---
title: "Update a Card"
method: PATCH
path: "/api/v1/cards/{publicToken}"
tags: ["Cards"]
---

# Update a Card

`PATCH /api/v1/cards/{publicToken}`

## Path parameters

- `publicToken` string, required

## Request body

- UpdateCardRequest — Request object for the Update Card endpoint.
  - `customerReference` string, nullable — An external customer reference provided in the request.
  - `cardHolder` CardHolderUpdate — Card holder object when updating card
    - `title` string, nullable — Title of the cardholder.
    - `firstName` string, nullable — First name of the cardholder.
    - `middleName` string, nullable — Middle name of the cardholder.
    - `lastName` string, nullable — Last name of Card Holder
    - `dateOfBirth` string, nullable — Date of birth of the cardholder. Format YYYY-MM-DD.
    - `mobile` string, nullable — Mobile number of the cardholder. <br /> Characters that match the following regex will be cleaned and removed from the string: [;,:!?\\<>~`#%^@\-=*_$(){}|&'\[\]"]
    - `email` string, nullable — Email address of the cardholder.
  - `address` AddressUpdate — Address object when updating card
    - `addressLine1` string, nullable — First line of the address.
    - `addressLine2` string, nullable — Second line of the address.
    - `addressLine3` string, nullable — Second line of the address.
    - `city` string, nullable — City of the address.
    - `county` string, nullable — County
    - `state` string, nullable — State
    - `postCode` string, required — Postcode / Zip code of the address.
    - `country` string, nullable — Country of residence. This is represented as a 3-letter alphanumeric ISO country code (e.g. GBR for UK).
  - `fulfilment` AddressUpdate — Address object when updating card
    - `addressLine1` string, nullable — First line of the address.
    - `addressLine2` string, nullable — Second line of the address.
    - `addressLine3` string, nullable — Second line of the address.
    - `city` string, nullable — City of the address.
    - `county` string, nullable — County
    - `state` string, nullable — State
    - `postCode` string, required — Postcode / Zip code of the address.
    - `country` string, nullable — Country of residence. This is represented as a 3-letter alphanumeric ISO country code (e.g. GBR for UK).
  - `manufacturingDetails` ManufacturingDetailsUpdate
    - `thermalLine1` string, nullable — Free text field which can be used for transferring extra information to be printed on the card.
    - `thermalLine2` string, nullable — Free text field which can be used for transferring extra information to be printed on the card.
    - `embossLine4` string, nullable — Embossed card line 4. Actual maximum length will depend on the card design.
  - `designId` string, nullable — Optional DesignId
  - `parentCard` string, nullable — Where card is a secondary card, public token of the primary card.
  - `nameOnCard` string, nullable — Optional data to update the card name.
  - `freetext1` string, nullable — Fulfilment additional text field
  - `freetext2` string, nullable — Fulfilment additional text field
  - `language3ds` string, nullable — [Obsolete] Replaced by Config3dSecure.Language3ds. <br /> Gets or sets the language3ds.
  - `networkSharingOptOut` boolean, nullable — Optional field to update network automatic data sharing.
  - `updatedBy` string, nullable — User who updated the card details.
  - `oobAppUrl` string, uri, nullable — 3DS OOBAppURL at card level.
  - `url` string, nullable — QR Code / Delivery Id
  - `config3dSecure` TdsConfigUpdate — 3ds config update model
    - `language3ds` string, nullable — BCP-47 format
    - `apataConfig` ApataUpdate — Apata 3ds config update model
      - `cardProgramId` string, nullable — Gets or sets the card program identifier.
      - `challengeProfileId` string, nullable — Gets or sets the challenge profile identifier.
      - `kbaNumberOfQuestionsToAnswer` integer, nullable — Gets or sets the kba number of questions to answer.
      - `kbaNumberOfIncorrectPermissible` integer, nullable — Gets or sets the kba number of incorrect permissible.

## Response `204`

No Content

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `500` — Server Error

---

[API](https://skmtc.net/thredd/apis/core-cards.md) · [All operations](https://skmtc.net/thredd/apis/core-cards/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thredd/core-cards/versions/841f62def5bf/schema)