Get a card by ID

GET/cards/{cardId}

Bearer token

Returns full details for a single card by its external cardId, scoped to the company in the companyId header. Includes cardholder, segments, and the spend, purchase, country, merchant-category, top-up, and ATM configuration.

Path parameters

cardIdstringrequired: Example CAj6am8270po7z56

Header parameters

companyIdstringrequired: ID of the company to filter records
x-api-keystringrequired: Please provide a valid API Key

Response

Field	Type	Description
`id`	string
`cardNickname`	string
`status`	string
`cardholder`	object
`name`	string
`email`	string
`employeeId`	string
`cardType`	string
`maskedCardNumber`	string
`accountExternalId`	string
`accountType`	string	`ReloadablePool`
`cardCurrency`	string
`createdAt`	string
`companyName`	string
`segments`	object[]
`name`	string
`label`	string
`erp_internal_id`	string
`code`	string
`customSegments`	object[]
`label`	string
`name`	string
`erpCode`	string
`erp_internal_id`	string
`allowedMaxBalance`	number
`floatManagementEnabled`	boolean
`topupType`	string
`cardReplaced`	boolean
`transactionLimitsActive`	boolean
`purchaseLimitsActive`	boolean
`countryLimitsActive`	boolean
`categoryLimitsActive`	boolean
`atmWithdrawalAllowed`	boolean
`lowBalanceNotificationActive`	boolean
`lowBalanceNotificationAmount`	number
`terminatedAt`	string
`activatedAt`	string
`issuedAt`	string	Time the card was actually issued in the third party; may differ from createdAt for card requests or unverified cardholders
`purchaseLimits`	object
`perTransactionLimit`	number
`dailyLimit`	number
`weeklyLimit`	number
`monthlyLimit`	number
`limitCurrency`	string
`countryLimits`	object
`restrictionMode`	string
`allowedCountries`	string[]
`blockedCountries`	string[]
`merchantCategoryLimits`	object
`restrictionMode`	string
`allowedMccCodes`	string[]
`blockedMccCodes`	string[]
`allowedCategories`	string[]
`blockedCategories`	string[]
`topupConfiguration`	object
`topupType`	string
`topupSourceDetails`	object
`autoTopupEnabled`	boolean
`autoTopupThreshold`	number
`autoTopupAmount`	number
`frequency`	string
`autoTopUpConfiguration`	object
`autoTopupEnabled`	boolean
`autoTopupThreshold`	number
`autoTopupAmount`	number
`frequency`	string
`atmConfiguration`	object
`atmWithdrawalAllowed`	boolean
`dailyAtmLimit`	number
`monthlyAtmLimit`	number

2 nested fields

`topupConfiguration.topupSourceDetails.sourceId`	string
`topupConfiguration.topupSourceDetails.sourceType`	string

Errors

400Bad Request

Every error carries an errors[] array and a meta.request_id. See Errors for the full envelope.

GET/cards/{cardId}

curl -X GET 'https://erp.qashio.com/cards/CAj6am8270po7z56' \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer <access_token>'

const accessToken = process.env.QASHIO_ACCESS_TOKEN;

const response = await fetch('https://erp.qashio.com/cards/CAj6am8270po7z56', {
  method: 'GET',
  headers: {
    Accept: 'application/json',
    Authorization: `Bearer ${accessToken}`,
  },
});

if (!response.ok) {
  throw new Error(`Qashio API ${response.status}: ${await response.text()}`);
}

const { data, meta } = await response.json();
console.log(meta.request_id, data);

import https from 'node:https';

const url = new URL('https://erp.qashio.com/cards/CAj6am8270po7z56');

const payload = await new Promise((resolve, reject) => {
  const req = https.request(
    url,
    {
      method: 'GET',
      headers: {
      Accept: 'application/json',
      Authorization: `Bearer ${process.env.QASHIO_ACCESS_TOKEN}`,
      },
    },
    (res) => {
      let raw = '';
      res.on('data', (chunk) => (raw += chunk));
      res.on('end', () => resolve(JSON.parse(raw)));
    },
  );
  req.on('error', reject);
  req.end();
});

console.log(payload.data);

import os
import requests

url = "https://erp.qashio.com/cards/CAj6am8270po7z56"
headers = {
    "Accept": "application/json",
    "Authorization": f"Bearer {os.environ['QASHIO_ACCESS_TOKEN']}",
}

response = requests.get(url, headers=headers, timeout=30)
response.raise_for_status()

body = response.json()
print(body["meta"]["request_id"], body["data"])

<?php

$ch = curl_init('https://erp.qashio.com/cards/CAj6am8270po7z56');

curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_CUSTOMREQUEST  => 'GET',
  CURLOPT_HTTPHEADER     => [
      'Accept: application/json',
      'Authorization: Bearer ' . getenv('QASHIO_ACCESS_TOKEN'),
  ],
]);

$response = curl_exec($ch);
curl_close($ch);

$body = json_decode($response, true);
print_r($body['data']);

package main

import (
	"encoding/json"
	"fmt"
	"net/http"
	"os"
)

func main() {
	req, _ := http.NewRequest("GET", "https://erp.qashio.com/cards/CAj6am8270po7z56", nil)
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Authorization", "Bearer "+os.Getenv("QASHIO_ACCESS_TOKEN"))

