---
title: "Get a link for the holder to save their own card"
method: POST
path: "/create-saved-card-link"
tags: ["cards"]
---

# Get a link for the holder to save their own card

`POST /create-saved-card-link`

## Request

- Base URL: `https://laso.finance`
- URL: `https://laso.finance/create-saved-card-link`
- Auth: API key in header `Authorization`

Returns a single-use link where the account holder types a card they already own and locks it with their passkey. The card is encrypted on their device; Laso never sees the number.

**Send the `url` to your human. Do not open it yourself.** Saving a card is the holder's step, like identity verification: the page asks for the card and a passkey, with no account to create and no code to type.

Poll `GET /get-saved-cards` until the card appears. Each link works once and expires at `expires_at`; mint a new one if it lapses.

**This route is free** and needs no identity verification or prior setup: the holder's first saved card creates their card account.

## Headers

- `Idempotency-Key` string

## Response `200`

The link to send the account holder.

- object
  - `url` string: The single-use page where the holder saves their card. Send it to them.
  - `expires_at` integer: When the link stops working, in milliseconds since the epoch.
  - `note` string: How to hand the link over and what to poll.

## Other responses

- `409`: A request with this `Idempotency-Key` is still being processed (`code: idempotency_key_in_progress`). Wait a moment and retry with the same key.
- `422`: The `Idempotency-Key` was already used for a different request body or route (`code: idempotency_key_reused`). Use a new key.

---

[API](https://skmtc.dev/laso/apis/laso-finance-x402-api.md) · [All operations](https://skmtc.dev/laso/apis/laso-finance-x402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/laso/apis/laso-finance-x402-api/revisions/ff8ce20b49ba?raw)