Get card integration public key

GET https://api.light.inc/v1/card-customers/public-key

Returns the public key for the cards integration service

The issuer's RSA public key for card-detail reveal: a client encrypts its session key with it when displaying a card's number and CVC. The reveal call itself is not part of this API, so most integrations never need this endpoint. companyEntityId must be an entity set up for cards (CARD_CUSTOMER_NOT_RECOGNIZED).

Authorization

Send one of these on every request. See Authentication for how to get credentials.

API key
Basic authentication header of the form Basic <api_key>, where <api_key> is your api key.
Bearer token

Query parameters

companyEntityId string · uuid

Response

publicKey string
expiryDate string · date

curl -X GET "https://api.light.inc/v1/card-customers/public-key" \
  -H "Authorization: Basic YOUR_API_KEY"

const res = await fetch("https://api.light.inc/v1/card-customers/public-key", {
  method: "GET",
  headers: {
    Authorization: `Basic ${process.env.LIGHT_API_KEY}`,
  },
});
const data = await res.json();

import os, requests

res = requests.get(
    "https://api.light.inc/v1/card-customers/public-key",
    headers={"Authorization": f"Basic {os.environ['LIGHT_API_KEY']}"},
)
data = res.json()

Example response

{
  "publicKey": "string",
  "expiryDate": "2026-01-15"
}

Generated from the schema: shapes and types are real, values are placeholders.