POST///
Each time you want to display a virtual card’s sensitive data (for example, when using marqeta.js), you must first request a new, single-use client access token from the Marqeta platform by sending a POST request to the /users/auth/clientaccesstoken endpoint. Unredeemed client access tokens expire after five minutes.
Request body
| Fields | Description |
|---|---|
| application_token string Optional | Unique identifier of the application object.Allowable Values: 1–255 chars |
| card_token string Required | Unique identifier of the card whose sensitive information you want to display. Allowable Values: 1–255 chars |
Sample request body
JSON
{
"card_token": "my_card_01"
}
Response body
| Fields | Description |
|---|---|
| application object Conditionally returned | Contains client application information. Allowable Values: Existing application object |
| application.access_code string Conditionally returned | Access code of the client application. Allowable Values: 255 char max |
| application.assets_url string Conditionally returned | URL of the client application assets. Allowable Values: 255 char max |
| application.client_api_base_url string Conditionally returned | Base URL of the client API. Allowable Values: 255 char max |
| application.environment string Conditionally returned | Client application’s environment. Allowable Values: 255 char max |
| application.program string Conditionally returned | Name of the program on the Marqeta platform. Allowable Values: 255 char max |
| application.program_short_code string Conditionally returned | Short code of the program on the Marqeta platform. Allowable Values: 255 char max |
| application.token string Conditionally returned | Unique identifier of the application object.Allowable Values: 36 char max |
| card_token string Conditionally returned | Unique identifier of the card whose sensitive information you want to display. Allowable Values: Existing card token |
| created datetime Conditionally returned | Date and time when the client access token was created, in UTC. Allowable Values: datetime Format: yyyy-MM-ddThh:mm:ssZ |
| expires datetime Conditionally returned | Date and time when the client access token expires, in UTC. Allowable Values: datetime Format: yyyy-MM-ddThh:mm:ssZ |
| token string Conditionally returned | Value of the client access token to redeem when displaying sensitive card data. Allowable Values: Existing client access token |
Sample response body
JSON
{
"created": "2022-07-29T12:00:00Z",
"expires": "2022-07-29T12:05:00Z",
"token": "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"
}