List available card products
The card products your business can issue from, each with its capabilities (the valid values for capability at issue — e.g. APPLE_PAY, GOOGLE_PAY) and your entitlement status. Use this to discover product codes and card types instead of hardcoding them. You can only issue from products with entitlementStatus: Approved.
Authorizations
Your business API key (live_key_...). Issued on approval; managed in Dashboard → Settings → Developer.
Base64(HMAC-SHA256(publicApiKey, input)) over the raw request body (POST) or canonicalized
query string (signed GET). Also send X-Numero-Signature-Version: v2. Required on
money-movement / state-changing endpoints (marked 🔒).
The HMAC key is your Public Key as raw UTF-8 bytes — a SECRET despite the name, and a
different value from the X-Numero-Api-Key authentication header. Signing with the API key
will never produce a valid signature.