Skip to main content
PATCH
Update a card

Authorizations

Authorization
string
header
required

Bearer access token obtained from POST /v1/oauth/token using your Apocor API key.

Path Parameters

id
string
required

Resource identifier.

Body

application/json
label
string
spend_limit_cents
integer

Monthly spend cap in cents. Use 0 to remove the limit.

Response

200 - application/json

Updated card.

data
object

An issued card. List/get responses never include full PAN/CVV. Reveal via GET /v1/cards/{id}/secure-details (Widget.js token) or, for PCI DSS Level 1 orgs, POST /v1/cards/{id}/payment-details (RSA-OAEP + AES-256-GCM encrypted envelope).