How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Barclays

Barclays Card Control API

Read and change the controls a cardholder has on a Barclaycard — freeze and unfreeze the card and manage the transaction-type and channel restrictions applied to it.

Documentation Provider Profile APIs.io OpenAPI GitHub

Barclays Card Control API is one of 30 APIs that Barclays publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Card Controls, Credit Cards, and Security. The published artifact set on APIs.io includes API documentation, an API reference, and an OpenAPI specification.

This API exposes 3 operations across 3 paths, and defines 16 schemas. It is described by OpenAPI 3.1.0, at version 1.0.

3 operations 3 paths 16 schemas 1 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
1.0
Authentication
OAuth 2.0
Resource Areas
1

Authentication & Security 1

Barclays Card Control API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (ExternalTiaaUsCCAuth) using the clientCredentials flow, exposing 2 scopes.

  • ExternalTiaaUsCCAuth — OAuth2.0 Client Credentials Grant authentication using TIAA-US for external APIs

Paths & Operations 3

Across 3 paths, the API surfaces 3 operations — 1 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Card Controls API 3

API for locking and unlocking cards and retrieving card lock/unlock status based on account ID with fraud verification.

POST
/cards/accounts/{accountId}/unlock-card
Unlock a card for an account
unlockCard 4 params body → 200400401500403404503428
POST
/cards/accounts/{accountId}/lock-card
Lock a card for an account
lockCard 4 params body → 200400401500403404503428
GET
/cards/accounts/{accountId}/card-lock-status
Retrieve lock/unlock status for all cards in the account
getCardControlStatus 3 params → 200400401500403404503

Schemas 16

The contract defines 16 schemas that model the data the API accepts and returns. The most detailed are ErrorType (5 properties), CardControlStatusDetailType (3 properties), LockUnlockCardDetailType (3 properties), CardIdentifier (2 properties). Each schema is shown below with its type and property counts.

CardControlStatusResponseDataItem
object
Response containing lock/unlock status for all cards in the account. Response Structure: - Returns a list of all cards and their current lock/unlock status - E…
1 property
LockCardResponseData
object
Response data containing the result of a card lock operation. Response Structure: - Returns lock status for the requested card - Includes card identifier to ma…
1 property
UnlockCardRequestData
object
Request data for unlocking a card with fraud assessment. Purpose: - Unlock a card by providing card identifier (external customer ID and card last 4 digits) -…
1 property 1 required
CardIdentifier
object
Unique card identifier using external customer ID and last 4 digits
2 properties 2 required
ErrorResponseType
object
An API error response.
2 properties
CardControlStatusResponseData
object
Response data containing lock/unlock status for all cards in the account. Response Structure: - Returns status for all cards associated with the account - Incl…
1 property
UnlockCardRequestDataItem
object
Card unlock request payload containing the card to unlock. Purpose: - Identify the card to unlock using external customer ID and card last 4 digits - Used as i…
1 property 1 required
LockCardRequestDataItem
object
Card lock request payload containing the card to lock. Purpose: - Identify the card to lock using external customer ID and card last 4 digits - Used as input f…
1 property 1 required
ErrorType
object
Message details - additional operation execution information.
5 properties 3 required
UnlockCardControlResponseDataItem
object
Response containing unlock result for a single card. Response Structure: - Contains card identifier, customer role, and lock status - isLock will be false afte…
1 property
LockUnlockCardDetailType
object
Card lock/unlock result details for a single card
3 properties
LockCardControlResponseDataItem
object
Response containing lock result for a single card. Response Structure: - Contains card identifier, customer role, and lock status - isLock will be true after a…
1 property
CardControlStatusDetailList
array
List of lock/unlock status for each card in the account
CardControlStatusDetailType
object
Lock/unlock status details for a single card
3 properties 3 required
LockCardRequestData
object
Request data for locking a card with fraud assessment. Purpose: - Lock a card by providing card identifier (external customer ID and card last 4 digits) - Frau…
1 property 1 required
UnlockCardResponseData
object
Response data containing the result of a card unlock operation. Response Structure: - Returns unlock status for the requested card - Includes card identifier t…
1 property

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

barclays-card-control-openapi.yml Raw ↑

Other APIs Barclays publishes across the network.

Barclays Smartpay Web Payment API
AE Profile APIs.io
Barclays Bank Ireland Confirmation of Funds API
AE Profile APIs.io
Barclays Account and Transactions API
AE Profile APIs.io
Barclays Bank Ireland Account Information API
AE Profile APIs.io
Barclays Bank Ireland Payment Initiation API
AE Profile APIs.io
Barclays Confirmation of Funds API
AE Profile APIs.io
Barclays Dynamic Client Registration API
AE Profile APIs.io
Barclays Event Notification API
AE Profile APIs.io
Barclays Payment Initiation API
AE Profile APIs.io
Barclays ATM Locator API
AE Profile APIs.io
Barclays Branch Locator API
AE Profile APIs.io
Barclays FCA Service Metrics API
AE Profile APIs.io
#Card Controls#Credit Cards#Security
← Back to B APIs
API Details
ID
barclays:card-control-api
Docs
https://developer.barclays.com/apis/card-control/fb39ed1a-d10a-47f7-92bb-7ecbb6bbe39e.bdn/documentation
Provider
Barclays
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=card-control-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/card-control-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Barclays Card Control API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.