# Get the Card Program Account

> Coming soon, upon request — this feature is turned on for your tenant by the Aurea team. [Contact us](https://www.aureahub.com/contact)

The user's account at the card program: where onboarding stands, the smart account and the EUR account.

## Overview

- `kycStatus`: `notStarted`, `pending`, `processing`, `resubmissionRequested`, `requiresAction`, `rejected` or `approved`. `isSourceOfFundsAnswered`, `isPhoneValidated`: the other onboarding steps. `firstName`, `lastName`.
- `safeWallets`: the user's smart accounts; the first one's `address` is the one Aurea keeps.
- `bankingDetails`: the EUR account — `eurAccountIban`, `eurAccountBic`, `eurAccountIbanStatus` (`ASSIGNED` once the IBAN is the user's) and `address`, the address the account was opened for. Once the IBAN has moved to the smart account, Aurea fills it in when the card program answers none.
- Aurea records what it reads: an assigned IBAN moves the user's `status` to `active`, and the smart account is kept ([Local Status](https://docs.aureahub.com/docs/cards-local-status.md)).
- Inside the card program session (`403` `CARD_PROGRAM_SESSION_EXPIRED`). Other fields of the card program's answer pass through.
- **Illustrative example.** The card program's answer is passed through unchanged and may carry fields not listed here: the example shows only the fields Aurea or its own app reads. Ignore the fields you do not know.

## Endpoint

### `GET /v1/gnosis/user`

Authentication: bearer token required.

The user's account at the card program.

**Responses**

`200` OK (illustrative)

```json
{
  "firstName": "Maria",
  "lastName": "Rossi",
  "kycStatus": "approved",
  "isSourceOfFundsAnswered": true,
  "isPhoneValidated": true,
  "safeWallets": [{ "address": "0x7a1c…e3b2" }],
  "bankingDetails": {
    "eurAccountIban": "DE89370400440532013000",
    "eurAccountBic": "COBADEFFXXX",
    "eurAccountIbanStatus": "ASSIGNED",
    "address": "0x2f4b6c2e9a1d5f3b7c8e0a4d6b2c9e1f3a5d7b90"
  }
}
```

`403` Session Expired

```json
{
  "error": "ForbiddenError",
  "message": "…",
  "details": { "code": "CARD_PROGRAM_SESSION_EXPIRED" }
}
```

**Example request**

```bash
curl https://api.aureahub.com/v1/gnosis/user \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#cards-user