# POST /debit/api/getCardPermissions

**Resource:** [Permissions and restrictions](../resources/Permissions-and-restrictions.md)
**Service that lists restrictions defined on a card**
**Operation ID:** `getCardPermissions`

Retrieves the permissions set on a debit card based on ShadowCardNumber. Returns a list of DebitCardPermissions including restriction codes, descriptions, permission indicators, channel, and security flags. Uses _dbtServiceProxy.GetCardPermissions for fetching data.

## Request Body

Get Card Permissions Request

**Required:** Yes

**Content Types:** `application/json`

**Schema:** [GetCardPermissionsRequest](../schemas/Get/GetCardPermissionsRequest.md)

## Responses

| Status | Description |
|--------|-------------|
| 200 | Success |
| 400 | (reference) |
| 404 | (reference) |
| 500 | (reference) |

**Success Response Schema:**

[GetCardPermissionsResponse](../schemas/Get/GetCardPermissionsResponse.md)

