Apply or modify limits to a card

POST/public/v1/core/cards/{cardId}/update_velocity_limit

Bearer token

Apply or change how much a card may spend in a given period.

Sets the card's spend limit: whether a limit is enforced, the amount, the period it resets over, and how many times it may be used within that period. The change is applied at the card issuer as well as in Qashio, and the cardholder is notified by email.

Each call writes an audit record and may trigger a notification even when the values are unchanged, so avoid sending it on an unconditional schedule.

Path parameters

cardIdstringrequired: Card identifier (CA…)

Request body

application/jsonrequired

Field	In	Type	Description
`cardId`	path	string	Card identifier (`CA…`)
`spend_limit_active`	body	boolean	Whether the limit is enforced
`spend_limit_period`	body	string	Reset period, e.g. `DAILY`, `WEEKLY`, `MONTHLY`
`spend_limit_max_amount`	body	integer	Maximum spend within the period
`spend_limit_frequency`	body	integer	Permitted number of transactions within the period

JSON

{
  "spend_limit_active": true,
  "spend_limit_period": "MONTHLY",
  "spend_limit_max_amount": 2000,
  "spend_limit_frequency": 10
}

Response

200 (or 201) with message: "Resource created successfully." and data.card: the card with its updated limits.

Response schema from the OpenAPI document

Field	Type	Description
`status_code`	integer
`success`	boolean
`message`	string
`data`	object
`card`	object
`id`	integer
`user_name`	string
`company_name`	string
`user_email`	string
`status`	string
`display_status`	string
`card_type`	string
`nickname`	string
`card_number`	string
`allow_replace_card`	boolean
`card_replaced`	boolean
`velocity_period`	string
`allow_atm`	boolean
`return_card`	string
`shipping_card`	string
`terminated_at`	string
`spend_restriction_type`	string
`last_four`	string
`limit_amount_notification`	string
`card_balance_running_low_notification`	boolean
`allowed_countries_list_active`	boolean
`foreign_entity`	boolean
`atm_restricted_at`	string
`issuer`	string
`allowed_mccs_active`	boolean
`spend_limit_active`	boolean
`atm_limit_active`	string
`auto_top_up_amount`	integer
`auto_load_on_transaction_approval`	boolean
`tokenization_status`	string
`account_type`	string
`account_id`	integer
`currency`	string
`show_pool_balance_to_cardholder`	boolean
`is_manager`	string
`is_account_manager`	boolean
`is_dept_manager`	string
`can_edit_all_time_limit`	boolean
`can_reset_limit`	boolean
`reset_summary`	string
`issued_at`	string
`first_activated_at`	string
`external_id`	string
`replaced_by_card_external_id`	string
`replaced_by_card_id`	string
`card_usage_type`	string
`card_usage_type_amount`	string
`account_balance`	string
`shipment_tracking`	string
`atm_transactions_limit_active`	string
`transactions_limit_active`	boolean
`atm_transactions_limit`	string
`atm_limit`	string
`department`	string
`location`	string
`division`	string
`project`	string
`shipping_address`	string
`return_address`	string
`card_template`	string
`erp_bank_account`	string
`step_up_auth_delegated_user_profile`	string
`created_at`	string
`shipping_details`	object
`allowed_countries_list`	string[]
`wallets_status`	object
`transactions_limit`	object
`spend_limit`	object
`expense_categories`	object[]
`merchants`	object[]
`user_profile`	object
`card_product`	object
`merchant_groups`	object[]
`advanced_velocity_limits`	object[]
`custom_segments`	object[]
`meta`	object
`request_id`	string
`timestamp`	string

