API reference

List cards

GET/cards

Lists the cards issued in this environment, newest first.

Required scope: cards:read
Idempotency-Key: Not used
Environments: Sandbox and Live

Parameters

limitinteger · queryoptional
min 1 · max 100 · default 20
starting_afterstring · queryoptional
max length 64
statusenum · queryoptional
"active", "frozen", "terminated"

Example request

curl "https://api.gloresend.com/sandbox/v1/cards?limit=10" \
  -H "Authorization: Bearer $GLORESEND_TEST_KEY"

Response · 200

200 · application/json

{
  "object": "list",
  "data": [
    {
      "id": "card_9f8e7d6c5b4a3f2e1d0c",
      "object": "card",
      "environment": "sandbox",
      "product": "visa-404",
      "network": "Visa",
      "currency": "USD",
      "status": "active",
      "cardholder": {
        "first_name": "Ada",
        "last_name": "Example",
        "email": "ada@example.com"
      },
      "last4": "4242",
      "expiry_month": "10",
      "expiry_year": "2029",
      "balance": 5000,
      "reference": "EMP-0042",
      "metadata": {},
      "created_at": "2026-10-15T09:30:00.000Z",
      "test_data": true
    }
  ],
  "has_more": false
}

Response fields

objectenumrequired
"list"
dataarray of objectrequired
data[].idstringrequired
data[].objectenumrequired
"card"
data[].environmentenumrequired
"sandbox", "live"
data[].productstringrequired
data[].networkenumrequired
"Visa", "Mastercard"
data[].currencyenumrequired
"USD"
data[].statusenumrequired
"active", "frozen", "terminated"
data[].cardholderobjectrequired
data[].cardholder.first_namestringrequired
min length 1 · max length 50 · pattern ^[\p{L} '\-.]+$/u
data[].cardholder.last_namestringrequired
min length 1 · max length 50 · pattern ^[\p{L} '\-.]+$/u
data[].cardholder.emailstringrequired
max length 254 · email
data[].last4stringrequired
data[].expiry_monthstringrequired
data[].expiry_yearstringrequired
data[].balanceintegerrequired
Card balance in USD cents, as of the last operation through GLORESEND.
data[].referencestring | nullrequired
data[].metadatamap of stringrequired
data[].created_atstringrequired
date-time
data[].test_databooleanrequired
has_morebooleanrequired

Errors

401authentication_requiredNo credentials were supplied. Send Authorization: Bearer <api key>.
401invalid_api_keyThe API key is unknown, revoked or expired.
401environment_mismatchThe API key belongs to a different environment than the base URL you called. Sandbox keys (gs_test_) only work against the Sandbox base URL, Live keys (gs_live_) only against the Live base URL.
429rate_limitedToo many requests. Wait for the number of seconds in the Retry-After header.
400validation_errorThe request body, query or headers failed validation. param points at the first invalid field.
403insufficient_scopeThe API key does not have the scope required for this endpoint.