Issues a virtual card (VCC) to one of your business's users, with a spending limit you set.

Send the user's email and the card's amount limit. The user must already exist on your business and have a verified phone number. The amount must be less than the larger of your Payments available balance and your Debit card account balance. If your Debit card account balance covers it, the amount moves from the Debit card account to the card; otherwise it's taken from your Payments balance (in AED). If you omit transactions_limit, the card allows 1 transaction.

If you set verification_email, opening the card's url requires a one-time code sent to that address. The name printed on the card (card_holder_name) is always your business's operating name, cut to 30 characters.

The response includes the card id, card holder name, expiry date, and a url the card holder can open to see the card details. To get the card number and CVV through the API, use Reveal virtual corporate card details.

🚧

Available on request

Virtual cards must be enabled for your business; until then this endpoint returns 403. Email [email protected] to get started.

❗

Always send an Idempotency-Key

If you repeat an identical request without an Idempotency-Key, the call returns the same card with 201 but moves the amount from your balance again. The card's limit doesn't change. Send an Idempotency-Key and reuse it when you retry.

You can issue up to 100 cards per day. Validation problems, such as an unknown user or an amount at or above that limit, return 422.