138 nested fields

`data.card.shipping_details.method`	string
`data.card.shipping_details.return_address`	object
`data.card.shipping_details.shipping_address`	object
`data.card.wallets_status.apple_pay`	boolean
`data.card.wallets_status.google_pay`	boolean
`data.card.wallets_status.samsung_pay`	boolean
`data.card.transactions_limit.max_amount`	integer
`data.card.transactions_limit.min_amount`	integer
`data.card.transactions_limit.currency`	string
`data.card.transactions_limit.period`	string
`data.card.transactions_limit.frequency`	integer
`data.card.transactions_limit.transaction_scope`	string[]
`data.card.spend_limit.id`	integer
`data.card.spend_limit.name`	string
`data.card.spend_limit.active`	boolean
`data.card.spend_limit.description`	string
`data.card.spend_limit.min_amount`	integer
`data.card.spend_limit.max_amount`	integer
`data.card.spend_limit.currency`	string
`data.card.spend_limit.period`	string
`data.card.spend_limit.limit_type`	string
`data.card.spend_limit.frequency`	integer
`data.card.spend_limit.num_of_days`	string
`data.card.spend_limit.remote_id`	string
`data.card.spend_limit.external_id`	string
`data.card.spend_limit.remaining_balance`	integer
`data.card.spend_limit.remaining_frequency`	integer
`data.card.spend_limit.remote_sync`	string
`data.card.spend_limit.consumed_limit`	integer
`data.card.spend_limit.consumed_frequency`	integer
`data.card.spend_limit.transaction_scope`	string[]
`data.card.spend_limit.remote_data`	object
`data.card.spend_limit.remote_data.id`	string
`data.card.spend_limit.remote_data.name`	string
`data.card.spend_limit.remote_data.type`	string
`data.card.spend_limit.remote_data.group`	string
`data.card.spend_limit.remote_data.active`	boolean
`data.card.spend_limit.remote_data.amount`	integer
`data.card.spend_limit.remote_data.period`	string
`data.card.spend_limit.remote_data.created`	string
`data.card.spend_limit.remote_data.currency`	string
`data.card.spend_limit.remote_data.modified`	string
`data.card.spend_limit.remote_data.frequency`	integer
`data.card.spend_limit.remote_data.description`	string
`data.card.spend_limit.remote_data.effective_to`	string
`data.card.spend_limit.remote_data.program_level`	boolean
`data.card.spend_limit.remote_data.effective_from`	string
`data.card.spend_limit.remote_data.conditions`	object[]
`data.card.spend_limit.remote_data.per_transaction`	object
`data.card.spend_limit.remote_data.transaction_scope`	string[]
`data.card.expense_categories[].id`	string
`data.card.expense_categories[].name`	string
`data.card.expense_categories[].label`	string
`data.card.expense_categories[].code`	string
`data.card.expense_categories[].erp_internal_id`	string
`data.card.expense_categories[].erp_code`	string
`data.card.merchants[].id`	integer
`data.card.merchants[].name`	string
`data.card.user_profile.department_name`	string
`data.card.user_profile.first_name`	string
`data.card.user_profile.last_name`	string
`data.card.user_profile.company_name`	string
`data.card.user_profile.user_name`	string
`data.card.user_profile.system_role_name`	string
`data.card.user_profile.email`	string
`data.card.user_profile.user_email`	string
`data.card.user_profile.external_id`	string
`data.card.user_profile.user_id`	integer
`data.card.user_profile.status`	string
`data.card.user_profile.fullname`	string
`data.card.user_profile.employee_id`	string
`data.card.user_profile.department_id`	integer
`data.card.user_profile.managing_departments`	object[]
`data.card.user_profile.managing_departments[].id`	integer
`data.card.user_profile.managing_departments[].name`	string
`data.card.card_product.id`	integer
`data.card.card_product.name`	string
