Skip to main content
POST
Issue a card

Authorizations

Authorization
string
header
required

Bearer access token obtained from POST /v1/oauth/token using your Apocor API key.

Headers

Idempotency-Key
string
required

Required unique key. Retries with the same key + body replay the original response for 72 hours. In-flight duplicates return 409 with issuance_id for POST /v1/cards.

Maximum string length: 255

Body

application/json
program_id
string
required
account_id
string
required
cardholder_id
string
required
form_factor
enum<string>
default:VIRTUAL
Available options:
VIRTUAL,
PHYSICAL
control_set_id
string
spend_limit_cents
integer

Optional monthly spend cap in cents.

reference_id
string

Tenant-unique issuance reference. Generated if omitted. Query via GET /v1/cards?reference_id=.

budget_id
string

Bind the card to a specific budget (spending pot). Defaults to the applicant's default budget.

Response

Issuance already resolved (idempotent replay or synchronous completion). SUCCEEDED includes the card; FAILED includes error.

data
object