Export raw payment-card records
Returns stolen payment-card records filtered by bin (6-digit issuer prefix), last4, and/or holder_contains — at least one is required. card_number is always masked via bin_last_four; cvv is converted to a has_cvv boolean flag on free/pro tiers. Cursor-paginated.
Authorizations
Static API key, format vp_<env>_<8-hex-prefix>.<40-hex-secret>. Preferred header for server-to-server integrations.
Body
At least one of bin, last4, or holder_contains is required.
Exact 6-digit card BIN (issuer prefix).
^[0-9]{6}$"411111"
Exact last 4 digits of the card number.
^[0-9]{4}$"1111"
Case-insensitive substring match against the cardholder name.
Sort order applied to inserted_at. Must stay constant across paginated requests using the same cursor.
asc, desc 1 <= x <= 500