`data.card.card_product.status`	string
`data.card.card_product.description`	string
`data.card.card_product.pan_format_token`	string
`data.card.card_product.track_format_token`	string
`data.card.card_product.proxy_format_token`	string
`data.card.card_product.remote_id`	string
`data.card.card_product.external_id`	string
`data.card.card_product.notification_template_remote_id`	string
`data.card.card_product.auth_settings_allowed_list_status_active`	boolean
`data.card.card_product.currency_settings`	object
`data.card.card_product.currency_settings.supported_currency`	string
`data.card.card_product.currency_settings.settlement_currency`	string
`data.card.card_product.currency_settings.priority`	integer
`data.card.card_product.currency_settings.status`	string
`data.card.card_product.currency_settings.allow_loads`	boolean
`data.card.card_product.currency_settings.allow_unloads`	boolean
`data.card.card_product.currency_settings.allow_scheme_debit_txn`	boolean
`data.card.card_product.currency_settings.allow_scheme_credit_txn`	boolean
`data.card.card_product.currency_settings.allow_incoming_transfer`	boolean
`data.card.card_product.currency_settings.allow_outgoing_transfer`	boolean
`data.card.card_product.currency_settings.allow_incoming_sweeps`	boolean
`data.card.card_product.currency_settings.allow_outgoing_sweeps`	boolean
`data.card.card_product.currency_settings.allow_initial_load`	boolean
`data.card.card_product.pin_settings`	object
`data.card.card_product.pin_settings.pin_type`	string
`data.card.card_product.pin_settings.pin_length`	integer
`data.card.card_product.pin_settings.pin_retries`	integer
`data.card.merchant_groups[].id`	integer
`data.card.merchant_groups[].name`	string
`data.card.advanced_velocity_limits[].id`	string
`data.card.advanced_velocity_limits[].title`	string
`data.card.advanced_velocity_limits[].limit_by_type`	string
`data.card.advanced_velocity_limits[].active`	boolean
`data.card.advanced_velocity_limits[].amount`	integer
`data.card.advanced_velocity_limits[].currency`	string
`data.card.advanced_velocity_limits[].period`	string
`data.card.advanced_velocity_limits[].remote_linked`	string
`data.card.advanced_velocity_limits[].remote_sync`	string
`data.card.advanced_velocity_limits[].remaining_balance`	integer
`data.card.advanced_velocity_limits[].limit_type`	string
`data.card.advanced_velocity_limits[].issuer`	string
`data.card.advanced_velocity_limits[].external_id`	string
`data.card.advanced_velocity_limits[].effective_from`	string
`data.card.advanced_velocity_limits[].effective_to`	string
`data.card.advanced_velocity_limits[].frequency`	integer
`data.card.advanced_velocity_limits[].remaining_frequency`	integer
`data.card.advanced_velocity_limits[].consumed_limit`	integer
`data.card.advanced_velocity_limits[].consumed_frequency`	integer
`data.card.advanced_velocity_limits[].expense_category_ids`	object[]
`data.card.advanced_velocity_limits[].expense_category_ids[].id`	string
`data.card.advanced_velocity_limits[].expense_category_ids[].name`	string
`data.card.advanced_velocity_limits[].expense_category_ids[].label`	string
`data.card.advanced_velocity_limits[].expense_category_ids[].code`	string
`data.card.advanced_velocity_limits[].expense_category_ids[].erp_internal_id`	string
`data.card.advanced_velocity_limits[].expense_category_ids[].erp_code`	string
`data.card.custom_segments[].id`	string
`data.card.custom_segments[].name`	string
`data.card.custom_segments[].label`	string
`data.card.custom_segments[].code`	string
`data.card.custom_segments[].erp_internal_id`	string
`data.card.custom_segments[].erp_code`	string

