,
apple_pay_dpan
Example:

"google_pay_pan_only"

ingestion_path
string
required

The wallet the token was ingested from.

Example:

"google_pay"

scheme
enum<string>
required
Available options:
visa,
mastercard,
american express,
discover,
diners club,
jcb,
unionpay
card
object
required
created_at
string<date-time>
required
Example:

"2026-06-29T12:00:00Z"

auth_method
enum<string>

The authentication method of the wallet credential. An Apple Pay token is always CRYPTOGRAM_3DS. Determines which placeholders are available when forwarding and whether the token can be promoted.

Available options:
PAN_ONLY,
CRYPTOGRAM_3DS
requires_3ds
boolean

Whether the payment still requires 3-D Secure authentication on your side.

promoted_to
string | null

The ID of the network token this wallet token was promoted to. null until the token is promoted.

Example:

null

deleted_at
string | null

Set when the token has been deleted and its card data scrubbed.

Example:

null