Skip to main content
Card Controls objects are used to configure the restrictions and capabilities of associated Card and Card Product objects. Card Controls may be configured to restrict the use of a debit card to a particular category of vendor, or to limit the amount of money spent or withdrawn in a particular time period.

The Card Controls Object

Card Control Configuration Types

All card controls configuration objects must have these attributes:

Merchant Restriction

merchant_restriction configurations allow you to allow or disallow the use of a Card or Card Product at specific categories of merchants. When a merchant restriction is created to allow certain merchant category codes (MCCs) or merchant IDs (MIDs), only transaction at vendors listed with those MCCs or MIDs in the card network will be approved. All other transactions will be declined. The call must have an array of MCCs or MIDs passed, or a combination of the two.

Spend Velocity Restriction

spend_limit configurations allow you to configure a maximum spending amount within a timeframe (e.g. no more than $1000 in authorized transactions within 24 hours).

Withdrawal Velocity Restriction

withdrawal_limit configurations allow you to configure a maximum amount of ATM withdrawals within a timeframe (e.g. not more than $400 in ATM transactions within 24 hours).

Adding Card Controls to a Card or Card Product

The create and update endpoints for Card and Card Product objects accept a card_controls attribute and will associate them with the resource being created or updated.

Adding Merchant Restriction Card Control to a Card

The following example is a call that can be made to add a merchant restriction that will disallow mccs and mids on a specific card.
Example Request
Example Response

Adding Spend Velocity Restriction Card Control to a Card

The following example is a call that can be made to add a spend velocity restriction of $100 on a daily interval that resets at 11:00 PM Eastern Time.
Example Request
Example Response

Remove Card Controls from a Card or Card Product

To remove the association of card controls from a Card or Card Product object, post an empty control configuration:
Example Request
Example Response