List Cards

curl --request GET \
  --url https://{defaultHost}/cards \
  --header 'Authorization: Bearer <token>'

{
  "data": [
    {
      "object": "card",
      "id": "<string>",
      "name": "<string>",
      "last4": "<string>",
      "expiration_month": "<string>",
      "expiration_year": "<string>",
      "user_id": "<string>",
      "spent_last_month": 123,
      "limit": {
        "amount": 123,
        "frequency": "<string>"
      },
      "billing": {
        "line1": "<string>",
        "line2": "<string>",
        "city": "<string>",
        "region": "<string>",
        "postal_code": "<string>",
        "country_code": "<string>"
      },
      "created_at": "2023-11-07T05:31:56Z",
      "canceled_at": "2023-11-07T05:31:56Z",
      "secrets": {
        "card_number": "<string>",
        "cvc": "<string>",
        "name_on_card": "<string>"
      }
    }
  ]
}

Cards

List Cards

Lists issued Whop virtual cards for an account or user, including pending invitation cards that have not been issued by the card provider yet. Pass exactly one of account_id (a biz_ identifier) or user_id (a user_ identifier). Non-owner team members only see cards assigned to them. Users without the payout:account:read scope can still list cards assigned to them (for example moderators or external cardholders). Use GET /cards/:card_id to retrieve a single card with its secrets.

GET

cards

List Cards

curl --request GET \
  --url https://{defaultHost}/cards \
  --header 'Authorization: Bearer <token>'

{
  "data": [
    {
      "object": "card",
      "id": "<string>",
      "name": "<string>",
      "last4": "<string>",
      "expiration_month": "<string>",
      "expiration_year": "<string>",
      "user_id": "<string>",
      "spent_last_month": 123,
      "limit": {
        "amount": 123,
        "frequency": "<string>"
      },
      "billing": {
        "line1": "<string>",
        "line2": "<string>",
        "city": "<string>",
        "region": "<string>",
        "postal_code": "<string>",
        "country_code": "<string>"
      },
      "created_at": "2023-11-07T05:31:56Z",
      "canceled_at": "2023-11-07T05:31:56Z",
      "secrets": {
        "card_number": "<string>",
        "cvc": "<string>",
        "name_on_card": "<string>"
      }
    }
  ]
}

Authorizations

Authorization

string

header

required

An account API key, account scoped JWT, app API key, or user OAuth token.

Headers

Api-Version-Date

string<date>

Pins the request to a dated API version.

Example:

"2026-07-01"

Query Parameters

account_id

string

The owning account ID (a biz_ identifier). Provide this or user_id.

user_id

string

The owning user ID (a user_ identifier). Provide this or account_id.

Response

cards listed for an assigned cardholder without the ledger scope

data

object[]

required

Show child attributes

Cards

Create Card

⌘I