List Products

List products

curl --request GET \
  --url https://api.fyatu.com/api/v3.20/products \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fyatu.com/api/v3.20/products', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fyatu.com/api/v3.20/products",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fyatu.com/api/v3.20/products"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fyatu.com/api/v3.20/products")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "status": 200,
  "message": "Products retrieved",
  "data": [
    {
      "productId": "prd_01HXYZ1111ABCDEF0001",
      "programId": "prg_01HXYZ9876ABCDEF0000",
      "name": "Standard VISA Consumer",
      "scheme": "VISA",
      "cardType": "CONSUMER",
      "features": {
        "has3DS": true,
        "hasApplePay": true,
        "hasGooglePay": true,
        "hasJIT": false,
        "hasSpendControl": false,
        "hasMccControl": false
      },
      "status": "ACTIVE",
      "createdAt": "2026-01-10T09:00:00Z"
    }
  ],
  "pagination": {
    "total": 1,
    "limit": 50,
    "offset": 0,
    "hasMore": false
  },
  "meta": {
    "requestId": "req_a1b2c3d4e5f6a7b8c9d0e1f2",
    "platform": "Fyatu CaaS",
    "timestamp": "2026-05-25T10:00:00Z"
  }
}

GET

products

List products

curl --request GET \
  --url https://api.fyatu.com/api/v3.20/products \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fyatu.com/api/v3.20/products', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fyatu.com/api/v3.20/products",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fyatu.com/api/v3.20/products"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fyatu.com/api/v3.20/products")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "status": 200,
  "message": "Products retrieved",
  "data": [
    {
      "productId": "prd_01HXYZ1111ABCDEF0001",
      "programId": "prg_01HXYZ9876ABCDEF0000",
      "name": "Standard VISA Consumer",
      "scheme": "VISA",
      "cardType": "CONSUMER",
      "features": {
        "has3DS": true,
        "hasApplePay": true,
        "hasGooglePay": true,
        "hasJIT": false,
        "hasSpendControl": false,
        "hasMccControl": false
      },
      "status": "ACTIVE",
      "createdAt": "2026-01-10T09:00:00Z"
    }
  ],
  "pagination": {
    "total": 1,
    "limit": 50,
    "offset": 0,
    "hasMore": false
  },
  "meta": {
    "requestId": "req_a1b2c3d4e5f6a7b8c9d0e1f2",
    "platform": "Fyatu CaaS",
    "timestamp": "2026-05-25T10:00:00Z"
  }
}

Overview

Returns all card products associated with your business across all programs. A Card Product is a specific card configuration within a program — it defines the card scheme (VISA/Mastercard), card type (Consumer/Corporate), the feature set available to cards issued under it, and the lifecycle controls enforced at issuance and funding time. Products are shared resources: they are always read from the LIVE database regardless of whether your API key is LIVE or SANDBOX. You can create products via POST /programs/:id/products and manage their lifecycle with the archive and activate endpoints.

Query Parameters

Parameter	Type	Default	Description
`limit`	integer	50	Results per page (max 100)
`offset`	integer	0	Number of records to skip

Example

curl https://api.fyatu.com/api/v3.20/products \
  -H "Authorization: Bearer $FYATU_API_KEY"

const resp = await fetch('https://api.fyatu.com/api/v3.20/products', {
  headers: { 'Authorization': `Bearer ${process.env.FYATU_API_KEY}` }
});
const body = await resp.json();
for (const product of body.data) {
  console.log(product.productId, product.name, product.status);
}

import os, requests

resp = requests.get(
    'https://api.fyatu.com/api/v3.20/products',
    headers={'Authorization': f'Bearer {os.environ["FYATU_API_KEY"]}'}
)
body = resp.json()
for product in body['data']:
    print(product['productId'], product['name'], product['status'])

Success Response (200)

