---
title: "Subscribe a card for real-time account updates"
method: POST
path: "/payments/cards/subscriptions"
tags: ["Payments", "Real-time Account Updater"]
---

# Subscribe a card for real-time account updates

`POST /payments/cards/subscriptions`

## Request

- Base URL: `https://api.evervault.com`
- URL: `https://api.evervault.com/payments/cards/subscriptions`
- Auth: HTTP basic
- TypeScript: <https://skmtc.dev/evervault/apis/evervault-api/docs/payments/cards/subscriptions/post.ts> (a function with typed inputs; its response is checked against the schema)

Provide an Evervault encrypted or
plaintext card number and expiry, and Evervault registers the card with the card
networks. When an issuer pushes an update, Evervault delivers a
[`real-time.card.updated`](/api#realTimeCardUpdated) webhook.

Only Visa and Mastercard cards are supported. A card of any other brand is
rejected with a `400` status code before the subscription is created.

The response confirms the subscription only; it doesn't return card details. Every
update, including one for a card that's already outdated at subscribe time, arrives
via webhook. The plaintext card number is never stored or returned.

## Request body

- object
  - `card` object, required
    - `number` string, required: The card number. This can be a plaintext card number or a valid Evervault encrypted card number.
    - `expiry` CardExpiry, required: The card expiry date.
      - `month` string, required: The card expiry month, in MM format (e.g. 12 for December)
      - `year` string, required: The card expiry year, in YY format (e.g. 29 for 2029)

## Response `201`

The subscription was created.

- AccountUpdaterSubscription: A subscription that receives real-time card account updates for a registered card number, via webhook, as they become available from the card networks.
  - `id` string, required: The unique identifier for the subscription.
  - `status` 'active' | 'canceled', required: The status of the subscription.
  - `createdAt` integer, required: The time the subscription was created, in milliseconds since the Unix epoch.

## Other responses

- `400`: The request was invalid or cannot be otherwise served.
- `401`: The request cannot be authenticated.
- `403`: The request is not authorized to perform this action.
- `429`: Too many requests. The rate limit has been exceeded.
- `502`: Evervault received an error from the upstream card provider while creating the subscription.

## Changes

- **2026-11-06** `8d0ca833fa04`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/evervault/apis/evervault-api/changes/payments/cards/subscriptions/post.md)

---

[API](https://skmtc.dev/evervault/apis/evervault-api.md) - [All operations](https://skmtc.dev/evervault/apis/evervault-api/llms.txt) - [OpenAPI document](https://skmtc.dev/evervault/apis/evervault-api/revisions/8d0ca833fa04?raw)