Issue a card
curl --request POST \
--url https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards \
--header 'Content-Type: application/json' \
--data '
{
"type": "VIRTUAL",
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"singleUse": false,
"name": "Marketing - Ads",
"customFields": {
"cost-center": "CC-1020"
},
"cardLimits": [
{
"amount": 150000,
"startDate": "2026-11-01",
"endDate": "2026-11-30",
"ruleIds": [
"FLEX_INTERNATIONAL"
],
"name": "Campaign budget"
}
]
}
'import requests
url = "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards"
payload = {
"type": "VIRTUAL",
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"singleUse": False,
"name": "Marketing - Ads",
"customFields": { "cost-center": "CC-1020" },
"cardLimits": [
{
"amount": 150000,
"startDate": "2026-11-01",
"endDate": "2026-11-30",
"ruleIds": ["FLEX_INTERNATIONAL"],
"name": "Campaign budget"
}
]
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
type: 'VIRTUAL',
cardId: '3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43',
singleUse: false,
name: 'Marketing - Ads',
customFields: {'cost-center': 'CC-1020'},
cardLimits: [
{
amount: 150000,
startDate: '2026-11-01',
endDate: '2026-11-30',
ruleIds: ['FLEX_INTERNATIONAL'],
name: 'Campaign budget'
}
]
})
};
fetch('https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'type' => 'VIRTUAL',
'cardId' => '3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43',
'singleUse' => false,
'name' => 'Marketing - Ads',
'customFields' => [
'cost-center' => 'CC-1020'
],
'cardLimits' => [
[
'amount' => 150000,
'startDate' => '2026-11-01',
'endDate' => '2026-11-30',
'ruleIds' => [
'FLEX_INTERNATIONAL'
],
'name' => 'Campaign budget'
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards"
payload := strings.NewReader("{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards")
.header("Content-Type", "application/json")
.body("{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"_id": "66f2a4b8b4d3e80012c9a0e1",
"realmId": "f495ff0c-ab54-4f99-8e92-ca8682e4de9b",
"organizationId": "c4bd3f21-dfbd-44e8-8055-68ba15bed410",
"accountId": "66f2a1c7b4d3e80012c9a0b4",
"walletId": "66f2a3d1b4d3e80012c9a0d2",
"environment": "LIVE",
"panMasked": "524674******4821",
"external": {
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"instrumentId": "8b2e4f60-1a3c-4d5e-9f70-2b4c6d8e0a12"
},
"status": "ACTIVE",
"createdAt": "2026-11-02T13:05:11.000Z",
"updatedAt": "2026-11-02T13:05:12.000Z",
"expiryDate": "11/2031",
"tokenisationPermitted": true,
"singleUse": false,
"type": "VIRTUAL",
"customFields": {
"cost-center": "CC-1020"
},
"issuedAt": "2026-11-02T13:05:11.000Z",
"name": "Marketing - Ads",
"ownerName": "MARIANA COSTA",
"isSuper": false,
"walletProduct": "NORMAL",
"cardLimitIds": [
"66f2a5c2b4d3e80012c9a0f3"
],
"createdBy": "e3553bc1-5e20-4e17-b22a-a796fda0aa99",
"updatedBy": "e3553bc1-5e20-4e17-b22a-a796fda0aa99",
"__v": 0
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "ACCOUNT_NOT_OPEN",
"origin": "BANKING",
"message": "Account not open"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "FORBIDDEN_WALLET",
"origin": "BANKING",
"message": "You do not have permission to perform this action on this wallet"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "ACCOUNT_NOT_FOUND",
"origin": "BANKING",
"message": "Account not found"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BAD_REQUEST",
"origin": "BANKING",
"message": "Bad Request: Your request is invalid or incomplete. Please make sure you are requesting with the right fields.",
"fields": [
{
"field": "type",
"message": "Invalid option: expected one of \"VIRTUAL\"|\"EMBOSSED\"",
"code": "TYPE_ONE_OF",
"values": [
"VIRTUAL",
"EMBOSSED"
]
}
]
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider did not respond in time, please retry"
}Issue a card
Issues a card in a wallet: a new virtual card, or a physical card you already received.
