List card token lifecycle state for its holder or bank authority

GET/cards/wallets/tokens

Card_id is required. Bound holder customer identity, cards staff or svc_issuerproc authority only. Network and local status remain distinct; effective token status does not override the underlying card, account or facility controls.

Returns

200 OK

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503

Request

curl -X GET 'https://api.dev.bank.corgi.com/cards/wallets/tokens' \
  -H "Authorization: Bearer $TOKEN"

Response200

[
  {
    "consent_device_sha256": "string",
    "consent_session_sha256": "string",
    "consent_step_up_at": "2026-09-17T14:30:00Z",
    "consented_at": "2026-09-17T14:30:00Z",
    "consented_by": "string",
    "effective_status": "string",
    "enrollment": {
      "card_id": "card_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
      "device_sha256": "string",
      "requestor_id": "string",
      "terms_sha256": "string",
      "terms_version": "string"
    },
    "holder_customer_id": "cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
    "id": "string",
    "local_sequence": 0,
    "local_status": "string",
    "network": "string",
    "network_sequence": 0,
    "network_status": "string",
    "network_token_reference": "string"
  }
]