Response format

Apocor responses are predictable. Resource endpoints wrap their payload in a data envelope; authentication endpoints return the token object directly; errors use an error envelope.

Single resource

{
  "data": {
    "id": "card_abc123",
    "status": "ACTIVE",
    "lastFour": "4242"
  }
}

Collection

Lists return an array under data.

{
  "data": [
    { "id": "card_abc123", "status": "ACTIVE" },
    { "id": "card_def456", "status": "FROZEN" }
  ]
}

Token (authentication)

POST /v1/oauth/token and the login endpoints return the token object without a data wrapper:

{ "access_token": "eyJ…", "token_type": "Bearer", "expires_in": 3600 }

Empty

Some actions (e.g. revoking an API key) return 204 No Content with an empty body.

Error

{ "error": { "code": "NOT_FOUND", "message": "Card not found" } }

See Error codes for the full list and HTTP status mapping.

Amounts & timestamps

Monetary amounts are integers in minor units (cents). Timestamps are ISO 8601 strings in UTC.

Get started

Core concepts

Webhooks & events

Reference

Single resource

Collection

Token (authentication)

Empty

Error

Amounts & timestamps

​Single resource

​Collection

​Token (authentication)

​Empty

​Error

​Amounts & timestamps

Single resource

Collection

Token (authentication)

Empty

Error

Amounts & timestamps