Cards — list of endpoints

Every endpoint in the Cards section of the API Reference →. Click any row to open the full reference page with payload, examples, and the Try it widget.

Listing & details

Method	Endpoint	What it does
GET	/cards	List every card owned by the partner.
GET	/cards/{cardKey}	Fetch a single card's full details.
GET	/cards/{cardKey}/status	Get the current status of a card.

Lifecycle

Method	Endpoint	What it does
POST	/cards/{cardKey}/activate	Activate a newly issued card.
POST	/cards/{cardKey}/lock	Lock a card.
POST	/cards/{cardKey}/unlock	Unlock a previously locked card.
POST	/cards/{cardKey}/temporary-lock	Temporarily lock a card with auto-expiry.

Restrictions

Method	Endpoint	What it does
POST	/cards/{cardKey}/restrict	Apply a generic restriction.
POST	/cards/{cardKey}/restrict-lost	Mark the card as lost.
POST	/cards/{cardKey}/restrict-stolen	Mark the card as stolen.
POST	/cards/{cardKey}/restrict-closed	Close the card.
POST	/cards/{cardKey}/restrict-fraud	Mark the card as compromised (fraud).
POST	/cards/{cardKey}/restrict-mobile-lost	Mark the cardholder's mobile device as lost.

Rename / replace / resign

Method	Endpoint	What it does
POST	/cards/{cardKey}/change-nickname	Set a custom nickname for the card.
POST	/cards/{cardKey}/emboss-name	Set the embossed name on a physical card.
POST	/cards/{cardKey}/replace-card	Replace the card (damaged / lost).
POST	/cards/{cardKey}/resign-card	Re-issue the card without changing the PAN.

Sensitive operations

Method	Endpoint	What it does
GET	/cards/{cardKey}/card-number	Retrieve the full PAN (sensitive).
GET	/cards/{cardKey}/card-cvv	Retrieve the CVV (sensitive).
PUT	/cards/{cardKey}/3ds-answer	Submit the 3-D Secure challenge answer.
POST	/cards/{cardKey}/change-3ds-phone	Change the phone number used for 3DS OTP.
GET	/cards/{cardKey}/reset-pin-tries	Reset the wrong-PIN attempt counter.
POST	/cards/{cardKey}/change-pin	Change the card PIN (RSA-OAEP wrapped).
POST	/cards/{cardKey}/force-pin-lock	Force-lock the PIN after too many attempts.
POST	/cards/{cardKey}/holder-authorize	Re-authorize a sensitive operation with PIN.

Limits

Method	Endpoint	What it does
GET	/cards/{cardKey}/limits	Get all limits configured for a card.
PATCH	/cards/{cardKey}/limits	Update one or more limits in a single call.
PUT	/cards/{cardKey}/limits/{limitName}	Set a specific limit to a new value.
GET	/cards/{cardKey}/limits/{limitName}	Get a specific limit's current value.
GET	/cards/{cardKey}/limits/{limitName}/available	Get the remaining available amount for a limit.

Sensitive operations

All endpoints in the Sensitive operations section require the expDate second factor and are subject to stricter rate limits. See the Sensitive data → page for the rationale.