---
title: "List owned cards — Anis Developers"
description: "The cards a wallet has bought, with their codes hidden. Pages with a cursor."
url: https://developers.anis.ly/reference/list-owned-cards/
language: en
---

> Every page of this documentation: https://developers.anis.ly/llms.txt

[API reference](https://developers.anis.ly/reference.md) · Owned cards

# List owned cards

`GET /v1/wallets/{walletId}/cards`

The cards a wallet has bought, with their codes hidden. Pages with a cursor.

- **Permission:** `cards:read`
- **Authentication:** Signed read
- **Staff-set limits it counts toward:** All requests
- **.NET SDK:** `anis.OwnedCards.ListAsync(walletId)`

## Parameters

| Name | In | Type | Notes |
| --- | --- | --- | --- |
| `walletId` (required) | `path` | UUID | A UUID, lower-case with hyphens. |
| `cursor` (optional) | `query` | string | The `nextCursor` of the previous page, passed back exactly as received. Leave it out for the first page. |

## Request

Signed with your key. No body, no nonce.

Headers: `Signature-Input`, `Signature`, `X-Anis-Date`, `Accept-Language` (optional). The SDKs set all of them for you.

**Body:** none.

## Responses

| Status | Meaning | Body |
| --- | --- | --- |
| 200 | Success. | [MaskedCardCollection](#type-maskedcardcollection) |
| 401 | Refused: not authenticated. | [Problem](#refusals) |
| 403 | Refused: not allowed. | [Problem](#refusals) |
| 404 | Refused: not found, or not yours. | [Problem](#refusals) |
| 422 | Refused: the request breaks a rule. | [Problem](#refusals) |
| 429 | Refused: a limit was reached. | [Problem](#refusals) |
| 503 | No decision: a dependency was unavailable. | [Problem](#refusals) |

Every answer is signed by Anis; the SDKs check it before you see it.

## Refusals

Every refusal is a signed problem. Branch on its `code`; each links to what it means and what to do.

| Error | Code | Status |
| --- | --- | --- |
| [Invalid credentials](https://developers.anis.ly/errors/invalid-credentials.md) | `invalid_credentials` | 401 |
| [Insufficient scope](https://developers.anis.ly/errors/insufficient-scope.md) | `insufficient_scope` | 403 |
| [Source address not allowed](https://developers.anis.ly/errors/source-ip-not-allowed.md) | `source_ip_not_allowed` | 403 |
| [Rate limited](https://developers.anis.ly/errors/rate-limited.md) | `rate_limited` | 429 |
| [Account not authorised](https://developers.anis.ly/errors/binding-not-authorized.md) | `binding_not_authorized` | 403 |
| [Account inactive](https://developers.anis.ly/errors/account-inactive.md) | `account_inactive` | 403 |
| [Wallet not granted](https://developers.anis.ly/errors/wallet-not-granted.md) | `wallet_not_granted` | 404 |
| [Validation failed](https://developers.anis.ly/errors/validation-failed.md) | `validation_failed` | 422 |
| [Service unavailable](https://developers.anis.ly/errors/dependency-unavailable.md) | `dependency_unavailable` | 503 |
| [Request timeout](https://developers.anis.ly/errors/request-timeout.md) | `request_timeout` | 504 |
| [Internal error](https://developers.anis.ly/errors/internal-error.md) | `internal_error` | 500 |

## Types

### MaskedCardCollection

| Field | Type | Notes |
| --- | --- | --- |
| `items` (required) | list of [MaskedCard](#type-maskedcard) | The owned cards on this page. |
| `nextCursor` | string | Pass it as `cursor` to get the next page. Absent on the last page. |

### MaskedCard

| Field | Type | Notes |
| --- | --- | --- |
| `id` (required) | UUID | The sold card’s id — what revealing one card takes. |
| `orderOperationId` | UUID | The operation id of the order that bought it. |
| `invoiceId` | any | The invoice it is on — what revealing a whole invoice takes. |
| `card` | object | The catalogue card it was sold from. |
| `card.id` | UUID | The catalogue card’s id. |
| `card.name` | [LocalizedText](#type-localizedtext) | The catalogue card’s name, in Arabic and English. |
| `serialNumberMasked` | string | The serial number, partly hidden. The full codes come only from a reveal. |
| `credentialAvailable` (required) | boolean | Whether this card’s codes can be revealed. |
| `purchasedAt` | string (date-time) | When it was bought. |

### LocalizedText

| Field | Type | Notes |
| --- | --- | --- |
| `ar` | string | The Arabic text. |
| `en` | string | The English text. |