Create Card
curl --request POST \
--url https://api-sandbox.uqpaytech.com/api/v1/issuing/cards \
--header 'Content-Type: application/json' \
--header 'x-auth-token: <api-key>' \
--header 'x-idempotency-key: <x-idempotency-key>' \
--data '
{
"card_currency": "USD",
"card_product_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_limit": 2100.02,
"name_on_card": "MARSHALL HU",
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_art_id": "01KD52BKQWDMFF63R1NNQN7A79",
"spending_controls": [
{
"amount": "100.03",
"interval": "PER_TRANSACTION"
}
],
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": null,
"blocked_mcc": [
"5999",
"6011"
],
"allowed_merchants": [
"10000668",
"10000418"
],
"blocked_merchants": [
"10000668",
"10000418"
]
},
"metadata": {
"key1": "value1",
"key2": "value2"
},
"usage_type": "NORMAL",
"auto_cancel_trigger": "ON_AUTH",
"expiry_at": "2026-03-19T18:46:43+08:00",
"cardholder_required_fields": {
"email": "[email protected]",
"first_name": "Emily",
"last_name": "Toy",
"country_code": "SG",
"phone_number": "86683306",
"date_of_birth": "1990-01-01",
"gender": "MALE",
"nationality": "SG"
}
}
'import requests
url = "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards"
payload = {
"card_currency": "USD",
"card_product_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_limit": 2100.02,
"name_on_card": "MARSHALL HU",
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_art_id": "01KD52BKQWDMFF63R1NNQN7A79",
"spending_controls": [
{
"amount": "100.03",
"interval": "PER_TRANSACTION"
}
],
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": None,
"blocked_mcc": ["5999", "6011"],
"allowed_merchants": ["10000668", "10000418"],
"blocked_merchants": ["10000668", "10000418"]
},
"metadata": {
"key1": "value1",
"key2": "value2"
},
"usage_type": "NORMAL",
"auto_cancel_trigger": "ON_AUTH",
"expiry_at": "2026-03-19T18:46:43+08:00",
"cardholder_required_fields": {
"email": "[email protected]",
"first_name": "Emily",
"last_name": "Toy",
"country_code": "SG",
"phone_number": "86683306",
"date_of_birth": "1990-01-01",
"gender": "MALE",
"nationality": "SG"
}
}
headers = {
"x-idempotency-key": "<x-idempotency-key>",
"x-auth-token": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'x-idempotency-key': '<x-idempotency-key>',
'x-auth-token': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
card_currency: 'USD',
card_product_id: '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
card_limit: 2100.02,
name_on_card: 'MARSHALL HU',
cardholder_id: '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
card_art_id: '01KD52BKQWDMFF63R1NNQN7A79',
spending_controls: [{amount: '100.03', interval: 'PER_TRANSACTION'}],
risk_controls: {
enable_3ds: 'Y',
allow_3ds_transactions: 'Y',
allowed_mcc: null,
blocked_mcc: ['5999', '6011'],
allowed_merchants: ['10000668', '10000418'],
blocked_merchants: ['10000668', '10000418']
},
metadata: {key1: 'value1', key2: 'value2'},
usage_type: 'NORMAL',
auto_cancel_trigger: 'ON_AUTH',
expiry_at: '2026-03-19T18:46:43+08:00',
cardholder_required_fields: {
email: '[email protected]',
first_name: 'Emily',
last_name: 'Toy',
country_code: 'SG',
phone_number: '86683306',
date_of_birth: '1990-01-01',
gender: 'MALE',
nationality: 'SG'
}
})
};
fetch('https://api-sandbox.uqpaytech.com/api/v1/issuing/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'card_currency' => 'USD',
'card_product_id' => '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
'card_limit' => 2100.02,
'name_on_card' => 'MARSHALL HU',
'cardholder_id' => '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
'card_art_id' => '01KD52BKQWDMFF63R1NNQN7A79',
'spending_controls' => [
[
'amount' => '100.03',
'interval' => 'PER_TRANSACTION'
]
],
'risk_controls' => [
'enable_3ds' => 'Y',
'allow_3ds_transactions' => 'Y',
'allowed_mcc' => null,
'blocked_mcc' => [
'5999',
'6011'
],
'allowed_merchants' => [
'10000668',
'10000418'
],
'blocked_merchants' => [
'10000668',
'10000418'
]
],
'metadata' => [
'key1' => 'value1',
'key2' => 'value2'
],
'usage_type' => 'NORMAL',
'auto_cancel_trigger' => 'ON_AUTH',
'expiry_at' => '2026-03-19T18:46:43+08:00',
