💳 Credit Card

A payment card: the cardholder, the card number, the expiry date and the CVV.

• The editor checks the card number (13 to 23 digits and spaces), the expiry (MM/YY or MM/YYYY) and the CVV (3 or 4 digits) before it saves.

Type id: type-credit-card. Agents and sneakers-put name the type by this id; sneakers_list_secret_types lists it.

🧾 Fields

Field	Key	Kind	Required	Secret	Notes
Description	description	Multi-line text	No	No
Cardholder	cardholder	Text	No	No
Card number	number	Secret value (never generated)	Yes	Super-sensitive	must match ^[0-9 ]{13,23}$; at most 23 characters
Expiry (MM/YY or MM/YYYY)	expiry	Text	No	No	must match ^(0[1-9]|1[0-2])\/([0-9]{2}|[0-9]{4})$; at most 7 characters
CVV	cvv	Secret value (never generated)	No	Super-sensitive	must match ^[0-9]{3,4}$; at most 4 characters
Notes	notes	Multi-line text	No	No

🔒 What's secret

Card number, CVV are masked until someone who can read the secret reveals or copies them, and every reveal and copy is written to the audit trail. Everything else is plain metadata that anyone who can see the folder can see.

Card number, CVV are super-sensitive: the reveal shows a partial mask first and takes a second, deliberate reveal for the whole value. Service accounts and personal tokens can't read them while the Allow API access to sensitive secrets setting is off, which is the default (security settings).

🔁 Heartbeat, rotation and check-out

• Heartbeat: no.
• Rotation: no.
• Check-out: no.

🎯 Targets

A Credit Card takes no target.