Cards

Create Card

Creates a virtual card with a spend limit. By default the card authorizes at any merchant up to that limit. Pass spending_restriction with merchant IDs from GET /cards/merchants to restrict it, and allowed_categories to restrict by merchant category. Set single_use to true (default) for a one-shot card that auto-cancels after the first approved authorization, or false for a multi-use card that stays active until expiry or explicit revoke. Retrieve the PAN by calling POST /cards/{card_id}/pan.

post/cards

Request

Headers

Idempotency-Keystring nullable

A unique key you generate (1-50 printable ASCII characters, no spaces) so retrying this request never creates a duplicate. Reusing a key is rejected.

x-entity-idstring uuid

Optional entity_id to scope requests to a specific entity.

Request body

nicknamestring required

Display name for the card (max 30 characters).

allowed_categoriesCardTransactionCategory[] nullable

Restrict the card to these merchant categories.

debit_accountstring nullable

The account this card draws from, as a cash_account_ id from List Accounts. It must be one of your own open accounts. Omit to use the account this entity issues cards from by default.

purposestring nullable

A memo for your own records, recorded on the card's audit trail. It is never sent to the issuer or the merchant, so it does not appear on a statement and does not restrict what the card can buy.

expires_atstring date-time

ISO 8601 date-time in the format YYYY-MM-DDThh:mm:ss.nnn[Z|[+|-]hh:mm] (per IETF RFC 3339).

single_useboolean

If true, the card is revoked automatically after the first authorization. If false, the card stays usable until expiry or explicit revoke.

Example request

{
  "debit_account": "cash_account_9f1c3b6e-2a1d-4f8e-9c77-3b0d5e2a41f2",
  "purpose": "Q3 ad spend for the Catnip Coffee Co launch"
}

Response

Successful Response

payment_type'card'

Always card, so you can tell this apart from a payment token response.

Example response

{
  "metadata": {
    "debit_account": "cash_account_9f1c3b6e-2a1d-4f8e-9c77-3b0d5e2a41f2"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.