Skip to main content
Every method takes the identity (an idn_… id or its name) as its first argument. Amounts are integer micro-USD (1 USD = 1_000_000). Reads return a Card — never a credential.
revealCredentials is the one method that returns a CardCredentials, a separate type from Card so a credential can never be spread into a read result. It is audited and answers not_found for a card that is not active; keep the result out of logs.
Lifecycle and spend:
Every write draws a new Idempotency-Key, so a retried issue would buy a second card. Pass the first call’s key, with the same body, on the retry instead, cards.issue(identityId, body, { idempotencyKey }), and the retry returns the card the first call bought, debited once. A changed body under that key is refused idempotency_conflict, as is a retry sent while the first call is still running; retry that one again. See the Cards API for statuses, scopes and errors.