Skip to main content
Revtain exposes a small set of free public endpoints that your team can call from anywhere — debugging tools, internal dashboards, fraud screens, support tools. They’re the same endpoints that power the live tools at revtain.com/tools. No authentication. No API key. CORS is open so you can call them from a browser as well as a server.

BIN Lookup

Identify the issuing bank, country, network, and card type from any 4 to 8 digit Bank Identification Number (BIN).
Example:
Response:
Response fields:
FieldTypeDescription
prefixstringThe BIN prefix you queried (4–8 digits).
issuerNamestringThe bank that issued the card, e.g. Chase, Barclays, Nubank. Unknown when not identifiable.
issuerCountrystringISO-3166-1 alpha-2 country code, e.g. US, GB, BR. Unknown when not identifiable.
cardNetworkstringOne of visa, mastercard, amex, discover, unknown.
cardTypestringOne of credit, debit, prepaid, unknown.
Errors:
  • 400 Bad Request — prefix is not 4–8 digits.

Decline Code Lookup

Translate any gateway-specific decline code into Revtain’s canonical taxonomy with a plain-English explanation.
{gateway} must be one of: stripe, braintree, adyen, checkout, authnet, dlocal, worldpay, razorpay, paystack, cybersource, paypal, gocardless, mollie. Example:
Response:
Response fields:
FieldTypeDescription
gatewaystringThe gateway slug you queried.
rawCodestringThe raw code you queried.
canonicalCodestringRevtain’s canonical taxonomy code (e.g. insufficient_funds, do_not_honor, expired_card).
categorystringOne of hard, soft, fraud, technical, auth_required, unknown.
plainEnglishstringA short, merchant-facing explanation of what this decline means.
variantsOnOtherGatewaysarrayThe same decline reason as it appears on other gateways. Useful for cross-gateway debugging.

Full Decline Code Dictionary

Pull the entire decline-code dictionary in one call — 500+ codes across 13 gateways, grouped by canonical category.
Response (truncated):
Best fetched once on app startup and cached client-side — the dictionary changes infrequently.

Use cases

  • Internal debug dashboards — show your support team a plain-English meaning for every decline the gateway returned.
  • Customer support scripts — let agents type in a raw code from a transaction log and immediately see what to tell the customer.
  • Fraud / risk screens — enrich a transaction view with issuerName and issuerCountry without integrating a paid BIN service.
  • Engineering — wire the canonical decline taxonomy into your own retry logic if you don’t use Revtain for everything.

Rate limits

There are no per-key rate limits on these endpoints (they take no auth). We ask that you cache responses where reasonable — the underlying data updates infrequently:
  • BIN responses can be safely cached for 24 hours per prefix.
  • Decline-code responses can be safely cached indefinitely; the dictionary changes only when we add new gateway support.
If you anticipate calling at high volume (above a few requests per second sustained), get in touch so we can plan capacity.