Mastercard Cards API
The Cards API from Mastercard — 7 operation(s) for cards.
Mastercard Cards API is one of 172 APIs that Mastercard publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Cards. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, code examples, a changelog, a support channel, and a getting-started guide.
This API exposes 2 operations across 2 paths, and defines 105 schemas. It is described by OpenAPI 3.2.0, at version 2.0.0.
Requests are made against 5 base URLs: https://sandbox.mi.api.mastercard.com/mi-issuing-sandbox/card-issuance/, https://mtf.mea.api.mastercard.com/mi-issuing/card-issuance/, https://mtf.sa.api.mi.mastercard.com/mi-issuing/card-issuance/, https://mea.api.mastercard.com/mi-issuing/card-issuance/, https://sa.api.mi.mastercard.com/mi-issuing/card-issuance/.
2 operations
2 paths
105 schemas
2 POST
Metadata
The identity and technical contract details declared by the specification.
Paths & Operations 2
Across 2 paths, the API surfaces 2 operations — 2 POST. Each is listed below with its method, path, parameters, and response codes.
Cards 2
POST
/prepaid-cards
Mastercard prepaid Card Issuance - Issue Prepaid Card to Existing or New…
POST
/debit-cards
Mastercard debit Card Issuance - Issue Debit Card to Existing or New Client
Schemas 105
The contract defines 105 schemas that model the data the API accepts and returns. The most detailed are Occupation (11 properties), BasePerson (10 properties), DebitCardDetails (9 properties), Address (8 properties). Each schema is shown below with its type and property counts.
BaseAccount
object
3 properties
SourceSystemClientMapping
object
Client information mapping with source system identifiers
3 properties
CbsCustomer
object
1 property
LegalDocument
object
Legal document that is required for KYC.
4 properties
RequestValidityTime
object
Validity of the API request. It protects the API from unauthorized request or man-in-the-middle (MITM) attacks For example, if the validity of the API request…
1 property
1 required
EmbossedName
string
Embossed name of the client. Conditional Mandatory field - Required while creating new client.
PrimaryCard
object
3 properties
ErrorsInfo
object
1 property
1 required
TravelDetails
object
Travel Information, Applicable only if the client has a prepaid card.
4 properties
Errors
object
1 property
1 required
Mobile
object
Mobile number details
2 properties
NewCardDetails
object
1 property
PhoneNumber2
string
Single or Multiple or Range of contact numbers. for example, 8120556678/68/58. This field is required if configured as Business Mandatory .
Language
string
Language preference. Language tags should be in the 'Language-Region' format as described by Internet Engineering 'Task Force (IETF) BCP 47' standard. Conditio…
ReuterReferenceNumber
string
Reuter reference number value. This field is required if configured as Business Mandatory .
NewClient
object
1 property
Client
object
5 properties
ConditionalCardAlias
string
Alias to be assigned to the newly issued card. Conditional Mandatory field - Required if the CNA functionality is turned on for the institution. OR This field…
PermanentAddress
object
1 property
ClientType
string
Indicates client type Conditional Mandatory field - Required while creating new client. Valid values are configured on 'Card Management Institution Parameter S…
Address
object
8 properties
DebitCardDetails
object
9 properties
1 required
RegisteredContacts
object
3 properties
NewCard
object
8 properties
2 required
MaritalStatus
string
Indicates Marital Status of the client. Conditional Mandatory field - Required while creating new client. Valid values are configured on 'Card Management Insti…
ConditionalPrimaryClientCode
string
Unique code of the existing primary client. Conditional Mandatory field - Primary clientCode or cardNumber or cardId must be present in the request while reque…
BasicProfile
object
Set of Personally Identifiable Information (PII) associated with a given client.
