Create Card
curl --request POST \
--url https://api.sandbox.sudo.cards/cards \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"customerId": "<string>",
"type": "physical",
"currency": "NGN",
"status": "active",
"fundingSourceId": "<string>",
"number": "<string>",
"enable2FA": false,
"issuerCountry": "NGA",
"metadata": "<string>",
"spendingControls": {
"allowedCategories": [],
"blockedCategories": [],
"channels": {
"atm": true,
"pos": true,
"web": true,
"mobile": true
},
"spendingLimits": [
{
"amount": 123,
"interval": "daily"
}
]
},
"bankCode": "<string>",
"accountNumber": "<string>",
"replacementFor": "<string>",
"debitAccountId": "<string>",
"amount": 123,
"sendPINSMS": false,
"expirationDate": "<string>"
}
'import requests
url = "https://api.sandbox.sudo.cards/cards"
payload = {
"customerId": "<string>",
"type": "physical",
"currency": "NGN",
"status": "active",
"fundingSourceId": "<string>",
"number": "<string>",
"enable2FA": False,
"issuerCountry": "NGA",
"metadata": "<string>",
"spendingControls": {
"allowedCategories": [],
"blockedCategories": [],
"channels": {
"atm": True,
"pos": True,
"web": True,
"mobile": True
},
"spendingLimits": [
{
"amount": 123,
"interval": "daily"
}
]
},
"bankCode": "<string>",
"accountNumber": "<string>",
"replacementFor": "<string>",
"debitAccountId": "<string>",
"amount": 123,
"sendPINSMS": False,
"expirationDate": "<string>"
}
headers = {
"Authorization": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
customerId: '<string>',
type: 'physical',
currency: 'NGN',
status: 'active',
fundingSourceId: '<string>',
number: '<string>',
enable2FA: false,
issuerCountry: 'NGA',
metadata: '<string>',
spendingControls: {
allowedCategories: [],
blockedCategories: [],
channels: {atm: true, pos: true, web: true, mobile: true},
spendingLimits: [{amount: 123, interval: 'daily'}]
},
bankCode: '<string>',
accountNumber: '<string>',
replacementFor: '<string>',
debitAccountId: '<string>',
amount: 123,
sendPINSMS: false,
expirationDate: '<string>'
})
};
fetch('https://api.sandbox.sudo.cards/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.sandbox.sudo.cards/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'customerId' => '<string>',
'type' => 'physical',
'currency' => 'NGN',
'status' => 'active',
'fundingSourceId' => '<string>',
'number' => '<string>',
'enable2FA' => false,
'issuerCountry' => 'NGA',
'metadata' => '<string>',
'spendingControls' => [
'allowedCategories' => [
],
'blockedCategories' => [
],
'channels' => [
'atm' => true,
'pos' => true,
'web' => true,
'mobile' => true
],
'spendingLimits' => [
[
'amount' => 123,
'interval' => 'daily'
]
]
],
'bankCode' => '<string>',
'accountNumber' => '<string>',
'replacementFor' => '<string>',
'debitAccountId' => '<string>',
'amount' => 123,
'sendPINSMS' => false,
'expirationDate' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.sandbox.sudo.cards/cards"
payload := strings.NewReader("{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.sandbox.sudo.cards/cards")
.header("Authorization", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.sandbox.sudo.cards/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"statusCode": 200,
"message": "Card created successfully.",
"data": {
"business": "670cec9d25852ba485d74273",
"customer": "64a1b2c3d4e5f6a7b8c9d0e1",
"account": "67974b365c184d20fc340889",
"fundingSource": "670cec9d25852ba485d74286",
"type": "virtual",
"brand": "Verve",
"currency": "NGN",
"maskedPan": "506110******1234",
"expiryMonth": "09",
"expiryYear": "2028",
"metadata": {
"createdBy": "api",
"purpose": "general"
},
"status": "active",
"spendingControls": {
"channels": {
"atm": true,
"pos": true,
"web": true,
"mobile": true,
"_id": "6840b5161443c90831ba07b1"
},
"allowedCategories": [],
"blockedCategories": [],
"spendingLimits": [
{
"amount": 1500000,
"interval": "daily",
"categories": [],
"_id": "6840b5161443c90831ba07b2"
}
],
"_id": "6840b5161443c90831ba07b0"
},
"is2FAEnrolled": false,
"isDefaultPINChanged": false,
"disposable": false,
"refundAccount": null,
"isDeleted": false,
"createdAt": "2025-06-04T21:05:26.115Z",
"updatedAt": "2025-06-05T09:15:00.000Z",
"_id": "6418eb71a37e405064694518",
"__v": 0
}
}{
"statusCode": 400,
"message": "\"customerId\" is required",
"data": null
}{
"statusCode": 401,
"message": "Unauthorized. Provide a valid API key in the Authorization header.",
"data": null
}Cards
Create Card
Create, map or replace cards for a specific customer.
