Skip to content
Xaalis

Create a masked agent card

POST
/dashboard/v1/merchants/{merchantId}/{mode}/agent_cards
curl --request POST \
  --url https://api.xaalis.org/dashboard/v1/merchants/example/test/agent_cards \
  --header 'Content-Type: application/json' \
  --header 'idempotency-key: example' \
  --cookie better-auth.session_token=<better-auth.session_token> \
  --data '{ "wallet_id": "example", "kind": "merchant_locked", "mcc_allowlist": [ "example" ], "amount_cap": 1 }'

Authorizations

Section titled “Authorizations”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters”
merchantId
required
string
mode
required
string
Allowed values: test live

Header Parameters

Section titled “Header Parameters”
idempotency-key
required

Required retry-safe key; reuse it only for the same operation and request body

string
>= 1 characters <= 255 characters

Required retry-safe key; reuse it only for the same operation and request body

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
object
wallet_id
required
string
kind
required
string
Allowed values: merchant_locked single_use
mcc_allowlist
required
Array<string>
>= 1 items <= 50 items
amount_cap
required
integer
>= 1 <= 100000000

Responses

Section titled “ Responses ”

201

Section titled “201”

Card

Media typeapplication/json
object
object
required
string
Allowed values: agent_card
id
required
string
wallet_id
required
string
livemode
required
boolean
kind
required
string
Allowed values: merchant_locked single_use
status
required
string
Allowed values: provisioning active frozen cancelled
brand
required
string
Allowed values: visa
last4
required
string
/^\d{4}$/
currency
required
string
Allowed values: USD
remaining_today

List responses only: remaining gross daily cap bounded by this card cap, in USD cents; not a balance promise

integer
mcc_allowlist
required
Array<string>
network_merchant_id
required
string | null
amount_cap
required
integer
>= 1 <= 100000000
created_at
required
string
Example
{
  "object": "agent_card",
  "kind": "merchant_locked",
  "status": "provisioning",
  "brand": "visa",
  "currency": "USD"
}

400

Section titled “400”

Validation error

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

401

Section titled “401”

Authentication required

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

403

Section titled “403”

Forbidden

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

404

Section titled “404”

Not found

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

409

Section titled “409”

Idempotency conflict or invalid state

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

422

Section titled “422”

Policy limit or insufficient funds

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

429

Section titled “429”

Rate limited

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}

503

Section titled “503”

Service unavailable

Media typeapplication/json
object
error
required
object
code
required
string
message
required
string
details
Examplegenerated
{
  "error": {
    "code": "example",
    "message": "example",
    "details": "example"
  }
}