Replace the card's controls

PUT/cards/{id}/controls

Path parameters

idstringRequired

Headers

Idempotency-KeystringOptional

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

allowed_countriesarray of stringsOptional

Empty means any

blocked_mccsarray of stringsOptional

channelsobjectRequired

Channels a card may be used on.

4 child attributes

atmbooleanRequired

contactlessbooleanRequired

ecommercebooleanRequired

posbooleanRequired

daily_limit_amountintegerRequired

merchant_idstringOptional

per_transaction_limit_amountintegerRequired

single_usebooleanOptional

valid_fromstring · date-time or nullOptional

valid_untilstring · date-time or nullOptional

Returns

200 OK

The Card object.

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503

Request

curl -X PUT 'https://api.dev.bank.corgi.com/cards/{id}/controls' \
  -H "Authorization: Bearer $TOKEN" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "channels": {
      "atm": false,
      "contactless": false,
      "ecommerce": false,
      "pos": false
    },
    "daily_limit_amount": 10000,
    "per_transaction_limit_amount": 10000
  }'

Response200

{
  "account_id": "acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
  "cardholder_authority_id": "chra_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
  "cardholder_customer_id": "cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
  "controls": {
    "allowed_countries": [
      "string"
    ],
    "blocked_mccs": [
      "string"
    ],
    "channels": {
      "atm": false,
      "contactless": false,
      "ecommerce": false,
      "pos": false
    },
    "daily_limit_amount": 10000,
    "merchant_id": "string",
    "per_transaction_limit_amount": 10000,
    "single_use": false,
    "valid_from": "2026-09-17T14:30:00Z",
    "valid_until": "2026-09-17T14:30:00Z"
  },
  "expiry_month": 0,
  "expiry_year": 0,
  "facility_id": "string",
  "form": "string",
  "id": "card_2tVh8nqLxq4GbDe0K1F6S9zRcWm",
  "kind": "string",
  "last4": "string",
  "network": "string",
  "pan_token": "string",
  "status": "string"
}