POST
/
cards
Create Card
curl --request POST \
--url https://api.sandbox.sudo.cards/cards \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"customerId": "<string>",
"type": "physical",
"currency": "NGN",
"status": "active",
"fundingSourceId": "<string>",
"number": "<string>",
"enable2FA": false,
"issuerCountry": "NGA",
"metadata": "<string>",
"spendingControls": {
"allowedCategories": [],
"blockedCategories": [],
"channels": {
"atm": true,
"pos": true,
"web": true,
"mobile": true
},
"spendingLimits": [
{
"amount": 123,
"interval": "daily"
}
]
},
"bankCode": "<string>",
"accountNumber": "<string>",
"replacementFor": "<string>",
"debitAccountId": "<string>",
"amount": 123,
"sendPINSMS": false,
"expirationDate": "<string>"
}
'import requests
url = "https://api.sandbox.sudo.cards/cards"
payload = {
"customerId": "<string>",
"type": "physical",
"currency": "NGN",
"status": "active",
"fundingSourceId": "<string>",
"number": "<string>",
"enable2FA": False,
"issuerCountry": "NGA",
"metadata": "<string>",
"spendingControls": {
"allowedCategories": [],
"blockedCategories": [],
"channels": {
"atm": True,
"pos": True,
"web": True,
"mobile": True
},
"spendingLimits": [
{
"amount": 123,
"interval": "daily"
}
]
},
"bankCode": "<string>",
"accountNumber": "<string>",
"replacementFor": "<string>",
"debitAccountId": "<string>",
"amount": 123,
"sendPINSMS": False,
"expirationDate": "<string>"
}
headers = {
"Authorization": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
customerId: '<string>',
type: 'physical',
currency: 'NGN',
status: 'active',
fundingSourceId: '<string>',
number: '<string>',
enable2FA: false,
issuerCountry: 'NGA',
metadata: '<string>',
spendingControls: {
allowedCategories: [],
blockedCategories: [],
channels: {atm: true, pos: true, web: true, mobile: true},
spendingLimits: [{amount: 123, interval: 'daily'}]
},
bankCode: '<string>',
accountNumber: '<string>',
replacementFor: '<string>',
debitAccountId: '<string>',
amount: 123,
sendPINSMS: false,
expirationDate: '<string>'
})
};
fetch('https://api.sandbox.sudo.cards/cards', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.sandbox.sudo.cards/cards",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'customerId' => '<string>',
'type' => 'physical',
'currency' => 'NGN',
'status' => 'active',
'fundingSourceId' => '<string>',
'number' => '<string>',
'enable2FA' => false,
'issuerCountry' => 'NGA',
'metadata' => '<string>',
'spendingControls' => [
'allowedCategories' => [
],
'blockedCategories' => [
],
'channels' => [
'atm' => true,
'pos' => true,
'web' => true,
'mobile' => true
],
'spendingLimits' => [
[
'amount' => 123,
'interval' => 'daily'
]
]
],
'bankCode' => '<string>',
'accountNumber' => '<string>',
'replacementFor' => '<string>',
'debitAccountId' => '<string>',
'amount' => 123,
'sendPINSMS' => false,
'expirationDate' => '<string>'
]),
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.sandbox.sudo.cards/cards"
payload := strings.NewReader("{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.sandbox.sudo.cards/cards")
