Secure host only. Call this on https://secure-api.spinwheel.io, or https://secure-sandbox-api.spinwheel.io in sandbox. The standard hosts reject the request with 403.
Returns the data needed to transact on a connected user's credit cards: expiry date, card brand name and card art.
Synchronous — one request, one response, nothing to poll and no callback to receive. Naming cards in the body is optional; omit creditCardIds to receive every open card the user holds. An empty array is rejected.
Only open cards are returned. A closed account is excluded rather than returned for the caller to filter, unless it was named explicitly — in which case it comes back with CREDIT_CARD_ACCOUNT_CLOSED. Expect the entry count to be lower than the Debt Profile's card count.
Read object presence, not status: a card can be SUCCESS and still carry no expirationDate.
Called on a standard host, or the partner is not enabled for the secure API. Retry on secure-api.spinwheel.io, or secure-sandbox-api.spinwheel.io in sandbox.