Errors

400 (the limit could not be applied at the issuer), 401, 404.

401Unauthorized - missing or invalid Bearer token
404Not Found

Every error carries an errors[] array and a meta.request_id. See Errors for the full envelope.

POST/public/v1/core/cards/{cardId}/update_velocity_limit

curl -X POST 'https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit' \
  -H 'Accept: application/json' \
  -H 'Authorization: Bearer <access_token>' \
  -H 'Content-Type: application/json' \
  -d '{
    "spend_limit_active": true,
    "spend_limit_period": "MONTHLY",
    "spend_limit_max_amount": 2000,
    "spend_limit_frequency": 10
  }'

const accessToken = process.env.QASHIO_ACCESS_TOKEN;

const response = await fetch('https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit', {
  method: 'POST',
  headers: {
    Accept: 'application/json',
    Authorization: `Bearer ${accessToken}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "spend_limit_active": true,
    "spend_limit_period": "MONTHLY",
    "spend_limit_max_amount": 2000,
    "spend_limit_frequency": 10
  }),
});

if (!response.ok) {
  throw new Error(`Qashio API ${response.status}: ${await response.text()}`);
}

const { data, meta } = await response.json();
console.log(meta.request_id, data);

import https from 'node:https';

const url = new URL('https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit');

const payload = await new Promise((resolve, reject) => {
  const req = https.request(
    url,
    {
      method: 'POST',
      headers: {
      Accept: 'application/json',
      Authorization: `Bearer ${process.env.QASHIO_ACCESS_TOKEN}`,
        'Content-Type': 'application/json',
      },
    },
    (res) => {
      let raw = '';
      res.on('data', (chunk) => (raw += chunk));
      res.on('end', () => resolve(JSON.parse(raw)));
    },
  );
  req.on('error', reject);
  req.write(JSON.stringify({
    "spend_limit_active": true,
    "spend_limit_period": "MONTHLY",
    "spend_limit_max_amount": 2000,
    "spend_limit_frequency": 10
  }));
  req.end();
});

console.log(payload.data);

import os
import requests

url = "https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit"
headers = {
    "Accept": "application/json",
    "Authorization": f"Bearer {os.environ['QASHIO_ACCESS_TOKEN']}",
}

payload = {
  "spend_limit_active": True,
  "spend_limit_period": "MONTHLY",
  "spend_limit_max_amount": 2000,
  "spend_limit_frequency": 10
}

response = requests.post(url, headers=headers, json=payload, timeout=30)
response.raise_for_status()

body = response.json()
print(body["meta"]["request_id"], body["data"])

<?php

$ch = curl_init('https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit');

curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_CUSTOMREQUEST  => 'POST',
  CURLOPT_HTTPHEADER     => [
      'Accept: application/json',
      'Authorization: Bearer ' . getenv('QASHIO_ACCESS_TOKEN'),
      'Content-Type: application/json',
  ],
  CURLOPT_POSTFIELDS     => json_encode([
  'spend_limit_active' => true,
  'spend_limit_period' => 'MONTHLY',
  'spend_limit_max_amount' => 2000,
  'spend_limit_frequency' => 10
]),
]);

$response = curl_exec($ch);
curl_close($ch);

$body = json_decode($response, true);
print_r($body['data']);

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"net/http"
	"os"
)

func main() {
	payload := []byte(`{
  "spend_limit_active": true,
  "spend_limit_period": "MONTHLY",
  "spend_limit_max_amount": 2000,
  "spend_limit_frequency": 10
}`)

	req, _ := http.NewRequest("POST", "https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit", bytes.NewBuffer(payload))
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Authorization", "Bearer "+os.Getenv("QASHIO_ACCESS_TOKEN"))
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	var out map[string]any
	json.NewDecoder(res.Body).Decode(&out)
	fmt.Println(out["data"])
}

require 'net/http'
require 'json'
require 'uri'

uri = URI('https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit')
request = Net::HTTP::Post.new(uri)
request['Accept'] = 'application/json'
request['Authorization'] = "Bearer #{ENV.fetch('QASHIO_ACCESS_TOKEN')}"
request['Content-Type'] = 'application/json'
request.body = "{\n  \"spend_limit_active\": true,\n  \"spend_limit_period\": \"MONTHLY\",\n  \"spend_limit_max_amount\": 2000,\n  \"spend_limit_frequency\": 10\n}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

body = JSON.parse(response.body)
puts body['data']

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class QashioExample {
  public static void main(String[] args) throws Exception {
    String payload = """
      {
        "spend_limit_active": true,
        "spend_limit_period": "MONTHLY",
        "spend_limit_max_amount": 2000,
        "spend_limit_frequency": 10
      }
      """;

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit"))
        .header("Accept", "application/json")
        .header("Authorization", "Bearer " + System.getenv("QASHIO_ACCESS_TOKEN"))
        .header("Content-Type", "application/json")
        .method("POST", HttpRequest.BodyPublishers.ofString(payload))
        .build();

