Vault API: Retrieve agent card credentials

Agents can now pull full card credentials - number, expiry, and CVC - for agent cards through the new Vault API:

GET https://vault-api.mercury.com/api/v1/account/{accountId}/cards/{cardId}

Also available via the Mercury CLI (mercury cards reveal). Not currently available via MCP.

Reveal works only for agent cards - a new type of virtual card (debit or credit) that a human creates in the Mercury web or mobile app and hands to an AI agent via the GET call above.

Agent cards have built-in guardrails, including:

1. Cannot POST /cards where isAgentCard is TRUE
2. Cannot update agent cards' spend limits or unfreeze them

Our goal is to allow you to hand cards over to agents and give them access to the Mercury API/CLI while ringfencing your total exposure to only the agent cards handed over.

Available to Mercury business customers. See the API docs and help center article to get started.