Create Card

curl --request POST \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardConfigurationCode": "MC_DEBIT_1",
  "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "pinStatus": "GENERATED",
  "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "expirationTime": "2030-08-31T23:59:59Z",
  "plastic": {
    "embossingName": "John Doe",
    "preferredCardDeliveryType": "MAIL",
    "preferredPinDeliveryType": "MAIL",
    "externalLayoutCode": 1,
    "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48"
  },
  "automaticRenewal": true,
  "digitalLayoutCode": 9,
  "additionalValues": {
    "keyWithPlainTextValue": "value1",
    "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
  },
  "feeConfigId": "SILVER"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards"

payload = {
    "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "cardConfigurationCode": "MC_DEBIT_1",
    "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "pinStatus": "GENERATED",
    "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "expirationTime": "2030-08-31T23:59:59Z",
    "plastic": {
        "embossingName": "John Doe",
        "preferredCardDeliveryType": "MAIL",
        "preferredPinDeliveryType": "MAIL",
        "externalLayoutCode": 1,
        "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48"
    },
    "automaticRenewal": True,
    "digitalLayoutCode": 9,
    "additionalValues": {
        "keyWithPlainTextValue": "value1",
        "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
    },
    "feeConfigId": "SILVER"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    programId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    cardConfigurationCode: 'MC_DEBIT_1',
    accountId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    pinStatus: 'GENERATED',
    cardholderId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    expirationTime: '2030-08-31T23:59:59Z',
    plastic: {
      embossingName: 'John Doe',
      preferredCardDeliveryType: 'MAIL',
      preferredPinDeliveryType: 'MAIL',
      externalLayoutCode: 1,
      manufacturerId: '20218aae-b15e-406c-9e9f-23735cd86a48'
    },
    automaticRenewal: true,
    digitalLayoutCode: 9,
    additionalValues: {
      keyWithPlainTextValue: 'value1',
      keyWithBase64Value: 'dmFsdWUyYmFzZTY0ZW5jb2RlZA=='
    },
    feeConfigId: 'SILVER'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'programId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'cardConfigurationCode' => 'MC_DEBIT_1',
    'accountId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'pinStatus' => 'GENERATED',
    'cardholderId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'expirationTime' => '2030-08-31T23:59:59Z',
    'plastic' => [
        'embossingName' => 'John Doe',
        'preferredCardDeliveryType' => 'MAIL',
        'preferredPinDeliveryType' => 'MAIL',
        'externalLayoutCode' => 1,
        'manufacturerId' => '20218aae-b15e-406c-9e9f-23735cd86a48'
    ],
    'automaticRenewal' => true,
    'digitalLayoutCode' => 9,
    'additionalValues' => [
        'keyWithPlainTextValue' => 'value1',
        'keyWithBase64Value' => 'dmFsdWUyYmFzZTY0ZW5jb2RlZA=='
    ],
    'feeConfigId' => 'SILVER'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards"

	payload := strings.NewReader("{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z",
  "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "plastic": {
    "embossingName": "John Doe",
    "preferredCardAddress": {
      "address1": "Kings street 12",
      "city": "Mariehamn",
      "country": "FIN",
      "zipCode": 22100,
      "address2": "Apartment 5B",
      "address3": "Building C",
      "address4": "Entrance North",
      "region": "Åland Islands"
    },
    "preferredCardDeliveryType": "MAIL",
    "preferredPinAddress": {
      "address1": "Kings street 12",
      "city": "Mariehamn",
      "country": "FIN",
      "zipCode": 22100,
      "address2": "Apartment 5B",
      "address3": "Building C",
      "address4": "Entrance North",
      "region": "Åland Islands"
    },
    "preferredPinDeliveryType": "MAIL",
    "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "externalLayoutCode": 1,
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "cardVersions": [
    {
      "status": "ACTIVE",
      "expirationTime": "2030-08-31T23:59:59Z",
      "renewalDate": "2023-12-25",
      "sequenceNumber": 1,
      "keySetId": "01b20ad2-3c2a-48d2-ac2e-5bf6d8b246cd",
      "createdAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "role": "MAIN_CARD",
  "mainCardId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardConfigurationCode": "MC_DEBIT_1",
  "cardConfigurationType": "CREDIT",
  "cardScheme": "MASTERCARD",
  "maskedPan": "123456______4285",
  "pinStatus": "GENERATED",
  "cardStatus": "ACTIVE",
  "automaticRenewal": true,
  "digitalLayoutCode": 9,
  "multiApplicationProperties": {
    "applicationName": "Credit Application",
    "applicationIndex": 1,
    "contactPriorityLevel": 1,
    "contactlessPriorityLevel": 1,
    "printed": true,
    "chipEnabled": true
  },
  "updateCount": 1,
  "additionalValues": {
    "keyWithPlainTextValue": "value1",
    "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
  },
  "feeConfigId": "SILVER"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "JSON parse error: Unexpected character...",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0400",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

