---
title: "Retrieve authorization controls"
method: GET
path: "/customers/{customerID}/card_accounts/{cardAccountID}/auth_controls"
tags: ["Cards"]
---

# Retrieve authorization controls

`GET /customers/{customerID}/card_accounts/{cardAccountID}/auth_controls`

## Request

- Base URL: `https://api.bridge.xyz/v0`
- URL: `https://api.bridge.xyz/v0/customers/{customerID}/card_accounts/{cardAccountID}/auth_controls`
- Auth: API key in header `Api-Key`

Retrieve the applicable spend limits for the given card account

## Path parameters

- `customerID` string, required: A UUID that uniquely identifies a resource
- `cardAccountID` string, required: A UUID that uniquely identifies a resource

## Response `200`

The authorization controls

- object
  - `customer_id` string, required: The ID of the customer
  - `card_account_id` string, required: The ID of the card account
  - `spending_limits` CardSpendingLimit[], required: The various spending limits for the card account for the current time period
    - `period` 'daily' | 'trial_lifetime', required: The period of the spending limit
    - `timezone` string: The timezone of the spending limit, only applicable to spending limits that have a `next_reset_at`
    - `next_reset_at` string: The next reset time of the spending limit, in ISO8601 format
    - `total_amount` string, required: The total amount of the spending limit
    - `remaining_amount` string, required: The remaining amount of the spending limit
    - `currency` 'usd'

## Other responses

- `401`: Missing or invalid API key
- `500`: Unexpected error. User may try and send the request again.

---

[API](https://skmtc.dev/bridge/apis/bridge-api.md) - [All operations](https://skmtc.dev/bridge/apis/bridge-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bridge/apis/bridge-api/revisions/a390532e9fc6?raw)