v5

latestOpenAPI 3.1.02026-07-262421791.5 MB
card

Update a single card permission

Enable or disable a single spending permission on a card.

{% admonition type="warning" %} This endpoint is deprecated. Please use the v4 endpoint instead. {% /admonition %}

patch/v3/spend/profiles/{profileId}/cards/{cardToken}/spending-permissions

Path parameters

profileIdinteger required

The ID of the profile that owns the card.

cardTokenstring uuid required

The unique token identifying the card.

Headers

X-External-Correlation-Idstring uuid

Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.

Request body

type'ECOM' | 'POS_CHIP' | 'POS_MAGSTRIPE' | 'POS_CONTACTLESS' | 'ATM_WITHDRAWAL' | 'MOBILE_WALLETS' required

The type of transaction this permission controls.

Permissions available on all cards:

  • ECOM - Online transactions
  • ATM_WITHDRAWAL - ATM withdrawals
  • MOBILE_WALLETS - Digital wallet payments (Apple Pay, Google Pay)

Additional permissions available on physical cards:

  • POS_MAGSTRIPE - Physical point-of-sale transactions with magnetic stripe
  • POS_CONTACTLESS - Physical point-of-sale contactless transactions
  • POS_CHIP - Physical point-of-sale transactions with chip

Virtual cards do not return physical point-of-sale permissions. Only permissions returned for the card can be updated.

isEnabledboolean required

Indicates if this permission type is enabled.

isLockedboolean

Indicates if this permission is locked. If true, this permission cannot be updated.

Example request

{
  "type": "ECOM"
}

Response

Permission updated successfully.