'cardholder_required_fields' => [
'email' => '[email protected]',
'first_name' => 'Emily',
'last_name' => 'Toy',
'country_code' => 'SG',
'phone_number' => '86683306',
'date_of_birth' => '1990-01-01',
'gender' => 'MALE',
'nationality' => 'SG'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-auth-token: <api-key>",
"x-idempotency-key: <x-idempotency-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards"
payload := strings.NewReader("{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-idempotency-key", "<x-idempotency-key>")
req.Header.Add("x-auth-token", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api-sandbox.uqpaytech.com/api/v1/issuing/cards")
.header("x-idempotency-key", "<x-idempotency-key>")
.header("x-auth-token", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-sandbox.uqpaytech.com/api/v1/issuing/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-idempotency-key"] = '<x-idempotency-key>'
request["x-auth-token"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}"
response = http.request(request)
puts response.read_body{
"card_id": "c0cef051-29c5-4796-b86a-cd5b684bfad7",
"card_order_id": "c0cef051-29c5-4796-b86a-cd5ee34bfad7",
"create_time": "2024-03-21T17:17:32+08:00",
"card_status": "ACTIVE",
"order_status": "PENDING",
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": null,
"blocked_mcc": [
"5999",
"6011"
],
"allowed_merchants": [
"10000668",
"10000418"
],
"blocked_merchants": [
"10000668",
"10000418"
]
},
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"cardholder_created": true,
"cardholder_status": "SUCCESS",
"verification_status": "UNDER_REVIEW",
"kyc_method": "SUMSUB_REDIRECT",
"idv_verification_url": "https://in.sumsub.com/websdk/p/sbx_4dwsbDuDbpJsMgou",
"idv_url_expires_at": "2026-04-25T17:26:50+08:00",
"message": "<string>"
}Card Lifecycle
Create Card
Creates a card and issues it to a cardholder.
Two calling modes are supported:
- Traditional mode — pass
cardholder_idto issue a card to an existing cardholder. Optionally passcardholder_required_fieldsto supplement missing cardholder data required by the card product. - One-step mode — omit
cardholder_idand pass a completecardholder_required_fieldsblock. The system creates the cardholder and the card in a single request. See One-Step Card Issuance for the full integration flow.
POST
/
v1
/
issuing
/
cards
Create Card
curl --request POST \
--url https://api-sandbox.uqpaytech.com/api/v1/issuing/cards \
--header 'Content-Type: application/json' \
--header 'x-auth-token: <api-key>' \
--header 'x-idempotency-key: <x-idempotency-key>' \
--data '
{
"card_currency": "USD",
"card_product_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_limit": 2100.02,
"name_on_card": "MARSHALL HU",
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_art_id": "01KD52BKQWDMFF63R1NNQN7A79",
"spending_controls": [
{
"amount": "100.03",
"interval": "PER_TRANSACTION"
}
],
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": null,
"blocked_mcc": [
"5999",
"6011"
],
"allowed_merchants": [
"10000668",
"10000418"
],
"blocked_merchants": [
"10000668",
"10000418"
]
},
"metadata": {
"key1": "value1",
"key2": "value2"
},
"usage_type": "NORMAL",
"auto_cancel_trigger": "ON_AUTH",
"expiry_at": "2026-03-19T18:46:43+08:00",
"cardholder_required_fields": {
"email": "[email protected]",
"first_name": "Emily",
"last_name": "Toy",
"country_code": "SG",
"phone_number": "86683306",
"date_of_birth": "1990-01-01",
"gender": "MALE",
"nationality": "SG"
}
}
'import requests
url = "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards"
payload = {
"card_currency": "USD",
"card_product_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_limit": 2100.02,
"name_on_card": "MARSHALL HU",
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"card_art_id": "01KD52BKQWDMFF63R1NNQN7A79",
"spending_controls": [
{
"amount": "100.03",
"interval": "PER_TRANSACTION"
}
],
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": None,
"blocked_mcc": ["5999", "6011"],
"allowed_merchants": ["10000668", "10000418"],
"blocked_merchants": ["10000668", "10000418"]
},
"metadata": {
"key1": "value1",
