Skip to main content
POST
Request a card

Authorizations

X-API-Key
string
header
required

User API key authentication. Create a key under Settings → API keys in the Slash dashboard (https://app.slash.com/global-settings/api-keys) and send the x-legal-entity header naming the legal entity to act on with every request. Keys scoped to a legal entity are rejected with 403 user_api_key_required.

Headers

X-Idempotency-Key
string
required

Unique caller-generated key for one create request. Once an authenticated, schema-valid request reaches the operation, the key is permanently consumed for that operation and legal entity whether the operation succeeds or fails. Reusing it in that scope returns 409 and never replays a response, unlike API v1, which replays the original response for a matching key.

Required string length: 1 - 255

The legal entity to act on. Required on every request; a user API key can act on any legal entity its user has access to.

Pattern: ^le_[a-zA-Z0-9]+$

Body

application/json
type
enum<string>
required
Available options:
virtual
name
string
required
Required string length: 1 - 255
accountId
string

The account to request the card on. Required when the legal entity has more than one card account.

virtualAccountId
string

Defaults to the account's primary virtual account.

cardGroupId
string
requestedLimit
CardRequestLimit · object
memo
string
Maximum string length: 1000

Response

The card request.

A request for a card that an approver decides on in Slash.

id
string
required

Card request id with the card_request_ prefix.

Example:

"card_request_2rj4l7hmrrrcv"

status
enum<string>
required

approved requests issue their card shortly after; cardId is set once it exists.

Available options:
pending,
approved,
rejected,
canceled,
expired
type
enum<string>
required
Available options:
virtual,
physical
name
string
required
Example:

"Ads – Meta"

accountId
string
required
Example:

"sa_group_2rj4l7hmrrrcv"

requesterUserId
string
required
Example:

"u_2rj4l7hmrrrcv"

createdAt
string<date-time>
required
virtualAccountId
string
Example:

"subaccount_2rj4l7hmrrrcv"

cardGroupId
string
Example:

"card_group_2rj4l7hmrrrcv"

requestedLimit
CardRequestLimit · object
memo
string
cardId
string

The card issued for the request.

Example:

"c_2rj4l7hmrrrcv"

resolvedAt
string<date-time>