# Get cards

Endpoint: GET /people/{personId}/loans/{loanId}/cards
Version: 2023-11-29
Security: oauth2, bearerAuth, apiKeyHeader

## Path parameters:

  - `personId` (string, required)
    A Borrower's unique identifier, tied to a person or a business. Can be Peach or a lender's external identifier.

  - `loanId` (string, required)
    The unique identifier of the Loan we wish to retrieve. Can be
Peach or lender's external identifier.

## Query parameters:

  - `showPan` (boolean)
    Set to true to get the full PAN in the response. Special permission is required.

  - `showCvv` (boolean)
    Set to true to get the full CVV2 number in the response. Special permission is required.

  - `refresh` (boolean)
    If true, the Peach system will make new API calls to the card issuer to get the most recent card details and balances,
and will store the new details in the Peach database. Otherwise, the Peach system will return the most recent details from its database.

  - `status` (string)
    Filter cards by status. Accepts a single value or a comma-separated list
(e.g. ?status=blocked or ?status=blocked,closed).

  - `limit` (integer)
    The maximum count of results to retrieve.

  - `offset` (integer)
    Offset from the start of results.

  - `startingAfter` (string)
    Return results starting after the provided object identifier.

  - `endingBefore` (string)
    Return results ending before the provided object identifier.

  - `sortBy` (array)
    The data attributes by which to sort the results.

## Response 200 fields (application/json):

  - `count` (integer)
    Total number of items in this result.

  - `status` (integer)
    HTTP status code.

  - `data` (array)