POST
/
realms
/
{realmId}
/
organizations
/
{organizationId}
/
accounts
/
{accountId}
/
wallets
/
{walletId}
/
cards
Issue a card
curl --request POST \
--url https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards \
--header 'Content-Type: application/json' \
--data '
{
"type": "VIRTUAL",
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"singleUse": false,
"name": "Marketing - Ads",
"customFields": {
"cost-center": "CC-1020"
},
"cardLimits": [
{
"amount": 150000,
"startDate": "2026-11-01",
"endDate": "2026-11-30",
"ruleIds": [
"FLEX_INTERNATIONAL"
],
"name": "Campaign budget"
}
]
}
'import requests
url = "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards"
payload = {
"type": "VIRTUAL",
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"singleUse": False,
"name": "Marketing - Ads",
"customFields": { "cost-center": "CC-1020" },
"cardLimits": [
{
"amount": 150000,
"startDate": "2026-11-01",
"endDate": "2026-11-30",
"ruleIds": ["FLEX_INTERNATIONAL"],
"name": "Campaign budget"
}
]
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
type: 'VIRTUAL',
cardId: '3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43',
singleUse: false,
name: 'Marketing - Ads',
customFields: {'cost-center': 'CC-1020'},
cardLimits: [
{
amount: 150000,
startDate: '2026-11-01',
endDate: '2026-11-30',
ruleIds: ['FLEX_INTERNATIONAL'],
name: 'Campaign budget'
}
]
})
};
fetch('https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'type' => 'VIRTUAL',
'cardId' => '3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43',
'singleUse' => false,
'name' => 'Marketing - Ads',
'customFields' => [
'cost-center' => 'CC-1020'
],
'cardLimits' => [
[
'amount' => 150000,
'startDate' => '2026-11-01',
'endDate' => '2026-11-30',
'ruleIds' => [
'FLEX_INTERNATIONAL'
],
'name' => 'Campaign budget'
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards"
payload := strings.NewReader("{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards")
.header("Content-Type", "application/json")
.body("{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.banking.v2.portao3.com.br/realms/{realmId}/organizations/{organizationId}/accounts/{accountId}/wallets/{walletId}/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"type\": \"VIRTUAL\",\n \"cardId\": \"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43\",\n \"singleUse\": false,\n \"name\": \"Marketing - Ads\",\n \"customFields\": {\n \"cost-center\": \"CC-1020\"\n },\n \"cardLimits\": [\n {\n \"amount\": 150000,\n \"startDate\": \"2026-11-01\",\n \"endDate\": \"2026-11-30\",\n \"ruleIds\": [\n \"FLEX_INTERNATIONAL\"\n ],\n \"name\": \"Campaign budget\"\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"_id": "66f2a4b8b4d3e80012c9a0e1",
"realmId": "f495ff0c-ab54-4f99-8e92-ca8682e4de9b",
"organizationId": "c4bd3f21-dfbd-44e8-8055-68ba15bed410",
"accountId": "66f2a1c7b4d3e80012c9a0b4",
"walletId": "66f2a3d1b4d3e80012c9a0d2",
"environment": "LIVE",
"panMasked": "524674******4821",
"external": {
"cardId": "3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43",
"instrumentId": "8b2e4f60-1a3c-4d5e-9f70-2b4c6d8e0a12"
},
"status": "ACTIVE",
"createdAt": "2026-11-02T13:05:11.000Z",
"updatedAt": "2026-11-02T13:05:12.000Z",
"expiryDate": "11/2031",
"tokenisationPermitted": true,
"singleUse": false,
"type": "VIRTUAL",
"customFields": {
"cost-center": "CC-1020"
},
"issuedAt": "2026-11-02T13:05:11.000Z",
"name": "Marketing - Ads",
"ownerName": "MARIANA COSTA",
"isSuper": false,
"walletProduct": "NORMAL",
"cardLimitIds": [
"66f2a5c2b4d3e80012c9a0f3"
],
"createdBy": "e3553bc1-5e20-4e17-b22a-a796fda0aa99",
"updatedBy": "e3553bc1-5e20-4e17-b22a-a796fda0aa99",
"__v": 0
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "ACCOUNT_NOT_OPEN",
"origin": "BANKING",
"message": "Account not open"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "FORBIDDEN_WALLET",
"origin": "BANKING",
"message": "You do not have permission to perform this action on this wallet"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "ACCOUNT_NOT_FOUND",
"origin": "BANKING",
"message": "Account not found"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BAD_REQUEST",
"origin": "BANKING",
"message": "Bad Request: Your request is invalid or incomplete. Please make sure you are requesting with the right fields.",
"fields": [
{
"field": "type",
"message": "Invalid option: expected one of \"VIRTUAL\"|\"EMBOSSED\"",
"code": "TYPE_ONE_OF",
"values": [
"VIRTUAL",
"EMBOSSED"
]
}
]
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider temporarily unavailable, please retry"
}{
"traceId": "1-68ee2a1b-3c4d5e6f7a8b9c0d1e2f3a4b",
"code": "BANKING_PROVIDER_UNAVAILABLE",
"origin": "BANKING",
"message": "Banking provider did not respond in time, please retry"
}A
VIRTUAL card is issued at once; read its full number and security code with the card-details endpoint. An EMBOSSED card is a physical card linked to the wallet by the cardId read from the QR code that comes with it. Either way the card is returned ACTIVE, spending from the wallet’s balance. Send x-environment: LIVE to issue a production card.
Pass cardLimits to create the card’s spending limits in the same call — the card is activated only after they are in place. You can also add limits later with the create-a-card-limit endpoint.
