Skip to main content
GET
/
cards
List cards
curl --request GET \
  --url https://api.fyatu.com/api/v3.20/cards \
  --header 'Authorization: Bearer <token>'
{
  "success": true,
  "status": 200,
  "message": "Cards retrieved",
  "data": [
    {
      "id": "crd_01HXYZ5555ABCDEF1111",
      "cardholderId": "chl_01HXYZ1234ABCDEF5678",
      "productId": "prd_01HXYZ1111ABCDEF0001",
      "status": "ACTIVE",
      "cardType": "VIRTUAL",
      "cardBrand": "VISA",
      "maskedPan": "445123******4123",
      "last4": "4123",
      "expirationDate": "06/2030",
      "createdAt": "2026-05-26T10:00:00Z"
    }
  ],
  "pagination": {
    "total": 3,
    "limit": 20,
    "offset": 0,
    "hasMore": false
  },
  "meta": {
    "requestId": "req_01HXY123456ABCDEF",
    "platform": "Fyatu CaaS",
    "timestamp": "2026-05-26T10:00:00Z"
  }
}

​
Overview

Returns a paginated list of cards issued by your business, scoped to the API key’s environment. Supports filtering by cardholder and status.
The environment is always taken from your API key — there is no environment query parameter. A SANDBOX key only returns sandbox cards; a LIVE key only returns live cards.

​
Query Parameters

ParameterTypeDefaultDescription
limitinteger20Results per page (max 100)
offsetinteger0Number of records to skip
cardholderIdstring—Filter cards for a specific cardholder
statusstring—Filter by ACTIVE, FROZEN, or TERMINATED

​
Example

curl -G https://api.fyatu.com/api/v3.20/cards \
  -H "Authorization: Bearer $FYATU_API_KEY" \
  -d cardholderId=chl_01HXYZ1234ABCDEF5678 \
  -d status=ACTIVE \
  -d limit=20

​
Success Response (200)

{
  "success": true,
  "status":  200,
  "message": "Cards retrieved",
  "data": [
    {
      "id":             "crd_01HXYZ5555ABCDEF1111",
      "cardholderId":   "chl_01HXYZ1234ABCDEF5678",
      "productId":      "prd_01HXYZ1111ABCDEF0001",
      "status":         "ACTIVE",
      "cardType":       "VIRTUAL",
      "cardBrand":      "VISA",
      "maskedPan":      "445123******4123",
      "last4":          "4123",
      "expirationDate": "06/2030",
      "createdAt":      "2026-05-26T10:00:00Z"
    }
  ],
  "pagination": {
    "total":   3,
    "limit":   20,
    "offset":  0,
    "hasMore": false
  },
  "meta": {
    "requestId": "req_01HXY123456ABCDEF",
    "platform":  "Fyatu CaaS",
    "timestamp": "2026-05-26T10:00:00Z"
  }
}

​
Response Fields

FieldTypeDescription
idstringCard identifier (prefix crd_)
cardholderIdstringThe cardholder this card belongs to
productIdstringThe product the card was issued under
statusstringACTIVE, FROZEN, or TERMINATED
cardTypestringVIRTUAL or PHYSICAL
cardBrandstringVISA or MASTERCARD
maskedPanstringBIN-masked PAN — first 6 digits + 6 stars + last 4 (e.g. 445123******4123)
last4stringLast 4 digits of the PAN
expirationDatestringCard expiry in MM/YYYY format (e.g. 06/2030)
createdAtstringISO 8601 creation timestamp
balance and cvv are not included in list responses. Use GET /cards/{id} to retrieve live balance and CVV for a specific card.

​
Error Codes

CodeHTTPCause
INSUFFICIENT_SCOPE403Key lacks cards:read scope
INTERNAL_ERROR500Server error

Authorizations

​
Authorization
string
header
required

API key from the FYATU CaaS portal. Pass as Authorization: Bearer <key>.

Query Parameters

​
limit
integer
default:20
Required range: 1 <= x <= 100
​
offset
integer
default:0
Required range: x >= 0
​
cardholderId
string
​
status
enum<string>
Available options:
ACTIVE,
FROZEN,
TERMINATED

Response

Cards retrieved

​
success
boolean
Example:

true

​
status
integer
Example:

200

​
message
string
Example:

"Cards retrieved"

​
data
object[]
​
pagination
object
​
meta
object