"key2": "value2"
},
"usage_type": "NORMAL",
"auto_cancel_trigger": "ON_AUTH",
"expiry_at": "2026-03-19T18:46:43+08:00",
"cardholder_required_fields": {
"email": "[email protected]",
"first_name": "Emily",
"last_name": "Toy",
"country_code": "SG",
"phone_number": "86683306",
"date_of_birth": "1990-01-01",
"gender": "MALE",
"nationality": "SG"
}
}
headers = {
"x-idempotency-key": "<x-idempotency-key>",
"x-auth-token": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'x-idempotency-key': '<x-idempotency-key>',
'x-auth-token': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
card_currency: 'USD',
card_product_id: '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
card_limit: 2100.02,
name_on_card: 'MARSHALL HU',
cardholder_id: '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
card_art_id: '01KD52BKQWDMFF63R1NNQN7A79',
spending_controls: [{amount: '100.03', interval: 'PER_TRANSACTION'}],
risk_controls: {
enable_3ds: 'Y',
allow_3ds_transactions: 'Y',
allowed_mcc: null,
blocked_mcc: ['5999', '6011'],
allowed_merchants: ['10000668', '10000418'],
blocked_merchants: ['10000668', '10000418']
},
metadata: {key1: 'value1', key2: 'value2'},
usage_type: 'NORMAL',
auto_cancel_trigger: 'ON_AUTH',
expiry_at: '2026-03-19T18:46:43+08:00',
cardholder_required_fields: {
email: '[email protected]',
first_name: 'Emily',
last_name: 'Toy',
country_code: 'SG',
phone_number: '86683306',
date_of_birth: '1990-01-01',
gender: 'MALE',
nationality: 'SG'
}
})
};
fetch('https://api-sandbox.uqpaytech.com/api/v1/issuing/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'card_currency' => 'USD',
'card_product_id' => '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
'card_limit' => 2100.02,
'name_on_card' => 'MARSHALL HU',
'cardholder_id' => '7c4ff2cd-1bf6-4aaa-bf16-266771425011',
'card_art_id' => '01KD52BKQWDMFF63R1NNQN7A79',
'spending_controls' => [
[
'amount' => '100.03',
'interval' => 'PER_TRANSACTION'
]
],
'risk_controls' => [
'enable_3ds' => 'Y',
'allow_3ds_transactions' => 'Y',
'allowed_mcc' => null,
'blocked_mcc' => [
'5999',
'6011'
],
'allowed_merchants' => [
'10000668',
'10000418'
],
'blocked_merchants' => [
'10000668',
'10000418'
]
],
'metadata' => [
'key1' => 'value1',
'key2' => 'value2'
],
'usage_type' => 'NORMAL',
'auto_cancel_trigger' => 'ON_AUTH',
'expiry_at' => '2026-03-19T18:46:43+08:00',
'cardholder_required_fields' => [
'email' => '[email protected]',
'first_name' => 'Emily',
'last_name' => 'Toy',
'country_code' => 'SG',
'phone_number' => '86683306',
'date_of_birth' => '1990-01-01',
'gender' => 'MALE',
'nationality' => 'SG'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-auth-token: <api-key>",
"x-idempotency-key: <x-idempotency-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api-sandbox.uqpaytech.com/api/v1/issuing/cards"
payload := strings.NewReader("{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-idempotency-key", "<x-idempotency-key>")
req.Header.Add("x-auth-token", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api-sandbox.uqpaytech.com/api/v1/issuing/cards")
.header("x-idempotency-key", "<x-idempotency-key>")
.header("x-auth-token", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-sandbox.uqpaytech.com/api/v1/issuing/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-idempotency-key"] = '<x-idempotency-key>'
request["x-auth-token"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"card_currency\": \"USD\",\n \"card_product_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_limit\": 2100.02,\n \"name_on_card\": \"MARSHALL HU\",\n \"cardholder_id\": \"7c4ff2cd-1bf6-4aaa-bf16-266771425011\",\n \"card_art_id\": \"01KD52BKQWDMFF63R1NNQN7A79\",\n \"spending_controls\": [\n {\n \"amount\": \"100.03\",\n \"interval\": \"PER_TRANSACTION\"\n }\n ],\n \"risk_controls\": {\n \"enable_3ds\": \"Y\",\n \"allow_3ds_transactions\": \"Y\",\n \"allowed_mcc\": null,\n \"blocked_mcc\": [\n \"5999\",\n \"6011\"\n ],\n \"allowed_merchants\": [\n \"10000668\",\n \"10000418\"\n ],\n \"blocked_merchants\": [\n \"10000668\",\n \"10000418\"\n ]\n },\n \"metadata\": {\n \"key1\": \"value1\",\n \"key2\": \"value2\"\n },\n \"usage_type\": \"NORMAL\",\n \"auto_cancel_trigger\": \"ON_AUTH\",\n \"expiry_at\": \"2026-03-19T18:46:43+08:00\",\n \"cardholder_required_fields\": {\n \"email\": \"[email protected]\",\n \"first_name\": \"Emily\",\n \"last_name\": \"Toy\",\n \"country_code\": \"SG\",\n \"phone_number\": \"86683306\",\n \"date_of_birth\": \"1990-01-01\",\n \"gender\": \"MALE\",\n \"nationality\": \"SG\"\n }\n}"
