---
title: "Create"
method: POST
path: "/v2/issuers/{issuerId}/cards"
tags: ["Card"]
---

# Create

`POST /v2/issuers/{issuerId}/cards`

This request is used by the bank backend to request the creation of a card (virtual or physical) with the processor.

## Request body

- object
  - `consumerId` string, required — Unique identifier of the end user.
  - `cardProductId` string, required — Unique identifier of the type of card (defined during the onboarding of D1)
  - `state` 'ACTIVE' | 'INACTIVE' — The state of the card<br/>If not provided, the card is considered ACTIVE
  - `name` string, required — Name of the card holder as it will be printed/embossed on the card.<br/>For virtual card this value will be used exclusively for card display.<br/>Empty string supported.
  - `secondName` string — Optional second card holder name as it will be printed/embossed on the card under the first card holder name.<br/>Not used in case of virtual card.
  - `statusReason` string — This indicates the state of the card once it's created
  - `accountList` AccountInformation[], required — This represent the list of account the card will be attached to.<br/>This list is used for the posting
    - `default` boolean, required — true if the account is the default consumer account
    - `type` 'CHECKING' | 'SAVINGS' — Type of the Account. By default if not provided, it is a 'CHECKING' account.
    - `number` string, required — Account number used for posting to Core Banking System
    - `currencyCode` string, required — Currency Code in ISO 4217 alpha code format

## Response `201`

Successful card creation

- object — Information related to the created card.
  - `cardId` string, required — Unique identifier of the card.

## Other responses

- `400` — Bad Request, Invalid request URI, header, paramters. The below table defines the possible 'Bad request' error: | errorCode | error | Retryable | Comments | | -------------- | ------------| ----------| -----------------------------------| | - | - | no | No error details available | | FIELD_INVALID_FORMAT | Contains the field in error (first found) | no | JSON not well formatted or<br>One field is not expected format as defined in this documentation | | FIELD_INVALID_VALUE | Contains the field in error (first found) | no | One field value is not allowed for the given field |
- `401` — Unauthorized request, the provided Authorization header is missing or invalid. In the table below only the field "error" is provided. | errorCode | error | Retryable | Comments | | -------------- | ------------| ----------| -----------------------------------| | AUTHORIZER_UNAUTHORIZED | Unauthorized message | no | Access token not valid |
- `403` — Forbidden action detected by WAF or the application.<br> The below table defines the possible error: | errorCode | error | Retryable | Comments | | -------------- | ------------| ----------| -----------------------------------| | - | - | no | No error details available | | AUTHORIZER_FORBIDDEN | not authorized error message | no | User is not authorized to access this resource | | CARD_CREATION_COUNT_EXCEEDED | - | no | The maximum number of cards for the consumer is reached. Creation of additional card is not possible. | | OPERATION_NOT_ALLOWED | Name of the operation/field that is not allowed in this operation | no | Card creation is not allowed for this card product |
- `404` — Ressource not found, Unknown issuerId or consumerId or card id'. The below table defines the possible error: | errorCode | error | Retryable | Comments | | -------------- | ------------| ----------| -----------------------------------| | - | - | no | No error details available | | UNKNOWN_CONSUMER | - | no | Consumer does not exist |
- `500` — Internal Server Error. The below table defines the possible error: |errorCode | error | Retryable | Comments | | -------------- | ------------| ----------| -----------------------------------| | - | - | yes | No error details available | | INTERNAL_ERROR | error details if any | no | The server has encountered an error when executing the request. |
- `503` — The service is temporarily unavailable. You may retry your request later.

---

[API](https://skmtc.net/thalescloud/apis/d1-oauth-api.md) · [All operations](https://skmtc.net/thalescloud/apis/d1-oauth-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thalescloud/d1-oauth-api/revisions/96089514858c/schema)