How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Barclays

Barclays Card Controls API

API for locking and unlocking cards and retrieving card lock/unlock status based on account ID with fraud verification.

Documentation Provider Profile APIs.io OpenAPI GitHub

Barclays Card Controls API is one of 64 APIs that Barclays publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Card Controls API. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 3 operations across 3 paths, and defines 16 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against the base URL https://telesto.api.barclays/open-banking/v3.1.

3 operations 3 paths 16 schemas 1 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://telesto.api.barclays/open-banking/v3.1
Authentication
OAuth 2.0
Resource Areas
1

Authentication & Security 1

Barclays Card Controls API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (ExternalTiaaUsCCAuth) using the clientCredentials flow, exposing 2 scopes.

  • ExternalTiaaUsCCAuth — OAuth2.0 Client Credentials Grant authentication using TIAA-US for external APIs

Paths & Operations 3

Across 3 paths, the API surfaces 3 operations — 1 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Card Controls API 3

API for locking and unlocking cards and retrieving card lock/unlock status based on account ID with fraud verification.

POST
/cards/accounts/{accountId}/unlock-card
Unlock a card for an account
unlockCard 4 params body → 200400401500403404503428
POST
/cards/accounts/{accountId}/lock-card
Lock a card for an account
lockCard 4 params body → 200400401500403404503428
GET
/cards/accounts/{accountId}/card-lock-status
Retrieve lock/unlock status for all cards in the account
getCardControlStatus 3 params → 200400401500403404503

Schemas 16

The contract defines 16 schemas that model the data the API accepts and returns. The most detailed are ErrorType (5 properties), CardControlStatusDetailType (3 properties), LockUnlockCardDetailType (3 properties), ErrorResponseType (2 properties). Each schema is shown below with its type and property counts.

UnlockCardControlResponseDataItem
object
Response containing unlock result for a single card. Response Structure: - Contains card identifier, customer role, and lock status - isLock will be false afte…
1 property
ErrorResponseType
object
An API error response.
2 properties
LockCardRequestData
object
Request data for locking a card with fraud assessment. Purpose: - Lock a card by providing card identifier (external customer ID and card last 4 digits) - Frau…
1 property 1 required
LockUnlockCardDetailType
object
Card lock/unlock result details for a single card
3 properties
ErrorType
object
Message details - additional operation execution information.
5 properties 3 required
LockCardRequestDataItem
object
Card lock request payload containing the card to lock. Purpose: - Identify the card to lock using external customer ID and card last 4 digits - Used as input f…
1 property 1 required
CardControlStatusResponseData
object
Response data containing lock/unlock status for all cards in the account. Response Structure: - Returns status for all cards associated with the account - Incl…
1 property
LockCardResponseData
object
Response data containing the result of a card lock operation. Response Structure: - Returns lock status for the requested card - Includes card identifier to ma…
1 property
CardIdentifier
object
Unique card identifier using external customer ID and last 4 digits
2 properties 2 required
CardControlStatusDetailType
object
Lock/unlock status details for a single card
3 properties 3 required
LockCardControlResponseDataItem
object
Response containing lock result for a single card. Response Structure: - Contains card identifier, customer role, and lock status - isLock will be true after a…
1 property
UnlockCardRequestData
object
Request data for unlocking a card with fraud assessment. Purpose: - Unlock a card by providing card identifier (external customer ID and card last 4 digits) -…
1 property 1 required
UnlockCardResponseData
object
Response data containing the result of a card unlock operation. Response Structure: - Returns unlock status for the requested card - Includes card identifier t…
1 property
CardControlStatusResponseDataItem
object
Response containing lock/unlock status for all cards in the account. Response Structure: - Returns a list of all cards and their current lock/unlock status - E…
1 property
CardControlStatusDetailList
array
List of lock/unlock status for each card in the account
UnlockCardRequestDataItem
object
Card unlock request payload containing the card to unlock. Purpose: - Identify the card to unlock using external customer ID and card last 4 digits - Used as i…
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

barclays-card-controls-api-api-openapi.yml Raw ↑

Other APIs Barclays publishes across the network.

Barclays Smartpay Web Payment API
AE Profile APIs.io
Barclaycard Smartpay Connect API
AE Profile APIs.io
Barclays Corporate Payment Initiation API
AE Profile APIs.io
Barclays Balances and Transactions Reporting API
AE Profile APIs.io
Barclays Account Access Consents API
AE Profile APIs.io
Barclays Accounts API
AE Profile APIs.io
Barclays Apply Product External API OAS API
AE Profile APIs.io
Barclays Atms API
AE Profile APIs.io
Barclays Balances API
AE Profile APIs.io
Barclays Beneficiaries API
AE Profile APIs.io
Barclays Branches API
AE Profile APIs.io
Barclays Business Current Accounts API
AE Profile APIs.io
#Card Controls API
← Back to B APIs
API Details
ID
barclays:barclays-card-controls-api-api
Base URL
https://telesto.api.barclays/open-banking/v3.1
Docs
https://developer.barclays.com/apis/barclaycard-smartpay-web-payment/b82fda37-a434-4cc3-abde-0c6ba126fd2e.bdn/documentation
Provider
Barclays
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=barclays-card-controls-api-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/barclays-card-controls-api-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Barclays Card Controls API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.