POST

cards

Create Card

curl --request POST \
  --url 'https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardConfigurationCode": "MC_DEBIT_1",
  "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "pinStatus": "GENERATED",
  "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "expirationTime": "2030-08-31T23:59:59Z",
  "plastic": {
    "embossingName": "John Doe",
    "preferredCardDeliveryType": "MAIL",
    "preferredPinDeliveryType": "MAIL",
    "externalLayoutCode": 1,
    "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48"
  },
  "automaticRenewal": true,
  "digitalLayoutCode": 9,
  "additionalValues": {
    "keyWithPlainTextValue": "value1",
    "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
  },
  "feeConfigId": "SILVER"
}
'

import requests

url = "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards"

payload = {
    "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "cardConfigurationCode": "MC_DEBIT_1",
    "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "pinStatus": "GENERATED",
    "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "expirationTime": "2030-08-31T23:59:59Z",
    "plastic": {
        "embossingName": "John Doe",
        "preferredCardDeliveryType": "MAIL",
        "preferredPinDeliveryType": "MAIL",
        "externalLayoutCode": 1,
        "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48"
    },
    "automaticRenewal": True,
    "digitalLayoutCode": 9,
    "additionalValues": {
        "keyWithPlainTextValue": "value1",
        "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
    },
    "feeConfigId": "SILVER"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    programId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    cardConfigurationCode: 'MC_DEBIT_1',
    accountId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    pinStatus: 'GENERATED',
    cardholderId: '20218aae-b15e-406c-9e9f-23735cd86a48',
    expirationTime: '2030-08-31T23:59:59Z',
    plastic: {
      embossingName: 'John Doe',
      preferredCardDeliveryType: 'MAIL',
      preferredPinDeliveryType: 'MAIL',
      externalLayoutCode: 1,
      manufacturerId: '20218aae-b15e-406c-9e9f-23735cd86a48'
    },
    automaticRenewal: true,
    digitalLayoutCode: 9,
    additionalValues: {
      keyWithPlainTextValue: 'value1',
      keyWithBase64Value: 'dmFsdWUyYmFzZTY0ZW5jb2RlZA=='
    },
    feeConfigId: 'SILVER'
  })
};

fetch('https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'programId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'cardConfigurationCode' => 'MC_DEBIT_1',
    'accountId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'pinStatus' => 'GENERATED',
    'cardholderId' => '20218aae-b15e-406c-9e9f-23735cd86a48',
    'expirationTime' => '2030-08-31T23:59:59Z',
    'plastic' => [
        'embossingName' => 'John Doe',
        'preferredCardDeliveryType' => 'MAIL',
        'preferredPinDeliveryType' => 'MAIL',
        'externalLayoutCode' => 1,
        'manufacturerId' => '20218aae-b15e-406c-9e9f-23735cd86a48'
    ],
    'automaticRenewal' => true,
    'digitalLayoutCode' => 9,
    'additionalValues' => [
        'keyWithPlainTextValue' => 'value1',
        'keyWithBase64Value' => 'dmFsdWUyYmFzZTY0ZW5jb2RlZA=='
    ],
    'feeConfigId' => 'SILVER'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards"

