---
title: "Update a card's reveal policy (human-only)"
method: PATCH
path: "/v1/cards/{card_id}"
tags: ["Payment Cards"]
---

# Update a card's reveal policy (human-only)

`PATCH /v1/cards/{card_id}`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/cards/{card_id}`
- Auth: HTTP bearer

## Path parameters

- `card_id` string, uuid, required

## Request body

- UpdateCardRequest: Human-settable per-card reveal policy + lifecycle controls.
  - `agent_reveal` boolean
  - `max_reveals` integer
  - `reveal_expires_at` string, date-time, nullable
  - `void_after` string, date-time, nullable

## Response `200`

Card updated

- CardResponse: Masked card view — never contains PAN/CVV.
  - `id` string, uuid, required
  - `agent_id` string, uuid, nullable
  - `issuer` 'laso' | 'manual', required
  - `kind` 'prepaid' | 'gift_card', required
  - `brand` string
  - `last4` string
  - `exp_month` integer
  - `exp_year` integer
  - `currency` string, required
  - `order_amount_usd` string
  - `balance` string
  - `status` 'ordering' | 'pending' | 'ready' | 'depleted' | 'expired' | 'voided' | 'orphaned_payment' | 'awaiting_approval' | 'rejected', required
  - `storage_mode` 'reference' | 'full', required
  - `reveal_policy` object, required
  - `approval_id` string, uuid: Linked approval when status is awaiting_approval
  - `void_after` string, date-time
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `403`: Insufficient permissions
- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)