Reveal Full Account Number

POST/users/{user_id}/accounts/{account_id}/numbers/reveal

Returns the unmasked account and routing numbers. Every reveal is audit-logged (partner, key prefix, user, timestamp) and rate-limited per user. Treat the response as a one-time read for immediate use (e.g. initiating a deposit). Do not persist it unencrypted. Nacha’s data security rule requires stored DFI account numbers to be rendered unreadable.

Path Parameters

user_idstringrequired

The Sail user id.

account_idstringrequired

The Sail account id.

Response

Full deposit numbers (audit-logged).

account_idstring

The Sail account id.

account_numberstring

The full, unmasked account number.

routing_numberstring

The routing number for this account.

reveal_idstring

Audit-log reference for this reveal.

revealed_atstring<date-time>

When this reveal occurred.

user_token_required / invalid_user_token.

insufficient_key_scope, insufficient_token_scope (token minted without numbers:reveal), or product_not_enabled.

rate_limited: reveal velocity exceeded for this user.

Standard error envelope covering 400, 401, 403, 404, 429, and 500.

errorobject

The error detail.

Show error properties

codestring

Machine-readable code, e.g. not_found, token_scope_mismatch, product_not_enabled, insufficient_key_scope, insufficient_token_scope, user_token_required, user_token_expired, invalid_user_token, invalid_key_configuration, connection_not_reconnectable, rate_limited.

messagestring

Human-readable error message. May change, so match on error.code instead.

paramstring

The request field that caused the error, when applicable. Null otherwise.

const response = await fetch(`https://live.savewithsail.com/api/v1/users/${user_id}/accounts/${account_id}/numbers/reveal`, { method: 'POST', headers: { 'Authorization': 'Bearer <token>', 'x-sail-user-token': '<x-sail-user-token>' } }); const data = await response.json();

import requests response = requests.request( "POST", "https://live.savewithsail.com/api/v1/users/{user_id}/accounts/{account_id}/numbers/reveal", headers={ "Authorization": "Bearer <token>", "x-sail-user-token": "<x-sail-user-token>" }, ) data = response.json()

<?php $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://live.savewithsail.com/api/v1/users/<user_id>/accounts/<account_id>/numbers/reveal"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST"); curl_setopt($ch, CURLOPT_HTTPHEADER, ["Authorization: Bearer <token>", "x-sail-user-token: <x-sail-user-token>"]); $response = curl_exec($ch); curl_close($ch);

package main import ( "fmt" "io" "net/http" ) func main() { req, _ := http.NewRequest("POST", "https://live.savewithsail.com/api/v1/users/<user_id>/accounts/<account_id>/numbers/reveal", nil) req.Header.Set("Authorization", "Bearer <token>") req.Header.Set("x-sail-user-token", "<x-sail-user-token>") resp, err := http.DefaultClient.Do(req) if err != nil { panic(err) } defer resp.Body.Close() data, _ := io.ReadAll(resp.Body) fmt.Println(string(data)) }

HttpClient client = HttpClient.newHttpClient(); HttpRequest request = HttpRequest.newBuilder() .uri(URI.create("https://live.savewithsail.com/api/v1/users/<user_id>/accounts/<account_id>/numbers/reveal")) .header("Authorization", "Bearer <token>") .header("x-sail-user-token", "<x-sail-user-token>") .method("POST", HttpRequest.BodyPublishers.noBody()) .build(); HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString()); System.out.println(response.body());

require "net/http" require "uri" uri = URI("https://live.savewithsail.com/api/v1/users/<user_id>/accounts/<account_id>/numbers/reveal") http = Net::HTTP.new(uri.host, uri.port) http.use_ssl = uri.scheme == "https" request = Net::HTTP::Post.new(uri) request["Authorization"] = "Bearer <token>" request["x-sail-user-token"] = "<x-sail-user-token>" response = http.request(request) puts response.body