## Get a payment's card-reveal handoff

**get** `/v3/payments/{paymentId}/credentials`

Returns a short-lived handoff for a `ready` payment. Fetch the card
credentials **directly from the provider** with the returned `user_token`
at `fetch_url` — the card number never passes through Linq. Do not persist
PAN/CVC.

### Path Parameters

- `paymentId: string`

### Returns

- `handoff: optional object { card_ref, fetch_url, provider, user_token }`

  Fetch the card directly from the provider with these — never through Linq.

  - `card_ref: optional string`

  - `fetch_url: optional string`

  - `provider: optional string`

  - `user_token: optional string`

    Short-lived bearer to fetch the card from the provider.

### Example

```http
curl https://api.linqapp.com/api/partner/v3/payments/$PAYMENT_ID/credentials \
    -H "Authorization: Bearer $LINQ_API_V3_API_KEY"
```

#### Response

```json
{
  "handoff": {
    "card_ref": "card_7h2k",
    "fetch_url": "https://api.agentcard.sh/api/v2/cards/card_7h2k",
    "provider": "agentcard",
    "user_token": "user_token"
  }
}
```