response = http.request(request)
puts response.read_body{
"card_id": "c0cef051-29c5-4796-b86a-cd5b684bfad7",
"card_order_id": "c0cef051-29c5-4796-b86a-cd5ee34bfad7",
"create_time": "2024-03-21T17:17:32+08:00",
"card_status": "ACTIVE",
"order_status": "PENDING",
"risk_controls": {
"enable_3ds": "Y",
"allow_3ds_transactions": "Y",
"allowed_mcc": null,
"blocked_mcc": [
"5999",
"6011"
],
"allowed_merchants": [
"10000668",
"10000418"
],
"blocked_merchants": [
"10000668",
"10000418"
]
},
"cardholder_id": "7c4ff2cd-1bf6-4aaa-bf16-266771425011",
"cardholder_created": true,
"cardholder_status": "SUCCESS",
"verification_status": "UNDER_REVIEW",
"kyc_method": "SUMSUB_REDIRECT",
"idv_verification_url": "https://in.sumsub.com/websdk/p/sbx_4dwsbDuDbpJsMgou",
"idv_url_expires_at": "2026-04-25T17:26:50+08:00",
"message": "<string>"
}Authorizations
The API token for login provided by UQPAY.
Headers
Specifies the sub-account on whose behalf the request is made. This should be set to the account_id, which can be retrieved via the List Connected Accounts endpoint. If omitted or empty, the request is executed using the master account.
More information at Connected Accounts.
A unique identifier (UUID) used to maintain operation idempotency, ensuring that repeated executions of the same operation do not result in unintended effects or duplication. It helps preserve data consistency in the face of network errors, retries, or failures.
Body
application/json
The card currency.
Available options:
SGD, USD, XUSD Example:
"USD"
The card product's unique identifier.
Example:
"7c4ff2cd-1bf6-4aaa-bf16-266771425011"
The total credit limit assigned to the card, currency refer to card_currency. This is not a cumulative balance, but a fixed credit limit similar to that of a credit card.
Field behavior by card product:
- Business Mastercard and Personal Visa:
card_limitis required during card creation and must be greater than or equal to 0.01. - Business Visa:
card_limitis optional.- If omitted, the system defaults
card_limitto 0. - If provided, the value must be greater than or equal to 0, with up to two decimal places. Negative values are not allowed.
- If omitted, the system defaults
See Card products for the full capability matrix.
Required range:
x >= 0Example:
2100.02
The cardholder name shown on the card. When the Secure Iframe renders the cardholder name (cardholder_name=true), this value is used as the default; if omitted, the iframe falls back to first_name + last_name from the cardholder record.
Maximum string length:
26Example:
"MARSHALL HU"
The unique identifier of the cardholder to issue the card to.
Either cardholder_id or a complete cardholder_required_fields block must be provided. When cardholder_id is omitted, the system creates a new cardholder inline using the values in cardholder_required_fields. See One-Step Card Issuance.
Example:
"7c4ff2cd-1bf6-4aaa-bf16-266771425011"
Card art to apply to the new card. When omitted, the card uses the default card art for the issuing account — see Card art for how the default is resolved.
The value must be a card art available to the issuing account. List available card arts via List card arts.
Example:
"01KD52BKQWDMFF63R1NNQN7A79"
Rules that control spending for this card.
Show child attributes
Show child attributes
User-customized risk control settings.
Supported configurations depend on the card product. See Card products for the capability matrix.
Show child attributes
Show child attributes
Any key-value object. Max length = 3200 bytes. This must be valid JSON data.
Show child attributes
Show child attributes
Example:
{ "key1": "value1", "key2": "value2" }
Indicates whether the card is a standard reusable card or a one-time-use card.