    HttpResponse<String> response = HttpClient.newHttpClient()
        .send(request, HttpResponse.BodyHandlers.ofString());

    System.out.println(response.body());
  }
}

using System;
using System.Net.Http;
using System.Text;
using System.Threading.Tasks;

var client = new HttpClient();

var request = new HttpRequestMessage(new HttpMethod("POST"), "https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit");
request.Headers.Add("Accept", "application/json");
request.Headers.Add("Authorization", $"Bearer {Environment.GetEnvironmentVariable("QASHIO_ACCESS_TOKEN")}");

var payload = @"{
  ""spend_limit_active"": true,
  ""spend_limit_period"": ""MONTHLY"",
  ""spend_limit_max_amount"": 2000,
  ""spend_limit_frequency"": 10
}";
request.Content = new StringContent(payload, Encoding.UTF8, "application/json");

var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();

Console.WriteLine(await response.Content.ReadAsStringAsync());

import Foundation

var request = URLRequest(url: URL(string: "https://api.qashio.com/public/v1/core/cards/%3AcardId/update_velocity_limit")!)
request.httpMethod = "POST"
request.setValue("application/json", forHTTPHeaderField: "Accept")
let token = ProcessInfo.processInfo.environment["QASHIO_ACCESS_TOKEN"]!
request.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization")
request.setValue("application/json", forHTTPHeaderField: "Content-Type")
request.httpBody = """
{
  "spend_limit_active": true,
  "spend_limit_period": "MONTHLY",
  "spend_limit_max_amount": 2000,
  "spend_limit_frequency": 10
}
""".data(using: .utf8)

let (data, _) = try await URLSession.shared.data(for: request)
print(String(data: data, encoding: .utf8)!)

