> ## Documentation Index
> Fetch the complete documentation index at: https://docs.jointransfer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get payment card

> Request protected checkout access for your assigned active card.

Call `get_payment_card` without arguments. The private agent key selects the card. Disabled Transfer access, a paused agent, or expired/revoked access prevents a new checkout session.

## External card

When checkout configuration is ready and Evervault has approved Browser Tokens preview access, the result contains card context plus:

| Field | Meaning |
| - | - |
| `credentials.number` | Short-lived Browser Token, not the raw bank card number. |
| `credentials.expiry_month`, `credentials.expiry_year` | Card expiry. |
| `credentials.cvc` | Always `null`; Transfer never collects or stores external CVC. |
| `credential_type` | `browser_token`. |
| `proxy` | Required proxy server, username, and password. |
| `expires_at` | Token expiry, at most five minutes after creation. |
| `allowed_hosts` | `["*"]` for all destinations by default; older saved exact-host lists remain honored. |
| `requires_owner_cvc` | `true`; owner may need to enter CVC directly at the merchant. |

Secure linking does not require Browser Tokens approval. While checkout approval or configuration is missing, this tool returns a safe unavailable error without creating a provider session; linked-card metadata remains readable.

The checkout browser must use the returned proxy and trust the Evervault CA. Never use the token as ordinary card details outside that proxy. A standard MCP connection alone does not add browser proxy support. Bank authentication or 3D Secure can require owner participation.

Retrieval does not make a purchase, confirm payment, or debit a Transfer wallet. Issuing-bank limits apply. Previously issued tokens can remain valid until expiry after Transfer access is disabled. Protect number tokens and proxy credentials from logs, analytics, repositories, and shared chats.

## Simulation card

The result uses `credential_type: "dummy"` with number `SIMULATION-ONLY-` plus the suffix, expiry `00/0000`, CVC `SIM`, and `usable_for_checkout: false`. These values are deliberately unusable. Transfer-issued cards and wallet funding are **coming soon**.

See [Bring your own card](/guides/bring-your-own-card) for setup and compatibility limits.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.