6 properties
PhoneExtension
string
Extension Number
OfficeContact
object
3 properties
CustomField
object
2 properties
Relation
string
It is the relation of the add-on client with the primary client. Conditional Mandatory field - Add-on 'client code' and relation fields are mutually exclusive…
OnboardingApplicationType
string
Application type indicates the type of card being requested. Valid values: PRIMARY - Issue Primary Card ADDON - Issue Add-On Card SUPPLEMENTARY - Issue Supplem…
RiskCategory
string
Client's risk category. This field is required if configured as Business Mandatory . Valid values: NONE - Insignificant or no risk LOW - Low risk MODERATE - Mo…
EducationQualification
string
Educational Qualification. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Parameter S…
StatementDeliveryOption
string
Statement delivery options. Conditional Mandatory field - Required while creating new client. Valid values are configured on 'Card Management Institution Param…
CardPlanCode
string
Plan assigned to the card. If provided, the value must be part of the selected program code and included in the card or account plan configuration in CSR porta…
CurrentContact
object
2 properties
PrepaidCardProfile
object
5 properties
ConditionalCardId
string
Unique value to identify a card. Conditional Mandatory field - Primary clientCode or cardNumber or cardId must be present in the request while requesting card…
ProgramCode
string
Program code of a card
LegalDocumentType
string
Legal Document Type Conditional Mandatory field - Required when type is configured in document checklist plan associated with program. Valid values are configu…
FreshCard
object
7 properties
1 required
DebitClient
object
4 properties
DeliveryMode
string
Client's preferred delivery mode. Application request with instant card true, delivery mode should be Branch. Valid values are configured on "Card Management I…
BasePerson
object
10 properties
BaseNewCardDetails
object
8 properties
1 required
Occupation
object
11 properties
BaseSearchCard
object
Base Search Card
6 properties
Cvv
string
Card verification value (CVV), card security code (CSC), card verification code (CVC), or card code verification (CCV) found on the back of a card that provide…
EmployerType
string
Type of employer. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Parameter Setup Syst…
CardNumber
string
Unique number (PAN) assigned to the card. This number might be masked based on the API masking configuration settings of the institution in the MI Issuing cust…
ConditionalAddonClientCode
string
Unique code of the existing add-on client. Conditional Mandatory field - Add-on clientCode and relation fields are mutually exclusive.
CardPromoPlanCode
string
Promo plan assigned to the card. If provided, the value must be present in card promotion plan configuration.
CardExpiry
string
Expiry date of the card in "MM/YY" format. This field is not applicable for LVC cards. The 'expiry' and 'expiry Date Time' fields are mutually exclusive, which…
BaseCardWithSecrets
object
Card information
3 properties
Title
string
The title or salutation that is added before the name of client. Conditional Mandatory field - Required while creating new client. The valid values are configu…
OccupationType
string
Occupation type of the employee. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Param…
ConditionalPictureCode
string
Picture Code. Conditional Mandatory field - Required while applying 'Picture Card' card for new primary client, if not configured at device plan level.
CardStatus
string
The current status of the card. Valid values: NORMAL - Indicates normal card SUPERVISION - Indicates supervision card CANCELLED - Indicates cancelled card REPL…
AccountPromoPlanCodes
object
1 property
LegalDocuments
array
Set of legal documents associated with a given client that are required for KYC.
PhotoIndicator
string
Indicates whether picture or photo should be printed on the card or default template to be applied. In case of LVC card request, valid value is only NORMAL. Va…
Profile
object
Set of Personally Identifiable Information (PII) associated with a given client.
8 properties
FreshDebitCard
object
Debit Card Details. card number or card id or card packId must exist while issuing existing non personalized card.
4 properties
LVCCard
object
LVC Card information
4 properties
CurrentAddress
object
1 property
ConditionalCardNumber
string
Unique number (PAN) assigned to the existing card. Conditional Mandatory field - Primary clientCode or cardNumber or cardId must be present in the request whil…
DebitCardProfile
object
4 properties
ConditionalProgramCode
string
Program code of a card. Conditional Mandatory field - Required while requesting for PRIMARY card.
