Introduction - Apocor Cards API

The Apocor Cards API is the integration surface for launching a card program. Authenticate with your Apocor API key, onboard applicants, run KYC, and issue virtual or physical cards. Portal setup (organizations, programs, billing) is handled in the dashboard — this documentation covers the card integration flow only.

Apocor keys only

Exchange a client_id + client_secret for a short-lived bearer token. That’s the only credential your services ever hold.

Fully white-labeled

Responses expose Apocor resources only — no upstream provider names, ids, or keys ever leak to your app.

Consistent envelopes

Every resource response is wrapped in { "data": … }; every error is { "error": { "code", "message" } }.

Interactive reference

Try any endpoint from the browser against your sandbox with your bearer token.

How it fits together

Base URLs

Environment	Base URL
Sandbox	`https://sandbox.apocor.ai`
Production	`https://api.apocor.com` (coming soon)
Local	`http://localhost:4000`

Every path in this documentation is relative to one of these hosts. All examples target the sandbox — a live, fully functional environment with no real money movement — so you can copy, paste, and run them as-is.

Documentation map

Section	Purpose
Quickstart	Authenticate and issue your first card
Authentication	API keys and bearer tokens
KYC integration	Hosted verification, BYOK share tokens, issuer readiness
Applicants & Cards	Core objects in the card flow
Responses & Errors	Envelope shapes and error codes
API Reference	Card integration endpoints with a live playground

Quickstart

⌘I