Skip to main content
POST
/
open-api
/
v1
/
card
/
apply
curl --request POST \
  --url https://sandbox-openplatform.keysecure.io/open-api/v1/card/apply \
  --header 'Content-Type: application/json' \
  --header 'Api-Key: your_api_key' \
  --header 'Timestamp: 1716307200000' \
  --header 'Access-Token: your_access_token' \
  --data '{
    "card_bin_no": "",
    "cardholder_no": "",
    "package_no": "",
    "card_type": "Virtual",
    "card_unique_no": "",
    "address_info": {
      "first_name": "",
      "last_name": "",
      "phone_code": "86",
      "phone": "",
      "postal_code": "",
      "country": "CN",
      "state": "",
      "city": "",
      "address_line1": "",
      "address_line2": ""
    }
  }'

{
  "code": 0,
  "msg": "Success",
  "data": {
    "card_no": "",
    "card_unique_no": ""
  }
}
Submits a card application. Pass package_no in credit extension mode, or card_bin_no in authorization mode (provide one of the two).

​
Request Headers

​
Api-Key
string
required
apiKey (merchant credential, bound to IP whitelist)
​
Timestamp
string
required
Unix timestamp in milliseconds. The deviation from the server time must be within 60 seconds, and future timestamps are not accepted.
​
Access-Token
string
required
Login token (required for all interfaces except Get Token).
​
Content-Type
string
default:"application/json"
Fixed to application/json

​
Request Body

​
card_bin_no
string
Card BIN order number (required in authorization mode).
​
cardholder_no
string
required
Cardholder order number.
​
card_unique_no
string
required
Merchant-side unique card number (max 64 characters).
​
package_no
string
Card package order number (required in credit extension mode).
​
card_type
string
required
Card type, see Appendix Constants - Card Types.
​
address_info
object
Address information (required for physical cards and some virtual cards).
Important Notes:
  • At least one of card_bin_no or package_no must be provided; if both are empty, error code 1004 is returned.
  • For physical cards (card_type = Physical), the entire address_info object cannot be empty, and first_name, last_name, phone_code, phone, and all address fields are required.
  • For virtual cards, address_info may be omitted based on business needs; if provided, it must include postal_code, country, state, city, and address_line1, and these fields will be validated.
  • phone_code must contain digits only and must not include a + sign.
  • Address fields must be filled in English and conform to the address format of the relevant country.

​
Response Parameters

​
code
number
Response status code. 0 indicates success.
​
msg
string
Response message.
​
data
object
Response data.
curl --request POST \
  --url https://sandbox-openplatform.keysecure.io/open-api/v1/card/apply \
  --header 'Content-Type: application/json' \
  --header 'Api-Key: your_api_key' \
  --header 'Timestamp: 1716307200000' \
  --header 'Access-Token: your_access_token' \
  --data '{
    "card_bin_no": "",
    "cardholder_no": "",
    "package_no": "",
    "card_type": "Virtual",
    "card_unique_no": "",
    "address_info": {
      "first_name": "",
      "last_name": "",
      "phone_code": "86",
      "phone": "",
      "postal_code": "",
      "country": "CN",
      "state": "",
      "city": "",
      "address_line1": "",
      "address_line2": ""
    }
  }'

{
  "code": 0,
  "msg": "Success",
  "data": {
    "card_no": "",
    "card_unique_no": ""
  }
}