---
title: "Retrieve authorization controls"
method: GET
path: "/customers/{customerID}/card_accounts/{cardAccountID}/auth_controls"
tags: ["Cards"]
---

# Retrieve authorization controls

`GET /customers/{customerID}/card_accounts/{cardAccountID}/auth_controls`

Retrieve the applicable spend limits for the given card account

## Path parameters

- `customerID` string, required — A UUID that uniquely identifies a resource
- `cardAccountID` string, required — A UUID that uniquely identifies a resource

## Response `200`

The authorization controls

- object
  - `customer_id` string, required — The ID of the customer
  - `card_account_id` string, required — The ID of the card account
  - `spending_limits` CardSpendingLimit[], required — The various spending limits for the card account for the current time period
    - `period` 'daily' | 'trial_lifetime', required — The period of the spending limit
    - `timezone` string — The timezone of the spending limit, only applicable to spending limits that have a `next_reset_at`
    - `next_reset_at` string — The next reset time of the spending limit, in ISO8601 format
    - `total_amount` string, required — The total amount of the spending limit
    - `remaining_amount` string, required — The remaining amount of the spending limit
    - `currency` 'usd'

## Other responses

- `401` — Missing or invalid API key
- `500` — Unexpected error. User may try and send the request again.

---

[API](https://skmtc.net/bridge/apis/bridge-api.md) · [All operations](https://skmtc.net/bridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bridge/bridge-api/versions/570998bde3b5/schema)