Replace a lost, stolen, damaged or undelivered physical card. The original closes, and the response is the new card.

post/v2/cards/{cardId}/replace

Request

  • Base URL
    https://api.slash.com
  • URL
    https://api.slash.com/v2/cards/{cardId}/replace
  • Auth
    API key in header X-API-Key

Path parameters

cardIdstring required

Card id with the c_ prefix.

Headers

X-Idempotency-Keystring required

Unique caller-generated key for one create request. Once an authenticated, schema-valid request reaches the operation, the key is permanently consumed for that operation and legal entity whether the operation succeeds or fails. Reusing it in that scope returns 409 and never replays a response, unlike API v1, which replays the original response for a matching key.

Request body

reason'lost_or_stolen' | 'never_arrived' | 'damaged' required

Why the card is replaced. The original closes with it as its closedReason.

Example request

{
  "physical": {
    "secondLine": "Computer Services"
  }
}

Response

The new card.

idstring required

Card id with the c_ prefix.

type'virtual' | 'physical' required
status'pending' | 'awaiting_activation' | 'active' | 'paused' | 'inactive' | 'closed' required

pending: being issued, or waiting for a physical card's fee. awaiting_activation: a physical card its holder has not activated. active: approves authorizations. paused: declines them. inactive: deactivated by Slash or the issuer; can only be closed. closed: permanent.

namestring required
last4string

Absent on physical cards until they are activated.

expiryMonthinteger
expiryYearinteger
accountIdstring required

Account id with the sa_group_ prefix.

virtualAccountIdstring

Virtual account the card spends from, with the subaccount_ prefix.

cardGroupIdstring

Card group id with the card_group_ prefix.

cardProductIdstring

Card product id with the card_product_ prefix.

cardholderUserIdstring

The user who holds the card, with the u_ prefix.

singleUseboolean required

Whether the card closes after its first transaction. Virtual cards only.

closedReason'no_longer_needed' | 'lost_or_stolen' | 'never_arrived' | 'damaged' | 'closed_by_slash'
createdAtstring date-time required
closedAtstring date-time

Example response

{
  "id": "c_2rj4l7hmrrrcv",
  "name": "Ads – Meta",
  "last4": "4242",
  "expiryMonth": 9,
  "expiryYear": 2030,
  "accountId": "sa_group_2rj4l7hmrrrcv",
  "virtualAccountId": "subaccount_2rj4l7hmrrrcv",
  "cardGroupId": "card_group_2rj4l7hmrrrcv",
  "cardProductId": "card_product_2rj4l7hmrrrcv",
  "cardholderUserId": "u_2rj4l7hmrrrcv",
  "controls": {
    "limit": {
      "amount": {
        "amount": 500000,
        "currency": "USD"
      },
      "period": "monthly"
    },
    "transactionLimit": {
      "amount": 250000,
      "currency": "USD"
    },
    "merchantCategoryCodes": {
      "mode": "block",
      "values": [
        "7995"
      ]
    }
  },
  "physical": {
    "secondLine": "Computer Services"
  }
}

Changes