Response

{
  "status_code": 200,
  "success": true,
  "message": "Missing Bearer token",
  "data": {
    "card": {
      "id": 12143,
      "user_name": "John Doe",
      "company_name": "Qashio",
      "user_email": "john.doe@example.com",
      "status": "active",
      "display_status": "draft",
      "card_type": "Virtual",
      "nickname": "Qashio Card - 1",
      "card_number": "******",
      "allow_replace_card": true,
      "card_replaced": false,
      "velocity_period": "MONTHLY",
      "allow_atm": false,
      "return_card": "company_address",
      "shipping_card": "company_address",
      "terminated_at": "2026-08-06T07:30:44.941Z",
      "spend_restriction_type": "no_limit",
      "last_four": "4554",
      "limit_amount_notification": "250.00",
      "card_balance_running_low_notification": false,
      "allowed_countries_list_active": false,
      "foreign_entity": false,
      "atm_restricted_at": "2026-08-06T07:30:44.941Z",
      "issuer": "John Doe",
      "allowed_mccs_active": false,
      "spend_limit_active": true,
      "atm_limit_active": "sample",
      "auto_top_up_amount": 0,
      "auto_load_on_transaction_approval": false,
      "tokenization_status": "active",
      "account_type": "company_account",
      "account_id": 600,
      "currency": "AED",
      "show_pool_balance_to_cardholder": false,
      "is_manager": "false",
      "is_account_manager": false,
      "is_dept_manager": "false",
      "can_edit_all_time_limit": false,
      "can_reset_limit": false,
      "reset_summary": "Limits reset on the 1st of each month",
      "issued_at": "2026-08-06T07:30:44.941Z",
      "first_activated_at": "2026-08-06T07:30:44.941Z",
      "external_id": "UPc7ws3qre31j5uw",
      "replaced_by_card_external_id": "CAj2w5b3w9hoe0ga",
      "replaced_by_card_id": "CAj2w5b3w9hoe0ga",
      "card_usage_type": "MANUAL_CARD",
      "card_usage_type_amount": "0",
      "account_balance": "Empty",
      "shipment_tracking": "1Z999AA10123456784",
      "atm_transactions_limit_active": "false",
      "transactions_limit_active": false,
      "atm_transactions_limit": "5",
      "atm_limit": "2000.00",
      "department": "Finance",
      "location": "Dubai",
      "division": "Operations",
      "project": "Office Fit-out",
      "shipping_address": "Dubai Internet City, Dubai, AE",
      "return_address": "Dubai Internet City, Dubai, AE",
      "card_template": "virtual-standard",
      "erp_bank_account": "160104",
      "step_up_auth_delegated_user_profile": "UPc7ws3qre31j5uw",
      "created_at": "2026-08-06T07:30:44.941Z",
      "shipping_details": {
        "method": "COURIER",
        "return_address": {},
        "shipping_address": {}
      },
      "allowed_countries_list": [
        "string"
      ],
      "wallets_status": {
        "apple_pay": false,
        "google_pay": false,
        "samsung_pay": false
      },
      "transactions_limit": {
        "max_amount": 250,
        "min_amount": 0,
        "currency": "AED",
        "period": "MONTHLY",
        "frequency": 10,
        "transaction_scope": []
      },
      "spend_limit": {
        "id": 12143,
        "name": "Qashio",
        "active": true,
        "description": "CPnsya5pgz5qjdhq",
        "min_amount": 0,
        "max_amount": 250,
        "currency": "AED",
        "period": "MONTHLY",
        "limit_type": "PER_CARD",
        "frequency": 10,
        "num_of_days": "sample",
        "remote_id": "295",
        "external_id": "UPc7ws3qre31j5uw",
        "remaining_balance": 1000,
        "remaining_frequency": 1,
        "remote_sync": "pendingsync",
        "consumed_limit": 0,
        "consumed_frequency": 0,
        "transaction_scope": [],
        "remote_data": {
          "id": null,
          "name": null,
          "type": null,
          "group": null,
          "active": null,
          "amount": null,
          "period": null,
          "created": null,
          "currency": null,
          "modified": null,
          "frequency": null,
          "description": null,
          "effective_to": null,
          "program_level": null,
          "effective_from": null,
          "conditions": null,
          "per_transaction": null,
          "transaction_scope": null
        }
      },
      "expense_categories": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ],
      "merchants": [
        {
          "id": null,
          "name": null
        }
      ],
      "user_profile": {
        "department_name": "Finance",
        "first_name": "David Chen",
        "last_name": "Sara Ali",
        "company_name": "Qashio",
        "user_name": "John Doe",
        "system_role_name": "End User",
        "email": "john.doe@example.com",
        "user_email": "john.doe@example.com",
        "external_id": "UPc7ws3qre31j5uw",
        "user_id": 2711,
        "status": "active",
        "fullname": "John Doe",
        "employee_id": "EMP-1001",
        "department_id": 1692,
        "managing_departments": []
      },
      "card_product": {
        "id": 12143,
        "name": "Qashio",
        "status": "active",
        "description": "CPnsya5pgz5qjdhq",
        "pan_format_token": "default_pan_format_8g",
        "track_format_token": "default_track_format",
        "proxy_format_token": "default_proxy_format_8g",
        "remote_id": "295",
        "external_id": "UPc7ws3qre31j5uw",
        "notification_template_remote_id": "f5d9ce44-4ab7-4cec-b6c3-6c0a8d69e324",
        "auth_settings_allowed_list_status_active": false,
        "currency_settings": {
          "supported_currency": null,
          "settlement_currency": null,
          "priority": null,
          "status": null,
          "allow_loads": null,
          "allow_unloads": null,
          "allow_scheme_debit_txn": null,
          "allow_scheme_credit_txn": null,
          "allow_incoming_transfer": null,
          "allow_outgoing_transfer": null,
          "allow_incoming_sweeps": null,
          "allow_outgoing_sweeps": null,
          "allow_initial_load": null
        },
        "pin_settings": {
          "pin_type": null,
          "pin_length": null,
          "pin_retries": null
        }
      },
      "merchant_groups": [
        {
          "id": null,
          "name": null
        }
      ],
      "advanced_velocity_limits": [
        {
          "id": null,
          "title": null,
          "limit_by_type": null,
          "active": null,
          "amount": null,
          "currency": null,
          "period": null,
          "remote_linked": null,
          "remote_sync": null,
          "remaining_balance": null,
          "limit_type": null,
          "issuer": null,
          "external_id": null,
          "effective_from": null,
          "effective_to": null,
          "frequency": null,
          "remaining_frequency": null,
          "consumed_limit": null,
          "consumed_frequency": null,
          "expense_category_ids": null
        }
      ],
      "custom_segments": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ]
    }
  },
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}

