# Infini Card API

Organization card APIs. All endpoints use the independent `/v2/cards` prefix.

Requests require [HMAC-SHA256 authentication](/docs/en/4-authorization). To use **Try it**, save Sandbox credentials on [API Credentials](/credentials), or enter Key and Secret under **Security -> HMAC**.

Version: 1.0.0

## Servers

Production
```
https://openapi.infini.money/v2/cards
```

Sandbox
```
https://openapi-sandbox.infini.money/v2/cards
```

## Security

### InfiniHmac

[object Object]

Type: http
Scheme: basic

## Download OpenAPI description

 - [Infini Card API](https://developer.infini.money/_bundle/@l10n/zh/apis/card.yaml)

## Card

 - [POST /apply](https://developer.infini.money/zh/apis/card/card/applycard.md): Requires `card.create` permission.
 - [GET /list](https://developer.infini.money/zh/apis/card/card/listcards.md): Requires `card.create` permission.
 - [GET /status](https://developer.infini.money/zh/apis/card/card/getcardstatus.md): Requires `card.create` permission.
 - [POST /status/batch](https://developer.infini.money/zh/apis/card/card/batchgetcardstatuses.md): Requires `card.create` permission. Accepts from 1 to 100 internal card IDs and returns statuses in request order.
 - [GET /transactions](https://developer.infini.money/zh/apis/card/card/getcardtransactions.md): Requires `card.create` permission. Returns merchant-facing card IDs and does not expose provider transaction IDs.
 - [POST /reveal](https://developer.infini.money/zh/apis/card/card/revealcard.md): Requires `card.reveal` permission. Returns sensitive PAN, CVV, and expiry data.
 - [POST /top-up](https://developer.infini.money/zh/apis/card/card/topupcard.md): Requires `card.create` permission.
 - [POST /redeem](https://developer.infini.money/zh/apis/card/card/redeemcard.md): Requires `card.create` permission.
 - [POST /delete](https://developer.infini.money/zh/apis/card/card/deletecard.md): Requires `card.create` permission. Starts asynchronous card deletion and balance settlement.
 - [POST /freeze](https://developer.infini.money/zh/apis/card/card/freezecard.md): Requires `card.create` permission.
 - [POST /unfreeze](https://developer.infini.money/zh/apis/card/card/unfreezecard.md): Requires `card.create` permission.