> ## Documentation Index
> Fetch the complete documentation index at: https://dev.enterprise.moonpay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a card



## OpenAPI

````yaml https://api.sandbox.iron.xyz/spec/2026-07-01 post /cards
openapi: 3.1.0
info:
  description: The Stablecoin Payment Network
  title: Iron API - Sandbox
  version: '2026-07-01'
servers:
  - url: https://api.sandbox.iron.xyz/api
security: []
tags:
  - description: >-
      Wallet and bank account registration


      Every wallet address that interacts with Iron must be registered (linked)
      to a customer **before** it can be used in any flow — onramp, offramp, or
      swap. This is a regulatory requirement under the **Travel Rule**, which
      obliges Virtual Asset Service Providers to exchange originator and
      beneficiary information for crypto transfers.


      Iron supports two wallet types:


      - **Self-hosted wallets** — the customer controls the private key.
      Registration requires a signed proof-of-ownership message.

      - **Hosted wallets** — the wallet is custodied by another VASP (e.g.
      Coinbase, Kraken). Registration requires the VASP's DID so Iron can
      exchange travel-rule data with the custodian.


      Similarly, fiat bank accounts must be registered before they can receive
      offramp payouts.
    name: Addresses
  - description: Operations on Autoramp
    name: Autoramp
  - description: Cards service operations
    name: Cards
  - description: Operations on Chronicle collateral
    name: ChronicleCollateral
  - description: Operations on Currencies
    name: Currencies
  - description: Operations on Customers
    name: Customer
  - description: Operations on Exchange Rate
    name: ExchangeRate
  - description: Operations on Fee Profiles
    name: FeeProfiles
  - description: Operations for Sandbox Testing
    name: Sandbox
  - description: Operations on SSE
    name: Sse
  - description: Operations on Terms and Conditions
    name: TermsAndConditions
  - description: Operations on Webhooks
    name: Webhooks
paths:
  /cards:
    post:
      tags:
        - Cards
      summary: Create a card
      operationId: createCard
      parameters:
        - deprecated: false
          description: Optional sub-partner UUID; issues the card under that sub-partner
          explode: true
          in: header
          name: X-SUB-PARTNER-ID
          required: false
          schema:
            type: string
        - deprecated: false
          description: >-
            A unique creation key; a retry with the same key returns the same
            card.
          explode: true
          in: header
          name: Idempotency-Key
          required: true
          schema:
            type: string
        - $ref: '#/components/parameters/XApiVersion'
      requestBody:
        content:
          application/json; charset=utf-8:
            schema:
              $ref: '#/components/schemas/CreateCardRequest'
        required: true
      responses:
        '201':
          content:
            application/json; charset=utf-8:
              schema:
                $ref: '#/components/schemas/Card'
          description: The card was issued
components:
  parameters:
    XApiVersion:
      description: >-
        Selects the API version for this request, as an ISO date (`YYYY-MM-DD`).
        Omit to use the default version (`2025-03-13`). Supported versions:
        2025-03-13, 2026-07-01, 2026-08-01, 2026-10-01, 2026-10-15.
      in: header
      name: X-API-Version
      required: false
      schema:
        type: string
        x-default: '2026-07-01'
  schemas:
    CreateCardRequest:
      properties:
        currencies:
          $ref: '#/components/schemas/CardCurrencies'
        customer_id:
          description: The customer the card is issued to
          format: uuid
          type: string
        form_factor:
          $ref: '#/components/schemas/CardFormFactor'
        tier:
          $ref: '#/components/schemas/CardTier'
        wallet_id:
          description: The wallet the card spends from
          format: uuid
          type: string
      required:
        - customer_id
        - wallet_id
        - form_factor
        - tier
        - currencies
      title: CreateCardRequest
      type: object
    Card:
      properties:
        created_at:
          format: date-time
          type: string
        currencies:
          $ref: '#/components/schemas/CardCurrencies'
        customer_id:
          description: The customer the card belongs to
          format: uuid
          type: string
        customer_type:
          $ref: '#/components/schemas/CardCustomerType'
        exp_month:
          type: string
        exp_year:
          type: string
        form_factor:
          $ref: '#/components/schemas/CardFormFactor'
        id:
          format: uuid
          type: string
        last_four:
          type: string
        status:
          $ref: '#/components/schemas/CardStatus'
        tier:
          $ref: '#/components/schemas/CardTier'
        updated_at:
          format: date-time
          type: string
        wallet_id:
          description: The wallet that funds the card
          format: uuid
          type: string
      required:
        - id
        - customer_id
        - wallet_id
        - form_factor
        - tier
        - customer_type
        - currencies
        - status
        - last_four
        - exp_month
        - exp_year
        - created_at
        - updated_at
      title: Card
      type: object
    CardCurrencies:
      description: The currency combination a card settles in.
      enum:
        - USD
        - USD_ARS
      type: string
    CardFormFactor:
      enum:
        - virtual
        - physical
      type: string
    CardTier:
      enum:
        - standard
        - premium
      type: string
    CardCustomerType:
      enum:
        - consumer
        - business
      type: string
    CardStatus:
      enum:
        - active
        - frozen
        - revoked
        - pending_fulfillment
        - pending_activation
      type: string

````