---
title: "Retrieve all cards attributes / top-up targets"
description: "List cards with the operational attributes used by card-management screens."
source: https://developers.qashio.com/v2/reference/get-public-v1-core-cards/
---

# Retrieve all cards attributes / top-up targets

`GET /public/v1/core/cards`

Requires a Bearer access token.

**Purpose.** List cards with the operational attributes used by card-management screens.

**Description.** Returns a paginated list of cards with their cardholder, status, type and top-up
settings. This is the operational view of a card, as opposed to
[`GET /public/v1/erp/cards`](#get-publicv1erpcards), which is the accounting view with cost-allocation
segments and control flags. Prefer the ERP endpoint for sync and reporting; use this one when you are
about to act on a card through the write endpoints below.

Results are scoped to what the authenticated user is permitted to see, which may be narrower than the
whole company.

**Input (query).**

| Parameter | Type | Description |
| --- | --- | --- |
| `page` | integer | Page number, 1-based. Default `1` |
| `page_size` | integer | Records per page. Default `20` (also accepted as `limit`) |

**Output.** One object.

| Field | Type | Description |
| --- | --- | --- |
| `cards[]` | array | `{ id, nickname, card_number, card_type, status, display_status, user_name, user_email, company_name, velocity_period, allow_atm, allow_replace_card, card_replaced, return_card }` |
| `page_info` | object | `{ current_page, per_page, total_entries, total_pages, next_page, previous_page, offset }` |

**Errors.** `401`.

### Query parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `page` | integer | no | Page number, 1-based. Default `1` |
| `page_size` | integer | no | Records per page. Default `20` (also accepted as `limit`) |
| `limit` | integer | no |  |

### Example request

```bash
curl -X GET 'https://api.qashio.com/public/v1/core/cards?page=1&limit=5' \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer <access_token>'
```

### Example response (200)

```json
{
  "status_code": 200,
  "success": true,
  "data": {
    "cards": [
      {
        "id": 12143,
        "user_name": "John Doe",
        "company_name": "Qashio",
        "user_email": "john.doe@example.com",
        "status": "draft",
        "display_status": "draft",
        "card_type": "PHYSICAL",
        "nickname": "Qashio Card - 1",
        "card_number": "******",
        "allow_replace_card": true,
        "card_replaced": false,
        "velocity_period": "MONTHLY",
        "allow_atm": "false",
        "return_card": "company_address",
        "shipping_card": "company_address",
        "terminated_at": "2026-08-06T07:30:44.941Z",
        "spend_restriction_type": "no_limit",
        "last_four": "4554",
        "limit_amount_notification": "250.00",
        "card_balance_running_low_notification": false,
        "allowed_countries_list": "sample",
        "allowed_countries_list_active": "sample",
        "foreign_entity": false,
        "atm_restricted_at": "2026-08-06T07:30:44.941Z",
        "issuer": "John Doe",
        "allowed_mccs_active": "false",
        "spend_limit_active": "sample",
        "atm_limit_active": true,
        "auto_top_up_amount": "1000.00",
        "auto_load_on_transaction_approval": false,
        "tokenization_status": "active",
        "account_type": "individual",
        "account_id": "CAj2w5b3w9hoe0ga",
        "currency": "AED",
        "show_pool_balance_to_cardholder": false,
        "is_manager": "false",
        "is_account_manager": "sample",
        "is_dept_manager": "false",
        "can_edit_all_time_limit": false,
        "can_reset_limit": false,
        "reset_summary": "Limits reset on the 1st of each month",
        "issued_at": "2026-08-06T07:30:44.941Z",
        "first_activated_at": "2026-08-06T07:30:44.941Z",
        "external_id": "CAj2w5b3w9hoe0ga",
        "replaced_by_card_external_id": "CAj2w5b3w9hoe0ga",
        "replaced_by_card_id": "CAj2w5b3w9hoe0ga",
        "card_usage_type": "MANUAL_CARD",
        "card_usage_type_amount": "0",
        "account_balance": "Empty",
        "shipment_tracking": "1Z999AA10123456784",
        "spend_limit": "sample",
        "atm_limit": "2000.00",
        "shipping_address": "Dubai Internet City, Dubai, AE",
        "card_template": "virtual-standard",
        "erp_bank_account": "160104",
        "step_up_auth_delegated_user_profile": "UPc7ws3qre31j5uw",
        "created_at": "2026-09-09T13:31:49.152+04:00",
        "shipping_details": {
          "method": null,
          "return_address": null,
          "shipping_address": null
        },
        "wallets_status": {
          "apple_pay": null,
          "google_pay": null,
          "samsung_pay": null
        },
        "user_profile": {
          "department_name": null,
          "first_name": null,
          "last_name": null,
          "company_name": null,
          "user_name": null,
          "system_role_name": null,
          "email": null,
          "user_email": null,
          "external_id": null,
          "user_id": null,
          "status": null,
          "fullname": null,
          "employee_id": null,
          "department_id": null,
          "managing_departments": null
        },
        "advanced_velocity_limits": [],
        "atm_transactions_limit_active": "false",
        "transactions_limit_active": false,
        "atm_transactions_limit": "5",
        "transactions_limit": {
          "max_amount": null,
          "min_amount": null,
          "currency": null,
          "period": null,
          "frequency": null,
          "transaction_scope": null
        }
      }
    ],
    "page_info": {
      "current_page": 1,
      "per_page": 5,
      "total_entries": 3902,
      "next_page": 2,
      "previous_page": "https://api.qashio.com/public/v1/erp/bank_accounts?page=1",
      "offset": 0,
      "total_pages": 781
    }
  },
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}
```

### Errors

- `401` Unauthorized - missing or invalid Bearer token