> ## Documentation Index
> Fetch the complete documentation index at: https://docs-payment-merchant.keysecure.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Card List

Queries the card list.

## Request Headers

<ParamField header="Api-Key" type="string" required placeholder="your_api_key">
  apiKey (merchant credential, bound to IP whitelist)
</ParamField>

<ParamField header="Timestamp" type="string" required>
  Unix timestamp in milliseconds. The deviation from the server time must be within 60 seconds, and future timestamps are not accepted.
</ParamField>

<ParamField header="Access-Token" type="string" required placeholder="your_access_token">
  Login token (required for all interfaces except Get Token).
</ParamField>

<ParamField header="Content-Type" type="string" default="application/json">
  Fixed to `application/json`
</ParamField>

<ParamField header="Timezone" type="string" default="UTC+8">
  Timezone, affects the day boundary calculation for `start_time` / `end_time`. Defaults to UTC+8.
</ParamField>

## Request Body

<ParamField body="cardholder_no" type="string">
  Cardholder order number.
</ParamField>

<ParamField body="card_unique_no" type="string">
  Merchant-side unique card number.
</ParamField>

<ParamField body="card_no" type="string">
  Card order number.
</ParamField>

<ParamField body="start_time" type="string" required>
  Start time (`yyyy-MM-dd` or `yyyy-MM-dd HH:mm:ss`).
</ParamField>

<ParamField body="end_time" type="string" required>
  End time (same format as above; interval ≤ 90 days).
</ParamField>

<ParamField body="page" type="number" default="0">
  Query page number. Defaults to `0`.
</ParamField>

<ParamField body="size" type="number" default="10">
  Number of records per page. Defaults to `10` (max 100).
</ParamField>

## Response Parameters

<ResponseField name="code" type="number">
  Response status code. `0` indicates success.
</ResponseField>

<ResponseField name="msg" type="string">
  Response message.
</ResponseField>

<ResponseField name="data" type="object">
  Response data.

  <Expandable title="data">
    <ResponseField name="list" type="object[]">
      Card list.

      <Expandable title="list">
        <ResponseField name="card_no" type="string">Card order number</ResponseField>
        <ResponseField name="card_unique_no" type="string">Merchant-side unique card number</ResponseField>
        <ResponseField name="cardholder_no" type="string">Cardholder order number</ResponseField>
        <ResponseField name="card_type" type="string">Card type, see \[Appendix - Constants] Card Types</ResponseField>
        <ResponseField name="organization" type="string">Card organization</ResponseField>
        <ResponseField name="card_last_no" type="string">Last four digits of card number</ResponseField>
        <ResponseField name="status" type="string">Status, see \[Appendix - Constants] Card Status</ResponseField>
        <ResponseField name="time" type="number">Card creation time (Unix milliseconds)</ResponseField>
      </Expandable>
    </ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
  ```bash Request theme={null}
  curl --request POST \
    --url https://sandbox-openplatform.keysecure.io/open-api/v1/card/list \
    --header 'Content-Type: application/json' \
    --header 'Api-Key: your_api_key' \
    --header 'Timestamp: 1716307200000' \
    --header 'Access-Token: your_access_token' \
    --header 'Timezone: UTC+8' \
    --data '{
      "cardholder_no": "",
      "card_unique_no": "",
      "card_no": "",
      "start_time": "2026-01-01",
      "end_time": "2026-03-31",
      "page": 0,
      "size": 10
    }'
  ```
</RequestExample>

<ResponseExample>
  ```json Response theme={null}
  {
    "code": 0,
    "msg": "Success",
    "data": {
      "list": [{
        "card_no": "",
        "card_unique_no": "",
        "cardholder_no": "",
        "card_type": "Virtual",
        "card_last_no": "",
        "organization": "",
        "status": "Activated",
        "time": 1716307200000
      }]
    }
  }
  ```
</ResponseExample>