{
  "success": true,
  "status":  200,
  "message": "Products retrieved",
  "data": [
    {
      "productId": "prd_01HXYZ1111ABCDEF0001",
      "programId": "prg_01HXYZ9876ABCDEF0000",
      "name":      "Standard VISA Consumer",
      "scheme":    "VISA",
      "cardType":  "CONSUMER",
      "features": {
        "has3DS":          true,
        "hasApplePay":     true,
        "hasGooglePay":    true,
        "hasJIT":          false,
        "hasSpendControl": false,
        "hasMccControl":   false
      },
      "controls": {
        "isReloadable":          true,
        "isOneTimeUse":          false,
        "cardTTLMonths":         36,
        "maxCardsPerCardholder": 5,
        "spendingLimit":         1000,
        "spendingPeriod":        "TRANSAMOUNT"
      },
      "status":    "ACTIVE",
      "createdAt": "2026-01-10T09:00:00Z"
    }
  ],
  "pagination": {
    "total":   1,
    "limit":   50,
    "offset":  0,
    "hasMore": false
  },
  "meta": {
    "requestId": "req_01HXY123456ABCDEF",
    "platform":  "Fyatu CaaS",
    "timestamp": "2026-05-25T10:00:00Z"
  }
}

Field Reference

Core Fields

Field	Description
`productId`	Unique product identifier (prefix `prd_`)
`programId`	The program this product belongs to
`name`	Human-readable product name
`scheme`	Card network — `VISA` or `MASTERCARD`
`cardType`	Card usage type — `CONSUMER` or `CORPORATE`
`status`	`ACTIVE` or `ARCHIVED`
`createdAt`	ISO 8601 creation timestamp

`features` Object

Field	Type	Description
`has3DS`	boolean	3D Secure authentication enabled
`hasApplePay`	boolean	Apple Pay tokenisation enabled
`hasGooglePay`	boolean	Google Pay tokenisation enabled
`hasJIT`	boolean	Just-In-Time funding — your system authorises each spend in real time
`hasSpendControl`	boolean	Per-card spend limits are configured
`hasMccControl`	boolean	MCC (merchant category) allow/block rules are configured

`controls` Object

Field	Type	Description
`isReloadable`	boolean	When `false`, `POST /cards/{id}/fund` is rejected for all cards under this product
`isOneTimeUse`	boolean	When `true`, a card is automatically terminated after its first settled transaction
`cardTTLMonths`	integer \| null	Maximum card validity in months from issuance
`maxCardsPerCardholder`	integer \| null	Maximum number of simultaneously active (non-TERMINATED) cards a cardholder may hold under this product
`spendingLimit`	number	Maximum spend per `spendingPeriod` in the program currency (USD)
`spendingPeriod`	string	Period window for the spending limit — `TRANSAMOUNT`, `DAILY`, `WEEKLY`, `MONTHLY`, `QUARTERLY`, `YEARLY`, or `LIFETIME`

Products are always read from the LIVE database, even when using a SANDBOX API key. Use GET /programs/:id/products to list products scoped to a specific program.

Error Codes

Code	HTTP	Cause
`INSUFFICIENT_SCOPE`	403	Key lacks `accounts:read` scope

Authorizations

Authorization

string

header

required

API key from the FYATU CaaS portal. Pass as Authorization: Bearer <key>.

Query Parameters

limit

integer

default:50

Results per page

Required range: 1 <= x <= 100

offset

integer

default:0

Number of records to skip

Required range: x >= 0

Response

Products retrieved

success

boolean

Example:

true

status

integer

Example:

200

message

string

Example:

"Products retrieved"

data

object[]

Show child attributes

pagination

object

Show child attributes

Account

Products

Cardholders

Cards

Webhooks

Overview

Query Parameters

Example

Success Response (200)

Field Reference

Core Fields

`features` Object

`controls` Object

Error Codes

Authorizations

Query Parameters

Response

​Overview

​Query Parameters

​Example

​Success Response (200)

​Field Reference

​Core Fields

​features Object

​controls Object

​Error Codes

Authorizations

Query Parameters

Response

Overview

Query Parameters

Example

Success Response (200)

Field Reference

Core Fields

`features` Object

`controls` Object

Error Codes