	payload := strings.NewReader("{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.{{tenant}}.ext-uat1-sandbox.mycore.enfuce.com/issuer/v1/cards")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"programId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"cardConfigurationCode\": \"MC_DEBIT_1\",\n  \"accountId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"pinStatus\": \"GENERATED\",\n  \"cardholderId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\",\n  \"expirationTime\": \"2030-08-31T23:59:59Z\",\n  \"plastic\": {\n    \"embossingName\": \"John Doe\",\n    \"preferredCardDeliveryType\": \"MAIL\",\n    \"preferredPinDeliveryType\": \"MAIL\",\n    \"externalLayoutCode\": 1,\n    \"manufacturerId\": \"20218aae-b15e-406c-9e9f-23735cd86a48\"\n  },\n  \"automaticRenewal\": true,\n  \"digitalLayoutCode\": 9,\n  \"additionalValues\": {\n    \"keyWithPlainTextValue\": \"value1\",\n    \"keyWithBase64Value\": \"dmFsdWUyYmFzZTY0ZW5jb2RlZA==\"\n  },\n  \"feeConfigId\": \"SILVER\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z",
  "programId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardholderId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "accountId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "plastic": {
    "embossingName": "John Doe",
    "preferredCardAddress": {
      "address1": "Kings street 12",
      "city": "Mariehamn",
      "country": "FIN",
      "zipCode": 22100,
      "address2": "Apartment 5B",
      "address3": "Building C",
      "address4": "Entrance North",
      "region": "Åland Islands"
    },
    "preferredCardDeliveryType": "MAIL",
    "preferredPinAddress": {
      "address1": "Kings street 12",
      "city": "Mariehamn",
      "country": "FIN",
      "zipCode": 22100,
      "address2": "Apartment 5B",
      "address3": "Building C",
      "address4": "Entrance North",
      "region": "Åland Islands"
    },
    "preferredPinDeliveryType": "MAIL",
    "manufacturerId": "20218aae-b15e-406c-9e9f-23735cd86a48",
    "externalLayoutCode": 1,
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "cardVersions": [
    {
      "status": "ACTIVE",
      "expirationTime": "2030-08-31T23:59:59Z",
      "renewalDate": "2023-12-25",
      "sequenceNumber": 1,
      "keySetId": "01b20ad2-3c2a-48d2-ac2e-5bf6d8b246cd",
      "createdAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "role": "MAIN_CARD",
  "mainCardId": "20218aae-b15e-406c-9e9f-23735cd86a48",
  "cardConfigurationCode": "MC_DEBIT_1",
  "cardConfigurationType": "CREDIT",
  "cardScheme": "MASTERCARD",
  "maskedPan": "123456______4285",
  "pinStatus": "GENERATED",
  "cardStatus": "ACTIVE",
  "automaticRenewal": true,
  "digitalLayoutCode": 9,
  "multiApplicationProperties": {
    "applicationName": "Credit Application",
    "applicationIndex": 1,
    "contactPriorityLevel": 1,
    "contactlessPriorityLevel": 1,
    "printed": true,
    "chipEnabled": true
  },
  "updateCount": 1,
  "additionalValues": {
    "keyWithPlainTextValue": "value1",
    "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
  },
  "feeConfigId": "SILVER"
}

{
  "type": "about:blank",
  "title": "Bad Request",
  "status": 400,
  "detail": "JSON parse error: Unexpected character...",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0400",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access Denied",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0403",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Not Found",
  "status": 404,
  "detail": "Entity not found - Program with id: 2ec117b7-454e-4cc5-8b89-dea5485aab2b",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0404",
  "timestamp": "2026-02-24T12:34:56Z"
}

{
  "type": "about:blank",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Unexpected error occurred.",
  "instance": "/v1/cards",
  "id": "5cc541cb-f456-4331-b537-d2380fca0500",
  "timestamp": "2026-02-24T12:34:56Z"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

x-audit-user

string

Optional audit user header

x-idempotency-key

string

Idempotency key for the request.

Body

application/json

Create Single Card
Create Multi-Application Card

programId

string<uuid>

required

The program id that you want to associate with the new card you are creating.

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

cardConfigurationCode

string

required

A unique code to identify the card configuration. Max character limit is 36.

Required string length: 1 - 36

Pattern: ^[A-Za-z0-9_-]+$

Example:

"MC_DEBIT_1"

accountId

string

required

Unique identifier of the account associated with the new card.

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9-]+$

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

pinStatus

enum<string>

GENERATED - This endpoint request would generate a random PIN for the new card.
WAITING - The card PIN would be set later.

Available options:

GENERATED,

WAITING

Example:

"GENERATED"

cardholderId

string<uuid>

Unique identifier of the cardholder associated with the new card.

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

expirationTime

string<date-time>

The expiration date-time of the card, always at 23:59:59 UTC on the last day of a month.

If a different expiry than the program default is specified during card creation, it is converted to UTC (if a different offset is given) and rounded up to 23:59:59 of the last day of its own month.

To be sure of the exact expiration month, always specify this value with a Z (UTC) offset. For example, to expire the card in August 2030, set "2030-08-31T23:59:59Z".

Example:

"2030-08-31T23:59:59Z"

plastic

object

Show child attributes

automaticRenewal

boolean

A flag indicating whether automatic renewal is enabled or not.

digitalLayoutCode

string

The digital layout code for the card. Max character limit is 36.

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9-]+$

Example:

9

additionalValues

object

You can include up to 30 additional key-value pairs in the embossing file sent to the card manufacturer.

Keys must follow the pattern: ^[a-zA-Z0-9-]{1,36}$ (only letters, numbers, and hyphens, with a maximum length of 36 characters).
Values must follow the pattern: ^[a-zA-Z0-9|\-_ +.@éàèùçâêîôûëïü'/=]{1,1000}$.

Enfuce does not perform any additional validation on these key-value pairs beyond ensuring they match the specified patterns.