NORMAL- A standard card that can be used for multiple transactions.ONE_TIME- A one-time-use card that is automatically cancelled after the first transaction event defined byauto_cancel_trigger.
Available options:
NORMAL, ONE_TIME Example:
"NORMAL"
Defines the transaction event that triggers automatic cancellation of a ONE_TIME card. Required when usage_type is ONE_TIME.
ON_AUTH- The card is cancelled immediately after the first authorization is approved. Subsequent authorization requests on the same card will be declined.ON_CAPTURE- The card is cancelled after the first transaction's capture (settlement) succeeds, allowing a full authorization and capture cycle to complete.
Available options:
ON_AUTH, ON_CAPTURE Example:
"ON_AUTH"
The absolute expiry date and time of the card. If the card has not been cancelled by a first-transaction event before this time, it is automatically cancelled and any unused balance is released.
Example:
"2026-03-19T18:46:43+08:00"
Cardholder information supplied at card creation time.
- In traditional mode (
cardholder_idprovided): optional; fields supplied here are used to supplement missing cardholder data before the card is issued. - In one-step mode (
cardholder_idomitted): required and must contain a complete set of cardholder-creation fields (email,first_name,last_name,country_code,phone_number). The system creates the cardholder inline.
Show child attributes
Show child attributes
Response
200 - application/json
Card creation successfully.
Unique identifier for the card.
Example:
"c0cef051-29c5-4796-b86a-cd5b684bfad7"
ID of the card order.
Example:
"c0cef051-29c5-4796-b86a-cd5ee34bfad7"
Create time at which the object was created.
Example:
"2024-03-21T17:17:32+08:00"
Card status enum. See the Card lifecycle and statuses guide for more information.
PENDING: The request to create the card has been received and is under review.ACTIVE: The request to create the card was successful and the card is ready to use.FROZEN: All incoming authorization requests will be declined. The card can be reactivated to accept new authorizations.BLOCKED: The card was blocked by UQPAY due to suspicious activity.PRE_CANCEL: The card is scheduled for cancellation and is in a waiting period during which all incoming authorization requests are declined. It transitions toCANCELLEDwhen the waiting period ends.CANCELLED: The card cannot be reactivated from this state, all incoming authorization requests will be permanently declined.LOST: The card has been reported as lost to UQPAY.STOLEN: The card has been reported as stolen to UQPAY.FAILED: The request to create a card using Create Card failed.
Available options:
PENDING, ACTIVE, FROZEN, BLOCKED, PRE_CANCEL, CANCELLED, LOST, STOLEN, FAILED Example:
"ACTIVE"
This field will contain the status of the request after processing.
PENDING-The initial status of the order request.PROCESSING- If this status shall be subject to webhooks notification.SUCCESS- The final status of the order request is successful.FAILED- The final status of the order request is failed.
Available options:
PENDING, PROCESSING, SUCCESS, FAILED The risk control settings applied to the card. Echoed from the request, or populated from the card product defaults when not supplied.
Show child attributes
Show child attributes
The cardholder's unique identifier. In one-step mode, this is the newly-created cardholder — save this value to reference the cardholder later.
Example:
"7c4ff2cd-1bf6-4aaa-bf16-266771425011"
true when a new cardholder was created inline as part of this request. Omitted otherwise.
Example:
true
The cardholder's status.
Available options:
FAILED, PENDING, SUCCESS, INCOMPLETE The KYC verification outcome for the cardholder. Returned when supplement fields triggered KYC processing.
Available options:
VERIFIED, UNDER_REVIEW, ACTION_REQUIRED Example:
"UNDER_REVIEW"
Echoes the KYC verification method that was applied. Returned when cardholder_required_fields.kyc_verification was supplied in the request.
THIRD_PARTY- Merchant-supplied KYC proof was used.SUMSUB_REDIRECT- The cardholder is redirected to Sumsub to complete IDV.
Available options:
THIRD_PARTY, SUMSUB_REDIRECT Example:
"SUMSUB_REDIRECT"
The IDV verification URL the cardholder must visit to complete identity verification. Returned only when kyc_method is SUMSUB_REDIRECT.
Example:
"https://in.sumsub.com/websdk/p/sbx_4dwsbDuDbpJsMgou"
The expiry time of idv_verification_url. Returned only when kyc_method is SUMSUB_REDIRECT.
Example:
"2026-04-25T17:26:50+08:00"
Informational message when card creation is blocked or pending due to KYC requirements (e.g., insufficient KYC, missing fields).