API ReferenceWebhook Events
CARD_CREATED
A new virtual card has been successfully provisioned.
Delivered once a card requested via POST /cards completes provisioning and is ready to be used.
Payload
eventIdstringeventTypestringAlways
"CARD_CREATED".timestampintegerEpoch milliseconds.
dataobjectResponse
{
"eventId": "e_xyz789def123",
"eventType": "CARD_CREATED",
"timestamp": 1640995700000,
"data": {
"cardId": "cid_1234567890",
"cardNumber": "5555432112341234"
}
}This is the only delivery channel that includes the unmasked PAN in plaintext for free. If you choose to store it (rather than re-fetch from the sensitive endpoint), your storage is in PCI DSS scope.