{
  "status_code": 401,
  "success": false,
  "message": "Missing Bearer token",
  "data": {
    "card": {
      "id": 12143,
      "user_name": "John Doe",
      "company_name": "Qashio",
      "user_email": "john.doe@example.com",
      "status": "active",
      "display_status": "draft",
      "card_type": "Virtual",
      "nickname": "Qashio Card - 1",
      "card_number": "******",
      "allow_replace_card": true,
      "card_replaced": false,
      "velocity_period": "MONTHLY",
      "allow_atm": false,
      "return_card": "company_address",
      "shipping_card": "company_address",
      "terminated_at": "2026-08-06T07:30:44.941Z",
      "spend_restriction_type": "no_limit",
      "last_four": "4554",
      "limit_amount_notification": "250.00",
      "card_balance_running_low_notification": false,
      "allowed_countries_list_active": false,
      "foreign_entity": false,
      "atm_restricted_at": "2026-08-06T07:30:44.941Z",
      "issuer": "John Doe",
      "allowed_mccs_active": false,
      "spend_limit_active": true,
      "atm_limit_active": "sample",
      "auto_top_up_amount": 0,
      "auto_load_on_transaction_approval": false,
      "tokenization_status": "active",
      "account_type": "company_account",
      "account_id": 600,
      "currency": "AED",
      "show_pool_balance_to_cardholder": false,
      "is_manager": "false",
      "is_account_manager": false,
      "is_dept_manager": "false",
      "can_edit_all_time_limit": false,
      "can_reset_limit": false,
      "reset_summary": "Limits reset on the 1st of each month",
      "issued_at": "2026-08-06T07:30:44.941Z",
      "first_activated_at": "2026-08-06T07:30:44.941Z",
      "external_id": "UPc7ws3qre31j5uw",
      "replaced_by_card_external_id": "CAj2w5b3w9hoe0ga",
      "replaced_by_card_id": "CAj2w5b3w9hoe0ga",
      "card_usage_type": "MANUAL_CARD",
      "card_usage_type_amount": "0",
      "account_balance": "Empty",
      "shipment_tracking": "1Z999AA10123456784",
      "atm_transactions_limit_active": "false",
      "transactions_limit_active": false,
      "atm_transactions_limit": "5",
      "atm_limit": "2000.00",
      "department": "Finance",
      "location": "Dubai",
      "division": "Operations",
      "project": "Office Fit-out",
      "shipping_address": "Dubai Internet City, Dubai, AE",
      "return_address": "Dubai Internet City, Dubai, AE",
      "card_template": "virtual-standard",
      "erp_bank_account": "160104",
      "step_up_auth_delegated_user_profile": "UPc7ws3qre31j5uw",
      "created_at": "2026-08-06T07:30:44.941Z",
      "shipping_details": {
        "method": "COURIER",
        "return_address": {},
        "shipping_address": {}
      },
      "allowed_countries_list": [
        "string"
      ],
      "wallets_status": {
        "apple_pay": false,
        "google_pay": false,
        "samsung_pay": false
      },
      "transactions_limit": {
        "max_amount": 250,
        "min_amount": 0,
        "currency": "AED",
        "period": "MONTHLY",
        "frequency": 10,
        "transaction_scope": []
      },
      "spend_limit": {
        "id": 12143,
        "name": "Qashio",
        "active": true,
        "description": "CPnsya5pgz5qjdhq",
        "min_amount": 0,
        "max_amount": 250,
        "currency": "AED",
        "period": "MONTHLY",
        "limit_type": "PER_CARD",
        "frequency": 10,
        "num_of_days": "sample",
        "remote_id": "295",
        "external_id": "UPc7ws3qre31j5uw",
        "remaining_balance": 1000,
        "remaining_frequency": 1,
        "remote_sync": "pendingsync",
        "consumed_limit": 0,
        "consumed_frequency": 0,
        "transaction_scope": [],
        "remote_data": {
          "id": null,
          "name": null,
          "type": null,
          "group": null,
          "active": null,
          "amount": null,
          "period": null,
          "created": null,
          "currency": null,
          "modified": null,
          "frequency": null,
