---
title: "Enroll a captured card"
method: POST
path: "/vault/card-captures/current"
tags: ["Vaults"]
---

# Enroll a captured card

`POST /vault/card-captures/current`

## Request

- Base URL: `https://api.onkernel.com`
- URL: `https://api.onkernel.com/vault/card-captures/current`
- Auth: none required

Capability-only browser protocol for embedded card capture. Authorization is Bearer <capture_token>, not an API key. No cookies. Cross-origin GET, POST and OPTIONS are allowed without credentials. Query strings are rejected.

## Headers

- `Authorization` string, required

## Request body

- object
  - `card_id` string, required
  - `email` string, email, required

## Response `200`

Enrollment completed, including a safe resend of the same card ID.

- object
  - `status` 'completed', required

## Other responses

- `400`: invalid_request, invalid_capture (including a card this capture's form did not create), or card_rejected.
- `401`: capture_unauthorized.
- `409`: capture_in_progress, card_in_use, or capture_unconfirmed.
- `410`: capture_expired or capture_unavailable.
- `429`: rate_limited.
- `500`: capture_failed.
- `503`: capture_retry.

## Changes

- **2026-10-20** `d68735be0749`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/kernel/apis/kernel-api/changes/vault/card-captures/current/post.md)

---

[API](https://skmtc.dev/kernel/apis/kernel-api.md) - [All operations](https://skmtc.dev/kernel/apis/kernel-api/llms.txt) - [OpenAPI document](https://skmtc.dev/kernel/apis/kernel-api/revisions/0f6cf4f58fe6?raw)