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	var out map[string]any
	json.NewDecoder(res.Body).Decode(&out)
	fmt.Println(out["data"])
}

require 'net/http'
require 'json'
require 'uri'

uri = URI('https://erp.qashio.com/cards/CAj6am8270po7z56')
request = Net::HTTP::Get.new(uri)
request['Accept'] = 'application/json'
request['Authorization'] = "Bearer #{ENV.fetch('QASHIO_ACCESS_TOKEN')}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

body = JSON.parse(response.body)
puts body['data']

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class QashioExample {
  public static void main(String[] args) throws Exception {
    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://erp.qashio.com/cards/CAj6am8270po7z56"))
        .header("Accept", "application/json")
        .header("Authorization", "Bearer " + System.getenv("QASHIO_ACCESS_TOKEN"))
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();

    HttpResponse<String> response = HttpClient.newHttpClient()
        .send(request, HttpResponse.BodyHandlers.ofString());

    System.out.println(response.body());
  }
}

using System;
using System.Net.Http;
using System.Threading.Tasks;

var client = new HttpClient();

var request = new HttpRequestMessage(new HttpMethod("GET"), "https://erp.qashio.com/cards/CAj6am8270po7z56");
request.Headers.Add("Accept", "application/json");
request.Headers.Add("Authorization", $"Bearer {Environment.GetEnvironmentVariable("QASHIO_ACCESS_TOKEN")}");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();

Console.WriteLine(await response.Content.ReadAsStringAsync());

import Foundation

var request = URLRequest(url: URL(string: "https://erp.qashio.com/cards/CAj6am8270po7z56")!)
request.httpMethod = "GET"
request.setValue("application/json", forHTTPHeaderField: "Accept")
let token = ProcessInfo.processInfo.environment["QASHIO_ACCESS_TOKEN"]!
request.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization")

let (data, _) = try await URLSession.shared.data(for: request)
print(String(data: data, encoding: .utf8)!)

Response

{
  "id": "CAj6am8270po7z56",
  "cardNickname": "vwfrsdc",
  "status": "Active",
  "cardholder": {
    "name": "Sohrab Shaikh",
    "email": "sohrab@qashio.com",
    "employeeId": "13245"
  },
  "cardType": "Virtual",
  "maskedCardNumber": "**** **** **** 6408",
  "accountExternalId": "AC980077s7pa6n2j",
  "accountType": "Pool",
  "cardCurrency": "AED",
  "createdAt": "2026-01-20T06:04:05.460Z",
  "companyName": "Qashio, Inc.",
  "segments": [
    {
      "name": "Dubai",
      "label": "Location",
      "erp_internal_id": "LOC-001",
      "code": "MO"
    }
  ],
  "customSegments": [
    {
      "label": "category",
      "name": "MR505",
      "erpCode": "Test",
      "erp_internal_id": null
    }
  ],
  "allowedMaxBalance": 5000,
  "floatManagementEnabled": false,
  "topupType": "manual",
  "cardReplaced": false,
  "transactionLimitsActive": true,
  "purchaseLimitsActive": true,
  "countryLimitsActive": true,
  "categoryLimitsActive": true,
  "atmWithdrawalAllowed": true,
  "lowBalanceNotificationActive": false,
  "lowBalanceNotificationAmount": 100,
  "terminatedAt": "2026-01-20T06:25:08.969Z",
  "activatedAt": null,
  "issuedAt": "2026-01-20T06:04:05.460Z",
  "purchaseLimits": {
    "perTransactionLimit": 500,
    "dailyLimit": 1000,
    "weeklyLimit": 5000,
    "monthlyLimit": 20000,
    "limitCurrency": "AED"
  },
  "countryLimits": {
    "restrictionMode": "allowlist",
    "allowedCountries": [
      "AE"
    ],
    "blockedCountries": []
  },
  "merchantCategoryLimits": {
    "restrictionMode": "blocklist",
    "allowedMccCodes": [
      "string"
    ],
    "blockedMccCodes": [
      "string"
    ],
    "allowedCategories": [
      "string"
    ],
    "blockedCategories": [
      "string"
    ]
  },
  "topupConfiguration": {
    "topupType": "manual",
    "topupSourceDetails": {
      "sourceId": "AC980077s7pa6n2j",
      "sourceType": "PoolAccount"
    },
    "autoTopupEnabled": false,
    "autoTopupThreshold": 100,
    "autoTopupAmount": 500,
    "frequency": "monthly"
  },
  "autoTopUpConfiguration": {
    "autoTopupEnabled": true,
    "autoTopupThreshold": 100,
    "autoTopupAmount": 500,
    "frequency": "monthly"
  },
  "atmConfiguration": {
    "atmWithdrawalAllowed": true,
    "dailyAtmLimit": 1000,
    "monthlyAtmLimit": 5000
  }
}

{
  "message": [
    "Bad Request"
  ],
  "error": "Bad Request",
  "statusCode": 400
}