Revolut-Card-CLI

KO | EN

gitlite — search

#command-line #typescript #devops #data-science #golang #windows #graphql #web #svg #editor

Revolut-Card-CLI

(★ 9)

Unofficial TypeScript CLI for managing Revolut virtual cards

File Explorer

ZIP Download

- - bug_report.yml
- - ci.yml
- preview.png
- cli.ts
- client.ts
- crypto.ts
- format.ts
- index.ts
- prompts.ts
- store.ts
- types.ts
- client.test.ts
- crypto.test.ts
- format.test.ts
.gitignore
CHANGELOG.md
CONTRIBUTING.md
LICENSE
package-lock.json
package.json
README.md
SECURITY.md
tsconfig.json

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

An unofficial TypeScript CLI for managing Revolut virtual cards. Its request flow is based on the public **Revolut Shopper 3.9.3** Chrome extension package.

![Revolut Card CLI creating and revealing a single-use virtual card](https://raw.githubusercontent.com/b-nnett/Revolut-Card-CLI/main/assets/preview.png)

It supports:

- End-to-end sign-in using your phone number, Revolut passcode, and approval in the Revolut mobile app
- OS-keychain storage for access tokens, refresh credentials, and the generated device ID
- Automatic access-token refresh and refresh-token rotation
- Optional passcode storage in the OS keychain, or a secure prompt every time card details are revealed
- Masked card listing, virtual card creation, AES-GCM card-detail decryption, and permanent card termination
- Human-readable and JSON output

> [!WARNING]
> This project uses an undocumented private API, is not affiliated with or endorsed by Revolut, and may stop working when Revolut changes the Shopper service. Card creation and termination affect your real Revolut account. Review the source and start with `cards list`.

## Requirements

- Node.js 20 or newer
- A Revolut account eligible for Revolut Shopper / virtual cards
- The Revolut mobile app for sign-in approval
- A supported native credential store (macOS Keychain, Windows Credential Manager, or Linux Secret Service)

## Install

### From source

```sh
git clone https://github.com/b-nnett/Revolut-Card-CLI.git
cd Revolut-Card-CLI
npm install
npm run build
npm link
```

The executable is `revolut`.

## Sign in

```sh
revolut login
```

The complete flow is:

1. Enter the registered phone number in E.164 format, such as `+447700900123`.
2. Enter the 4–6 digit Revolut app passcode in the hidden prompt.
3. Choose whether future card-detail requests should prompt for that passcode or read it from the OS keychain.
4. Approve the notification in the Revolut mobile app. The CLI polls for approval for up to 10 minutes.
5. The returned session and refresh credentials are saved in the OS keychain.

For scripted setup, the non-secret options can be supplied as flags:

```sh
revolut login --phone +447700900123 --pin-mode prompt
```

The passcode intentionally has no visible login flag, keeping it out of shell history and process listings.

The CLI uses the Chrome-extension browser fingerprint expected by Shopper. If Revolut later requires a newer Chrome fingerprint, it can be overridden without exposing credentials:

```sh
REVOLUT_CARD_USER_AGENT='Mozilla/5.0 ...' revolut login
```

## Commands

```sh
# Local session status (never prints tokens)
revolut status

# Masked card list
revolut cards list
revolut cards list --json

# Available designs
revolut cards designs

# New multi-use virtual card; automatically selects a compatible design
revolut cards create

# New single-use/disposable card
revolut cards create --single-use

# Explicit design, label, and immediate detail reveal
revolut cards create --design blue --label Subscriptions --reveal

# Load PAN, expiry, and CVV
revolut cards show CARD_ID
revolut cards show CARD_ID --json

# Permanently terminate a card (interactive confirmation)
revolut cards terminate CARD_ID
revolut cards terminate CARD_ID --yes

# Show, set/edit, or remove a monthly spending limit
revolut cards limit CARD_ID
revolut cards limit CARD_ID 250
revolut cards limit CARD_ID --remove

# Change passcode behavior
revolut config pin-mode prompt
revolut config pin-mode keychain

# Revoke the server session, then delete passcode, credentials, preferences, and device ID
revolut logout
```

`cards show --json` and `cards create --reveal --json` intentionally print full card data. Avoid redirecting that output to logs, shell history helpers, or shared files.

Revolut permits one disposable card. If it already exists, `cards create --single-use` returns that card instead of deleting it or attempting to issue another; Revolut automatically rotates its details after a successful payment. Multi-use creation is checked against the design metadata's total/monthly limits before the CLI sends a mutation.

Successful CLI issuances are tracked in the OS keychain. The creation receipt warns when two or fewer daily disposable issuances remain, and when monthly virtual-card usage reaches two cards, 50%, or two remaining slots. Active recent cards are reconciled into this count. Revolut does not expose the exact in-progress count, so cards created and then deleted entirely outside this CLI may not be visible until Revolut reports that the quota is reached.

## Security model

The CLI writes no credential or passcode files. The native keyring entry service is `revolut-card-cli` and contains:

- Session/access/refresh credentials
- Stable generated device UUID
- PIN-mode preference
- Revolut passcode only when `pin-mode keychain` is selected

With `pin-mode prompt`, the saved passcode entry is deleted and the hidden prompt appears on every `cards show` or `cards create --reveal` operation. The passcode is sent only as the Shopper API's `X-Verify-Password` header and is not logged.

Revolut returns PAN and CVV as AES-256-GCM envelopes. The CLI follows the extension format: 12-byte IV, ciphertext, then 16-byte authentication tag, with a 32-byte session-token-derived key.

## Development and verification

```sh
npm run check
```

Tests use a local mocked HTTP transport. They cover mobile-approval polling, token refresh/rotation, authenticated headers, card creation, card-detail decryption, and termination without contacting Revolut or mutating a real account.

See [CONTRIBUTING.md](CONTRIBUTING.md) before submitting changes. Never include PANs, CVVs, passcodes, tokens, phone numbers, or account identifiers in an issue, test fixture, commit, or CI log.

## Protocol snapshot

The implementation was derived from Revolut Shopper version 3.9.3 (Chrome extension ID `hdlehfdjcalidklijenibmpcdgjfmafn`, Web Store update dated 27 June 2025). The relevant service base at that version is:

```text
https://app.revolut.com/api/revolut-secure/retail
```

The client identifies itself using the same `X-Browser-Application: BROWSER_EXTENSION` and `x-client-version: 100.0` headers used by that extension. This snapshot is documented to make future breakage diagnosable; it is not a stability promise.

Revolut-Card-CLI

Owner Repos

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Revolut-Card-CLI

Owner Repos

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Download README