Base URL
All API requests should be made to: Production:Authentication
All API requests require authentication using your API key. You can include it either in the request headers or as a query parameter.Header Authentication (Recommended)
Query Parameter Authentication
Request Format
All requests should include the following headers:Content-Type: application/jsonX-API-KEY: YOUR_API_KEY(or include as query parameter)
Response Format
All API responses are returned in JSON format with the following structure:Success Response
Error Response
Validation Error Response
Rate Limits
Rate limits vary by endpoint and are indicated in response headers:X-Ratelimit-Limit: Maximum requests per windowX-Ratelimit-Remaining: Remaining requests in current windowX-Ratelimit-Reset: Time when the rate limit resets (Unix timestamp)
- Card creation: 4 requests per window
- Card reveal: 10 requests per window
- Virtual account creation: 2 requests per window
Error Handling
The API uses standard HTTP status codes:200- Success400- Bad Request (invalid parameters or resource not found)401- Unauthorized (invalid API key)403- Forbidden (insufficient permissions)404- Not Found422- Unprocessable Entity (validation errors)429- Too Many Requests (rate limit exceeded)500- Internal Server Error
Pagination
List endpoints support pagination using query parameters:page: 0-indexed page number (default: 0)size: Number of items per page (default: 10)sort: Sort order (optional)filters: Filter criteria (optional)
Getting Started
- Get your API key from the dashboard
- Create a customer using the Customers API
- Issue a virtual account using the Virtual Accounts API
- Create a card using the Cards API
- Explore the endpoints to understand all available features
Support
Need help with the API? Check out our:- Authentication Guide
- Error Handling documentation
- Support team

