---
title: "Reveal a card — Anis Developers"
description: "Shows one bought card’s codes. Sends no body."
url: https://developers.anis.ly/reference/reveal-card/
language: en
---

> Every page of this documentation: https://developers.anis.ly/llms.txt

[API reference](https://developers.anis.ly/reference.md) · Owned cards

# Reveal a card

`POST /v1/wallets/{walletId}/cards/{soldCardId}/reveal`

Shows one bought card’s codes. Sends no body.

- **Permission:** `cards:reveal`
- **Authentication:** Signed change
- **Staff-set limits it counts toward:** All requests, Reveals
- **.NET SDK:** `anis.OwnedCards.RevealAsync(walletId, soldCardId)`

## Parameters

| Name | In | Type | Notes |
| --- | --- | --- | --- |
| `walletId` (required) | `path` | UUID | A UUID, lower-case with hyphens. |
| `soldCardId` (required) | `path` | UUID | A UUID, lower-case with hyphens. |

## Request

Signed with your key, with a one-time nonce and a digest of the body.

Headers: `Signature-Input`, `Signature`, `Content-Digest`, `Nonce`, `X-Anis-Date`, `Accept-Language` (optional). The SDKs set all of them for you.

**Body:** No body at all — not even `{}`. Any byte is refused with `validation_failed`. The signature still covers the digest of the empty body.

## Responses

| Status | Meaning | Body |
| --- | --- | --- |
| 200 | Success. | [RevealedCredential](#type-revealedcredential) |
| 401 | Refused: not authenticated. | [Problem](#refusals) |
| 403 | Refused: not allowed. | [Problem](#refusals) |
| 404 | Refused: not found, or not yours. | [Problem](#refusals) |
| 409 | Refused: conflicts with the current state. | [Problem](#refusals) |
| 422 | Refused: the request breaks a rule. | [Problem](#refusals) |
| 429 | Refused: a limit was reached. | [Problem](#refusals) |
| 503 | No decision: a dependency was unavailable. | [Problem](#refusals) |

Every answer is signed by Anis; the SDKs check it before you see it.

## Refusals

Every refusal is a signed problem. Branch on its `code`; each links to what it means and what to do.

| Error | Code | Status |
| --- | --- | --- |
| [Invalid credentials](https://developers.anis.ly/errors/invalid-credentials.md) | `invalid_credentials` | 401 |
| [Insufficient scope](https://developers.anis.ly/errors/insufficient-scope.md) | `insufficient_scope` | 403 |
| [Source address not allowed](https://developers.anis.ly/errors/source-ip-not-allowed.md) | `source_ip_not_allowed` | 403 |
| [Rate limited](https://developers.anis.ly/errors/rate-limited.md) | `rate_limited` | 429 |
| [Replay detected](https://developers.anis.ly/errors/replay-detected.md) | `replay_detected` | 409 |
| [Account not authorised](https://developers.anis.ly/errors/binding-not-authorized.md) | `binding_not_authorized` | 403 |
| [Account inactive](https://developers.anis.ly/errors/account-inactive.md) | `account_inactive` | 403 |
| [Wallet not granted](https://developers.anis.ly/errors/wallet-not-granted.md) | `wallet_not_granted` | 404 |
| [Card not found](https://developers.anis.ly/errors/card-not-found.md) | `card_not_found` | 404 |
| [Validation failed](https://developers.anis.ly/errors/validation-failed.md) | `validation_failed` | 422 |
| [Reveal not allowed](https://developers.anis.ly/errors/reveal-not-allowed.md) | `reveal_not_allowed` | 409 |
| [Business subscription required](https://developers.anis.ly/errors/business-subscription-required.md) | `business_subscription_required` | 409 |
| [Wallet disabled](https://developers.anis.ly/errors/wallet-disabled.md) | `wallet_disabled` | 409 |
| [Wallet expired](https://developers.anis.ly/errors/wallet-expired.md) | `wallet_expired` | 409 |
| [Service unavailable](https://developers.anis.ly/errors/dependency-unavailable.md) | `dependency_unavailable` | 503 |
| [Request timeout](https://developers.anis.ly/errors/request-timeout.md) | `request_timeout` | 504 |
| [Internal error](https://developers.anis.ly/errors/internal-error.md) | `internal_error` | 500 |

## Types

### RevealedCredential

| Field | Type | Notes |
| --- | --- | --- |
| `soldCardId` (required) | UUID | The sold card these codes belong to. |
| `serialNumber` | string | The card’s serial number. A secret: store it where you keep secrets and never log it. |
| `voucher` | string | The card’s voucher code. A secret: store it where you keep secrets and never log it. |
| `revealedAt` | string (date-time) | When it was revealed. |