The account must be open and the wallet active in the environment, with card payments enabled, and the account must have room in its card limit, which counts every card it issued — blocked and cancelled ones included. Organization admins can issue cards in any wallet; other users only in wallets they use as OWNER or USER.
Retries: issuing a virtual card isn’t idempotent — retrying a request that failed after the card was issued issues another one. List the wallet’s cards before retrying.Headers
Environment to issue the card in: LIVE (production) or TEST (sandbox). When you omit it, the card is issued in TEST; any other value is rejected.
Available options:
LIVE, TEST Path Parameters
ID of your realm.
Format: UUID
ID of the organization the wallet belongs to.
Format: UUID
ID of the organization's account (24 hexadecimal characters).
Pattern:
^[0-9a-fA-F]{24}$ID of the wallet the card is issued in (24 hexadecimal characters), or default for the organization's main wallet.
Pattern:
^([0-9a-fA-F]{24}|default)$Body
application/json
Kind of card: VIRTUAL issues a new card now; EMBOSSED links a physical card you already received to the wallet, identified by cardId.
Available options:
VIRTUAL, EMBOSSED Example:
"VIRTUAL"
Required for an EMBOSSED card: the identifier read from the QR code that comes with the physical card. Ignored for a VIRTUAL card.
Example:
"3f1c9a52-7d4e-4b8a-9e21-6c0d8b7a5f43"
true issues a single-use card, blocked after its first cleared transaction. Only for VIRTUAL cards. Defaults to false.
Example:
false
Name of the card, to tell it apart in lists.
Example:
"Marketing - Ads"
Values of the organization's card custom fields, keyed by each field's slug. Each value must fit its field's type and options.
Example: {"cost-center":"CC-1020"}
Show child attributes
Show child attributes
Example:
{ "cost-center": "CC-1020" }
Spending limits to create together with the card. Each one works like a limit created with the create-a-card-limit endpoint, for this card only.
Show child attributes
Show child attributes
Response
Successful response
A payment card of a wallet.
ID of the card. Use it as cardId in the card endpoints.
Example:
"66f2a4b8b4d3e80012c9a0e1"
ID of the realm the card belongs to.
Example:
"f495ff0c-ab54-4f99-8e92-ca8682e4de9b"
ID of the organization the card belongs to.
Example:
"c4bd3f21-dfbd-44e8-8055-68ba15bed410"
ID of the organization's account.
Example:
"66f2a1c7b4d3e80012c9a0b4"
ID of the wallet the card spends from.
Example:
"66f2a3d1b4d3e80012c9a0d2"
Environment of the card: LIVE (production) or TEST (sandbox).
Available options:
LIVE, TEST Example:
"LIVE"
Card number with its middle digits masked: the first six and the last four digits. Read the full number with the card-details endpoint.
Example:
"524674******4821"
Identifiers of the card at the card issuer.
Show child attributes
Show child attributes
Status of the card: ACTIVE (it can be used), BLOCKED (blocked — unblock it to use it again) or CANCELLED (closed by the issuer for good).
Available options:
ACTIVE, BLOCKED, CANCELLED Example:
"ACTIVE"
When the card record was created.
Example:
"2026-11-02T13:05:11.000Z"
When the card record last changed.
Example:
"2026-11-02T13:05:12.000Z"
Expiry month and year of the card, as MM/YYYY.
Example:
"11/2031"
Whether the card can be added to a device wallet such as Apple Pay, Google Pay or Samsung Pay.
Example:
true
Whether the card is single-use: blocked after its first cleared transaction. Absent on some older cards.
Example:
false
Kind of card: VIRTUAL or EMBOSSED (a physical card). Absent on a few old cancelled cards.
Available options:
VIRTUAL, EMBOSSED Example:
"VIRTUAL"
Values of the organization's card custom fields, keyed by each field's slug. Absent when the card has none.
Example: {"cost-center":"CC-1020"}
Show child attributes
Show child attributes
Example:
{ "cost-center": "CC-1020" }
When the card was issued, or linked to the wallet for a physical card. Absent on a few older cards.
Example:
"2026-11-02T13:05:11.000Z"
Name of the card. Absent when it was issued without one.
Example:
"Marketing - Ads"
Cardholder name associated with the card: in upper case, without accents, abbreviated to about 26 characters. Absent on older cards.
Example:
"MARIANA COSTA"
Whether the card is on the premium card product. Absent on older cards.
Example:
false
Card product of the wallet when the card was issued. Absent on older cards.
Example:
"NORMAL"
Legacy field kept on older cards: IDs of limits created with the card. It is not kept up to date — list the card's limits with the card-limits endpoint instead.
Example: ["66f2a5c2b4d3e80012c9a0f3"]
ID of the user who issued the card. Absent, or null, on older cards.
Example:
"e3553bc1-5e20-4e17-b22a-a796fda0aa99"
ID of the user who last changed the card. Absent, or null, on older cards.
Example:
"e3553bc1-5e20-4e17-b22a-a796fda0aa99"
Version of the record, incremented by some updates.
Example:
0