Card Issuing API

Issue cards from your product

Virtual cards in seconds, physical cards on demand. Every card carries limits, category locks and merchant restrictions enforced at the network level.

  • Virtual and physical
  • Network-level controls
  • Sandbox to test

Free to start · No monthly fee · Pay per card

API

POST /v1/cards

Request

POST /v1/cards

{

"customer_id": "cus_4k9f2",

"type": "virtual",

"spend_limit": 500000,

"categories": ["fuel","transport"]

}

Response

{

"status": "success",

"data": {

"card_id": "crd_9m3k7",

"last4": "4821",

"spend_limit": 500000,

"status": "active"

}

}

Virtual card · Category restrictions applied

200 OK · 95ms

Why it matters

Corporate cards should not take weeks to arrive

Most card issuance involves a bank application, a credit check and a waiting period. Niimbu's Card Issuing API creates a virtual card in one API call.

Issue in seconds

One API call creates a virtual card. Physical cards ship after a separate request. Both carry the limits, restrictions and controls you set at issuance.

Restrictions enforced at the network

Category locks, merchant restrictions and per-transaction limits are enforced by the card network. A card locked to fuel will be declined at a restaurant, regardless of the balance.

Every transaction in real time

A card swipe fires a webhook with the amount, merchant, category and remaining balance. You see it the moment it happens, not when the statement arrives.

How it works

From API call to active card, in four steps

01

Issue the card

POST to /v1/cards with the customer ID, type (virtual or physical), spend limit and any restrictions.

02

Card is activated

Virtual cards are active immediately. Physical cards activate when they arrive and are registered.

03

Customer uses the card

The card works at any terminal or online merchant that accepts cards. Restrictions are enforced at the network level.

04

Webhook fires

Every transaction — and every declined attempt — fires a signed webhook to your URL.

Controls

Limits that cannot be exceeded

Set a total limit, a per-transaction limit, category restrictions and merchant restrictions at the moment of issuance. The card network enforces every rule at the point of sale.

  • Total and per-transaction limits
  • Category and merchant restrictions
  • Time window restrictions

API

POST /v1/cards

Request

POST /v1/cards

{

"customer_id": "cus_4k9f2",

"type": "virtual",

"spend_limit": 500000,

"categories": ["fuel","transport"]

}

Response

{

"status": "success",

"data": {

"card_id": "crd_9m3k7",

"last4": "4821",

"spend_limit": 500000,

"status": "active"

}

}

Virtual card · Category restrictions applied

200 OK · 95ms

Real-time events

Know every transaction as it happens

A card swipe, an online purchase, a declined attempt — each one fires a webhook with the full details. Your system can update balances, check budgets and trigger alerts in real time.

  • Signed payloads for every event
  • Amount, merchant, category and balance
  • Automatic retry on delivery failure
See spend controls

Webhooks

Event log

collection.success

ORD-2941

14:32:01

payout.settled

VND-001

14:32:05

account.created

cus_4k9f2

14:32:08

card.activated

crd_9m3k7

14:32:12

All delivered · Retry on failure · Signed payloads

The difference

What changes when card issuance is one API call

The usual way

  • Ordering corporate cards from a bank, waiting weeks
  • No way to enforce spending categories
  • End-of-month surprises from unchecked spending
  • Personal cards used for business, reimbursed later
  • No real-time visibility into card transactions

With Niimbu

  • Virtual cards issued in seconds via API
  • Category and merchant restrictions enforced at the network
  • Every transaction visible the moment it happens
  • Cards carry their own limits and rules
  • Webhooks deliver transaction details in real time
Everything included

The card issuing detail that real integrations need

No add-on modules and no higher tier. These are part of card issuing from the first API call.

Virtual cards

Issue instantly for online payments and subscriptions.

Physical cards

Ship to a customer for in-person spending at any terminal.

Spend limits

Total and per-transaction limits enforced at the network.

Category restrictions

Lock cards to fuel, office supplies, transport or any combination.

Merchant restrictions

Allow cards to work only at specific merchants or categories.

Freeze and unfreeze

Disable a card instantly, re-enable with history preserved.

Transaction webhooks

Real-time event delivery for every swipe and online purchase.

Card status control

Active, frozen or cancelled, controlled by your API.

Sandbox

Test cards with test numbers, no real money moved.

Product team reviewing card issuance flow
The idea behind it

A card that cannot be restricted is a liability, not a tool.

Pricing

Per card issued, not per transaction

There is no monthly platform fee. You pay per card issued. Transactions, restrictions and webhooks cost nothing extra.

  • No monthly platform fee
  • No transaction fees
  • Sandbox is free
See pricing
Questions

Frequently asked questions

If your question is not here, the Help Centre goes deeper, or you can talk to someone on the team.

How quickly can I issue a virtual card?

One API call. The card details are returned in the response and the card is active immediately. The customer can start using it within seconds.

What is the difference between virtual and physical?

Virtual cards exist in your system and are used for online payments. Physical cards are shipped to a customer and work at any terminal. Both carry the same limits and restrictions.

How do category restrictions work?

You specify allowed categories at issuance. The card network enforces them at the point of sale. A card restricted to fuel will be declined at a restaurant.

Can I change limits after issuance?

Yes. A PATCH request updates the total limit, per-transaction limit or restrictions. The change takes effect immediately.

What events trigger webhooks?

Card activated, transaction approved, transaction declined, card frozen, card unfrozen, card cancelled. Each event includes the full transaction details.

Can I freeze a card?

Yes. A POST request freezes the card instantly. No new transactions will be approved. A separate request unfreezes it.

What does it cost?

There is no monthly platform fee. You pay per card issued, with no charge for transactions, restrictions or webhooks. The sandbox is free.

The simpler way to scale your business!

Start free and see it working today, or talk to us about pricing for teams and higher volumes.