Update Card
Update, freeze, or cancel a card. Updating the card’s name, billing address, or limits requires both payout:account:update and company:balance:read; a card’s assigned holder may update their own card’s pin and frozen state with any user token.
Authorizations
An Account API key, account-scoped JWT, App API key, or user OAuth token. Prepend the key or token with Bearer, for example Bearer ***************************.
Headers
Pins the request to a dated API version.
"2026-08-10"
Path Parameters
Card ID to retrieve, prefixed icrd_.
Body
The owning account ID (a biz_ identifier). Provide this or user_id.
New billing address. Requires line1, city, region, postal_code, and country_code. On an invited card, passing billing alone (as the invited user) completes onboarding and starts card provisioning.
Pass true to permanently cancel the card. A canceled card cannot be uncanceled. Cannot be combined with other fields.
Pass true to freeze the card, false to unfreeze it. The assigned cardholder may freeze their own card without the payout:account:update scope.
A display name for the card.
New 4-digit PIN. Can only be set on a card assigned to the acting user, who may set it without the payout:account:update scope.
Pass true to remove the spending limit (make the card unlimited).
Spending limit amount, in dollars.
The window the spend limit applies to.
daily, weekly, monthly, one_time Per-transaction limit amount, in dollars.
The owning user ID (a user_ identifier). Provide this or account_id.
Response
invited card onboarding completed: card provisioning started
The billing address.
When the card was canceled.
When the card was created.
Card expiration month.
Card expiration year.
Card ID, prefixed icrd_.
Last four digits of the card number. null for pending invitation cards.
The spending limit configuration.
Card display name.
card Total spend in the last 30 days, in cents.
The card status. denied means the issuer declined the cardholder, so the card will never be issued.
null, active, frozen, canceled, invited, denied The card type.
null, virtual, physical Cardholder user ID, prefixed user_, when assigned.
Sensitive card details. Present only on GET /cards/:card_id for active cards; null when the card is inactive or details cannot be retrieved.

