Skip to main content
POST
Request card access (evaluates policy and returns grant/deny decision)

Authorizations

Authorization
string
header
required

API key (sk_sandbox_* / sk_test_* / sk_live_*) or Agent token (at_* / at_dlg_*)

Path Parameters

cardId
string
required

Body

application/json
intentId
string
purpose
string
expectedAmount
number
reason
string

Response

Access granted

id
string
cardId
string
agentId
string
intentId
string | null
decision
enum<string>
Available options:
granted,
denied
reasons
string[]
expiresAt
string<date-time> | null
createdAt
string<date-time>