.header("Authorization", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.sandbox.sudo.cards/cards")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"customerId\": \"<string>\",\n \"type\": \"physical\",\n \"currency\": \"NGN\",\n \"status\": \"active\",\n \"fundingSourceId\": \"<string>\",\n \"number\": \"<string>\",\n \"enable2FA\": false,\n \"issuerCountry\": \"NGA\",\n \"metadata\": \"<string>\",\n \"spendingControls\": {\n \"allowedCategories\": [],\n \"blockedCategories\": [],\n \"channels\": {\n \"atm\": true,\n \"pos\": true,\n \"web\": true,\n \"mobile\": true\n },\n \"spendingLimits\": [\n {\n \"amount\": 123,\n \"interval\": \"daily\"\n }\n ]\n },\n \"bankCode\": \"<string>\",\n \"accountNumber\": \"<string>\",\n \"replacementFor\": \"<string>\",\n \"debitAccountId\": \"<string>\",\n \"amount\": 123,\n \"sendPINSMS\": false,\n \"expirationDate\": \"<string>\"\n}"
response = http.request(request)
puts response.read_body{
"statusCode": 200,
"message": "Card created successfully.",
"data": {
"business": "670cec9d25852ba485d74273",
"customer": "64a1b2c3d4e5f6a7b8c9d0e1",
"account": "67974b365c184d20fc340889",
"fundingSource": "670cec9d25852ba485d74286",
"type": "virtual",
"brand": "Verve",
"currency": "NGN",
"maskedPan": "506110******1234",
"expiryMonth": "09",
"expiryYear": "2028",
"metadata": {
"createdBy": "api",
"purpose": "general"
},
"status": "active",
"spendingControls": {
"channels": {
"atm": true,
"pos": true,
"web": true,
"mobile": true,
"_id": "6840b5161443c90831ba07b1"
},
"allowedCategories": [],
"blockedCategories": [],
"spendingLimits": [
{
"amount": 1500000,
"interval": "daily",
"categories": [],
"_id": "6840b5161443c90831ba07b2"
}
],
"_id": "6840b5161443c90831ba07b0"
},
"is2FAEnrolled": false,
"isDefaultPINChanged": false,
"disposable": false,
"refundAccount": null,
"isDeleted": false,
"createdAt": "2025-06-04T21:05:26.115Z",
"updatedAt": "2025-06-05T09:15:00.000Z",
"_id": "6418eb71a37e405064694518",
"__v": 0
}
}{
"statusCode": 400,
"message": "\"customerId\" is required",
"data": null
}{
"statusCode": 401,
"message": "Unauthorized. Provide a valid API key in the Authorization header.",
"data": null
}Authorizations
Body
application/json
The customer _id.
The card type.
Available options:
physical, virtual The currency type.
Available options:
NGN, USD The initial card status.
Available options:
active, inactive The funding source _id. Required if you wish to map card to an existing funding source.
The card brand.
Available options:
Verve, AfriGo, MasterCard, Visa The card PAN (Verve or AfriGo) or Card ID (Visa). Required if type is physical.
Enable 2FA for the card, this enables the card to receive OTP for web and mobile transactions.
3 Digits Issuer Country. NGA for Nigeria and USA for United States. Defaults to NGA.
Available options:
NGA, USA The metadata object to attach to the card. Stored in key-value pair
Card spending controls. Default usage limits will be applied if non is provided.
Show child attributes
Show child attributes
The bank code of existing account. Required if you wish to map card to existing account.
The account number of existing account. Required if you wish to map card to existing account.
The _id of the current card you wish to replace. Required for card replacement.
The reason for replacement. Required for card replacement.
Available options:
lost, stolen Debit account _id. Required for all virtual cards and giftcards.
Funding amount. Required for mastercard.
Send default PIN to customer phone number via SMS.
Card expiry date. Applies to Visa cards only. Format MMM-YYYY example AUG-2025. All cards are subject to maximum of 3 years validity.