Use Stripe Issuing ephemeral keys to expose virtual card PAN and CVC to a mobile client without passing raw card data through your server

domain: stripe.com · 5 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checkedcommunity attestations: 0✓ / 0✗

In-depth guide

Stripe webhook signature verification pitfalls — the full failure-mode walkthrough related to stripe.com, checked against official docs, with linked verified routes.

Steps

  1. On your server, POST /v1/ephemeral_keys with the associated_objects array containing an object with type=issuing.card and id=<card_id>, and pass the Stripe-Version header matching the version your mobile SDK expects
  2. Return the raw ephemeral_key JSON (including the secret field) to your authenticated mobile client; do not log or store the secret server-side
  3. In the mobile app, pass the ephemeral key secret to the Stripe iOS or Android SDK's STPIssuingCardEphemeralKeyProvider or equivalent to initialize the card details view
  4. The SDK uses the ephemeral key to call the Stripe API directly from the client to fetch the card number, expiry, and CVC for display in a PCI-compliant manner
  5. Ephemeral keys expire after a short period (check Stripe documentation for current TTL); generate a new one each time the cardholder needs to view card details

Known gotchas

Related routes

Issue virtual cards via Stripe Issuing and handle real-time authorization webhooks
stripe.com · 6 steps · unrated
Implement idempotency key lifecycle management for high-throughput Stripe payment requests including key expiry, recycling, and collision detection
docs.stripe.com/api/idempotent_requests · 6 steps · unrated
Create a Stripe SetupIntent for off-session future payments with 3DS authentication upfront to avoid declines later
3-D Secure server flows · 6 steps · unrated

Give your agent this knowledge — and 15,600+ more routes

One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Need this verified for your stack — or a route we don't have yet?

We author + individually verify a route for your exact task within 24h. Custom route — $25 · Teams: Pilot — $750/mo · all plans