Issue Card to Cardholder

Missing identity evidence or malformed document URLs return HTTP 400 with error.code: "validation_error" and the affected field in error.param before funding reservation. Existing accepted cardholder evidence is reused; no redundant upload is required. Test keys follow the same validation. See the issuance validation example. Issue a card to an existing cardholder — their stored KYC is reused, so you don’t resend it. Choose the card type with capability.

Card endpoints use the same base URL and API key as the rest of the API, and are signature-gated: send X-Numero-Signature and X-Numero-Signature-Version: v2 as well. See Request signing.

Endpoint

POST /api/v1/business/cardholders/{customerId}/cards

Signature required: Yes

Headers

Header	Required	Description
`X-Numero-Api-Key`	Yes	Your API key
`X-Numero-Signature`	Yes	Base64 HMAC-SHA256 over the exact raw request body (POST) or the canonicalised query string (GET), keyed with your Public Key. See Request signing.
`X-Numero-Signature-Version`	Yes	Always `v2`.

Path parameters

Parameter	Type	Required	Description
`customerId`	string	Yes	The cardholder id

Request body

Field	Type	Required	Description
`productCode`	string	Yes	Card product to issue from
`capability`	string	No	`APPLE_PAY` · `GOOGLE_PAY`. Omit for the same wallet-enabled card — it is the only type issued.
`initialBalance`	number	Yes	Total activation debit from the USD CARD wallet. The current minimum is USD 10.00, including mandatory opening card funding.
`label`	string	No	Friendly card name

Request example

A minimum of USD 10 is required to activate a card, including USD 5 mandatory initial funding available to spend. Fund the merchant’s USD CARD wallet first.

curl -X POST "https://api.usenumero.com/numeroaccount/api/v1/business/cardholders/NCUS9953596C2B7F45/cards" \
  -H "X-Numero-Api-Key: your_api_key" \
  -H "X-Numero-Signature: $SIGNATURE" \
  -H "X-Numero-Signature-Version: v2" \
  -H "Content-Type: application/json" \
  -d '{
    "productCode": "USD_APPLE_PAY",
    "capability": "APPLE_PAY",
    "initialBalance": 25
  }'

Response

HTTP 200 may contain a pending operation, not an issued card. Preserve operationReference, check operationStatus and read the card before retrying. See issuance accounting and safe retries.

{
  "data": {
    "cardReference": "NCRD24AD18BEBD474A",
    "customerId": "NCUS9953596C2B7F45",
    "label": "Ads spend",
    "brand": "Visa",
    "firstSix": "428852",
    "lastFour": "6353",
    "expiryMonth": "06",
    "expiryYear": "2029",
    "currency": "USD",
    "balance": 22.0,
    "status": "Active",
    "isPhysical": false,
    "dailyLimit": 5000,
    "perTransactionLimit": 1000,
    "issuedAt": "2026-06-16T12:00:00Z",
    "capabilities": [
      "USD",
      "APPLE_PAY",
      "GOOGLE_PAY"
    ]
  },
  "error": null,
  "meta": {
    "request_id": "req_365123ebc73323f1482508560ce6400e",
    "pagination": null
  }
}

Getting Started

Transfers & Payouts

Collections (Virtual Accounts)

Wallet-as-a-Service

Customers

Invoices

Cards

Cardholders

Balance & Transactions

Value Added Services

Credit

Verification / KYC

Webhooks

Issue Card to Cardholder

Endpoint

Headers

Path parameters

Request body

Request example

Response

​Endpoint

​Headers

​Path parameters

​Request body

​Request example

​Response

Endpoint

Headers

Path parameters

Request body

Request example

Response