          "description": null,
          "effective_to": null,
          "program_level": null,
          "effective_from": null,
          "conditions": null,
          "per_transaction": null,
          "transaction_scope": null
        }
      },
      "expense_categories": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ],
      "merchants": [
        {
          "id": null,
          "name": null
        }
      ],
      "user_profile": {
        "department_name": "Finance",
        "first_name": "David Chen",
        "last_name": "Sara Ali",
        "company_name": "Qashio",
        "user_name": "John Doe",
        "system_role_name": "End User",
        "email": "john.doe@example.com",
        "user_email": "john.doe@example.com",
        "external_id": "UPc7ws3qre31j5uw",
        "user_id": 2711,
        "status": "active",
        "fullname": "John Doe",
        "employee_id": "EMP-1001",
        "department_id": 1692,
        "managing_departments": []
      },
      "card_product": {
        "id": 12143,
        "name": "Qashio",
        "status": "active",
        "description": "CPnsya5pgz5qjdhq",
        "pan_format_token": "default_pan_format_8g",
        "track_format_token": "default_track_format",
        "proxy_format_token": "default_proxy_format_8g",
        "remote_id": "295",
        "external_id": "UPc7ws3qre31j5uw",
        "notification_template_remote_id": "f5d9ce44-4ab7-4cec-b6c3-6c0a8d69e324",
        "auth_settings_allowed_list_status_active": false,
        "currency_settings": {
          "supported_currency": null,
          "settlement_currency": null,
          "priority": null,
          "status": null,
          "allow_loads": null,
          "allow_unloads": null,
          "allow_scheme_debit_txn": null,
          "allow_scheme_credit_txn": null,
          "allow_incoming_transfer": null,
          "allow_outgoing_transfer": null,
          "allow_incoming_sweeps": null,
          "allow_outgoing_sweeps": null,
          "allow_initial_load": null
        },
        "pin_settings": {
          "pin_type": null,
          "pin_length": null,
          "pin_retries": null
        }
      },
      "merchant_groups": [
        {
          "id": null,
          "name": null
        }
      ],
      "advanced_velocity_limits": [
        {
          "id": null,
          "title": null,
          "limit_by_type": null,
          "active": null,
          "amount": null,
          "currency": null,
          "period": null,
          "remote_linked": null,
          "remote_sync": null,
          "remaining_balance": null,
          "limit_type": null,
          "issuer": null,
          "external_id": null,
          "effective_from": null,
          "effective_to": null,
          "frequency": null,
          "remaining_frequency": null,
          "consumed_limit": null,
          "consumed_frequency": null,
          "expense_category_ids": null
        }
      ],
      "custom_segments": [
        {
          "id": null,
          "name": null,
          "label": null,
          "code": null,
          "erp_internal_id": null,
          "erp_code": null
        }
      ]
    }
  },
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}

{
  "status_code": 401,
  "success": false,
  "message": "Missing Bearer token",
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Missing Bearer token"
  },
  "errors": [
    {
      "code": "UNAUTHORIZED",
      "message": "Missing Bearer token",
      "field": "authorization"
    }
  ],
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}

{
  "status_code": 401,
  "success": false,
  "message": "Missing Bearer token",
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Missing Bearer token"
  },
  "errors": [
    {
      "code": "UNAUTHORIZED",
      "message": "Missing Bearer token",
      "field": "authorization"
    }
  ],
  "meta": {
    "request_id": "3adb2d16090c7b3bdbde3b326a814b30",
    "timestamp": "2026-09-09T10:07:52.143Z"
  }
}