These fields are intended for storing data without further processing. If you need to store a complex structure, you can base64 encode the value. The encoded value will be passed as entered, without modifications.

⚠ Important: Any usage of these fields should be agreed upon with the manufacturer.

Show child attributes

Example:

{
  "keyWithPlainTextValue": "value1",
  "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
}

feeConfigId

string

Unique identifier of a fee configuration. When provided, this value overrides the program default. This feature must be enabled for the tenant; otherwise, this field can be left null and will not be used.

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9_-]+$

Example:

"SILVER"

Response

Successful creation of new card.

Create Single Card
Create Multi-Application Card

string<uuid>

Unique identifier of a card.

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

createdAt

string<date-time>

The date and time when the card was created.

updatedAt

string<date-time>

The date and time when the object/entity was updated last time.

programId

string<uuid>

The program ID associated with the card.

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

cardholderId

string<uuid>

Unique identifier of the cardholder associated with the card.

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

accountId

string

Unique identifier of the account associated with the card.

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9-]+$

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

plastic

object

Show child attributes

cardVersions

object[]

Card versions ordered by sequence number ascending.

Show child attributes

role

enum<string>

The role of the card. Multi application cards will have one main card and multiple card applications. Single cards will be treated as main cards.

Available options:

MAIN_CARD,

CARD_APPLICATION

Example:

"MAIN_CARD"

mainCardId

string<uuid>

Unique identifier of the main card. Populated if this card is part of a card application

Example:

"20218aae-b15e-406c-9e9f-23735cd86a48"

cardConfigurationCode

string

A unique code to identify the card configuration. Max character limit is 36.

Required string length: 1 - 36

Pattern: ^[A-Za-z0-9_-]+$

Example:

"MC_DEBIT_1"

cardConfigurationType

enum<string>

The type of card defined by this card configuration.

Available options:

DEBIT,

CREDIT,

COMBO

Example:

"CREDIT"

cardScheme

enum<string>

Available options:

MASTERCARD,

VISA

Example:

"MASTERCARD"

maskedPan

string

A masked version of the primary account number

Example:

"123456______4285"

pinStatus

enum<string>

GENERATED - A pin has been randomly generated for the card.
WAITING - A pin is waiting to be set on the card.
SET - A pin has been manually set on the card.
INHERITED - For card applications only. The pin status is inherited from the main card.

Available options:

GENERATED,

WAITING,

SET,

INHERITED

Example:

"GENERATED"

cardStatus

enum<string>

ACTIVE - Card is active and is enabled for normal usage.
BLOCKED - Card is temporarily blocked.
BLOCKED_SUSPECTED_FRAUD - Card is temporarily blocked due to suspected fraud.
CLOSED_DUE_TO_FRAUD - Card has been closed due to fraud.
CLOSED_LOST - Card has been closed due to being lost.
CLOSED_STOLEN - Card has been closed due to being stolen.
CLOSED - Card has been manually closed.
CLOSED_EXPIRED - Card has no active or initial card versions and cannot be used.

Available options:

ACTIVE,

BLOCKED,

BLOCKED_SUSPECTED_FRAUD,

CLOSED_DUE_TO_FRAUD,

CLOSED_LOST,

CLOSED_STOLEN,

CLOSED,

CLOSED_EXPIRED

Example:

"ACTIVE"

automaticRenewal

boolean

A flag indicating whether automatic renewal is enabled or not.

digitalLayoutCode

string

The digital layout code for the card. Max character limit is 36.

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9-]+$

Example:

9

multiApplicationProperties

object

Show child attributes

updateCount

integer

The version number of the entity.

Example:

1

additionalValues

object

You can include up to 30 additional key-value pairs in the embossing file sent to the card manufacturer.

Keys must follow the pattern: ^[a-zA-Z0-9-]{1,36}$ (only letters, numbers, and hyphens, with a maximum length of 36 characters).
Values must follow the pattern: ^[a-zA-Z0-9|\-_ +.@éàèùçâêîôûëïü'/=]{1,1000}$.

Enfuce does not perform any additional validation on these key-value pairs beyond ensuring they match the specified patterns.

⚠ Important: Any usage of these fields should be agreed upon with the manufacturer.

Show child attributes

Example:

{
  "keyWithPlainTextValue": "value1",
  "keyWithBase64Value": "dmFsdWUyYmFzZTY0ZW5jb2RlZA=="
}

feeConfigId

string | null

Required string length: 1 - 36

Pattern: ^[a-zA-Z0-9_-]+$

Example:

"SILVER"

⌘I

Introduction

Cards API

Cardholders API

PIN API

Wallet API

Transaction Lifecycle

Spend Controls API

Exchange Rates API

Create Card

Authorizations

Headers

Body

Response