Designation
string
Designation of the employee. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Parameter…
ClientSearchInfo
object
2 properties
NewApplication
object
2 properties
1 required
CustomFields
array
Custom fields array (not recommended to be used)
LvcExpiryDateTime
string
Applicable only for 'LVC' card. The date/time after which the 'LVC' card should be considered as expired or invalid. The 'expiry' and 'expiry Date Time' fields…
Application
object
4 properties
1 required
CardPackId
string
Card pack id is the unique id assigned to the physical packet that contains the card for delivery to the client or branch. Usually paired cards are delivered i…
ErrorMessage
object
5 properties
4 required
CardType
string
The type indicates the card category. Valid values: EMVCARD MAGNETICSTRIPECARD STATICVIRTUALCARD LIMITEDVALIDITYVIRTUALCARD NFCPAYPASS NFCEMVPAYPASS NFCMAGSTRI…
ClientCode
string
Unique code of the client
CbsAccountType
string
Bank ISO Account Type in CBS. Conditional Mandatory field - Required while linking new debit account. Possible values configured in CSR portal on "Card Managem…
Email
string
Email address. This field is required if configured as Business Mandatory .
PrepaidCardApplication
object
2 properties
CardId
string
Unique value to identify a card
ProfessionType
string
Profession Type. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Parameter Setup Syste…
ConditionalPhotoCode
string
Photo Code of client. Conditional Mandatory field - Required while applying 'Photo Card' card.
CardAlias
string
Alias assigned to each card. This attribute is available only if the CNA (Card number alias) functionality is enabled for the institution.
BaseCard
object
Base Card information
3 properties
CardRelationship
string
An indicator at card level to describe type of client associated with the card. Valid values: PRIMARY - Indicates primary card ADDON - Indicates add-on card SU…
AddOnClient
object
2 properties
CobrandNumber
string
Co-brand Number Value. It is also known as Partner Membership Number. This field is required if configured as Business Mandatory .
Gender
string
Indicates Gender of the client. Conditional Mandatory field - Required while creating new client. Valid values are configured on 'Card Management Institution P…
InitialLoad
object
2 properties
EncodedName
string
Applicable only for Physical Card. Encoded name of the client. The value can contain space. For example, John Smith. This field is required if configured as Bu…
AlternateName
string
Alternate name of the client.
Contact
object
2 properties
Person
object
2 properties
AccountNumber
string
Account number linked to the card.
PhoneNumber1
string
Single or Multiple or Range of contact numbers. for example, 9120556677/88/98. This field is required if configured as Business Mandatory .
DebitApplication
object
Contains information about different types of debit cards
1 property
1 required
EmploymentStatus
string
Status of Employment. This field is required if configured as Business Mandatory . Valid values are configured on 'Card Management Institution Parameter Setup…
LodgingMode
string
Lodging Mode. Valid values are configured on 'Card Management Institution Parameter Setup System Codes [ISSS15]' screen for 'Type Id=RESIDENCESTATUS'. Few samp…
CbsAccount
object
Core Banking System Account Info. Applicable for Debit Cards only
4 properties
MailingAddress
string
Client's preferred mailing address. Conditional Mandatory field - Required while creating new client. Valid values: CURRENT, PERMANENT, OFFICE
Kyc
object
3 properties
ClientPreferences
object
6 properties
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Mastercard 12
Other APIs Mastercard publishes across the network.
Mastercard Universal Specification Submission API
Mastercard Account to Account Commerce for Creditor Service Providers
Mastercard Debtor Service Provider Resources API
Mastercard Automatic Billing Updater API
Mastercard Benefit Eligibility Service API
Mastercard Bill Pay API
Mastercard Bill Payment Validator
Mastercard BIN Lookup API
Mastercard Business Payment Controls
Mastercard Carbon Calculator API
Mastercard Carbon Calculator Experience API
Mastercard Checkout Solutions
#Cards
Where this information came from
This is an independent, third-party profile of Mastercard Cards API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.