# Infini Card API

Organization card APIs. All endpoints use the independent `/v2/cards` prefix.

Requests require [HMAC-SHA256 authentication](/docs/en/4-authorization). To use **Try it**, save Sandbox credentials on [API Credentials](/credentials), or enter Key and Secret under **Security -> HMAC**.

Version: 1.0.0

## Servers

Production
```
https://openapi.infini.money/v2/cards
```

Sandbox
```
https://openapi-sandbox.infini.money/v2/cards
```

## Security

### InfiniHmac

Sandbox API **Key** (keyId) and **Secret** from the Infini dashboard.

Type: http
Scheme: basic

## Download OpenAPI description

[Infini Card API](https://developer.infini.money/_bundle/@l10n/zh/apis/card.yaml)

## Card

Organization card management

### Apply for organization card

 - [POST /apply](https://developer.infini.money/zh/apis/card/card/applycard.md): Requires card.create permission.

### List organization cards

 - [GET /list](https://developer.infini.money/zh/apis/card/card/listcards.md): Requires card.create permission.

### Get organization card status by id

 - [GET /status](https://developer.infini.money/zh/apis/card/card/getcardstatus.md): Requires card.create permission.

### Batch get organization card statuses

 - [POST /status/batch](https://developer.infini.money/zh/apis/card/card/batchgetcardstatuses.md): Requires card.create permission. Accepts from 1 to 100 internal card IDs and returns statuses in request order.

### Get organization card transactions

 - [GET /transactions](https://developer.infini.money/zh/apis/card/card/getcardtransactions.md): Requires card.create permission. Returns merchant-facing card IDs and does not expose provider transaction IDs.

### Reveal organization card

 - [POST /reveal](https://developer.infini.money/zh/apis/card/card/revealcard.md): Requires card.reveal permission. Returns sensitive PAN, CVV, and expiry data.

### Top up organization card

 - [POST /top-up](https://developer.infini.money/zh/apis/card/card/topupcard.md): Requires card.create permission.

### Redeem funds from organization card

 - [POST /redeem](https://developer.infini.money/zh/apis/card/card/redeemcard.md): Requires card.create permission.

### Freeze organization card

 - [POST /freeze](https://developer.infini.money/zh/apis/card/card/freezecard.md): Requires card.create permission.

### Unfreeze organization card

 - [POST /unfreeze](https://developer.infini.money/zh/apis/card/card/unfreezecard.md): Requires card.create permission.