# Infini Card API

Organization card APIs. All endpoints use the independent `/v2/cards` prefix.
Requests require Ed25519 v2 authentication. See [Authentication](/docs/en/4-authorization). Online Try it is disabled; sign locally with your private key. Confirm v2 availability for your environment before switching production traffic.

Version: 2.0.0

## Servers

Production
```
https://openapi.infini.money/v2/cards
```

Sandbox
```
https://openapi-sandbox.infini.money/v2/cards
```

## Security

### Ed25519

Use `Ed25519 signature="BASE64_SIGNATURE"`; also send X-API-Key-ID, X-API-Timestamp, X-API-Nonce and Digest. Sign locally; never enter your private key here.

Type: apiKey
In: header
Name: Authorization

## Download OpenAPI description

 - [Infini Card API](https://developer.infini.money/_bundle/apis/card.yaml)

## Card

 - [POST /apply](https://developer.infini.money/apis/card/card/applycard.md): Requires `card.create` permission.
 - [GET /list](https://developer.infini.money/apis/card/card/listcards.md): Requires `card.create` permission.
 - [GET /status](https://developer.infini.money/apis/card/card/getcardstatus.md): Requires `card.create` permission.
 - [POST /status/batch](https://developer.infini.money/apis/card/card/batchgetcardstatuses.md): Requires `card.create` permission. Accepts from 1 to 100 internal card IDs and returns statuses in request order.
 - [GET /transactions](https://developer.infini.money/apis/card/card/getcardtransactions.md): Requires `card.create` permission. Returns merchant-facing card IDs and does not expose provider transaction IDs.
 - [POST /reveal](https://developer.infini.money/apis/card/card/revealcard.md): Requires `card.reveal` permission. Returns sensitive PAN, CVV, and expiry data.
 - [POST /top-up](https://developer.infini.money/apis/card/card/topupcard.md): Requires `card.create` permission.
 - [POST /redeem](https://developer.infini.money/apis/card/card/redeemcard.md): Requires `card.create` permission.
 - [POST /delete](https://developer.infini.money/apis/card/card/deletecard.md): Requires `card.create` permission. Starts asynchronous card deletion and balance settlement.
 - [POST /freeze](https://developer.infini.money/apis/card/card/freezecard.md): Requires `card.create` permission.
 - [POST /unfreeze](https://developer.infini.money/apis/card/card/unfreezecard.md): Requires `card.create` permission.