> ## Documentation Index > Fetch the complete documentation index at: https://partner-docs.contro.dev/llms.txt > Use this file to discover all available pages before exploring further. # List cards > List cards for this partner ## OpenAPI ````yaml /partner-openapi.json get /partner/cards openapi: 3.1.0 info: title: Contro Partner API version: 1.0.0 license: name: Proprietary url: https://contro.me/terms description: >- The Contro Partner API enables Card-as-a-Service (CaaS) partners to programmatically issue cards, manage cardholders, and monitor transactions. ## Authentication All requests require your partner API key in the `x-contro-api-key` header: ``` x-contro-api-key: sk_live_... ``` Use `sk_test_*` keys for sandbox and `sk_live_*` keys for production. ## Rate Limits The API allows 1,000 requests per minute per API key. When exceeded, responses return HTTP 429 with a `Retry-After` header. ## Pagination List endpoints use page-based pagination: ```json { "data": [...], "page": 1, "limit": 20, "total": 137 } ``` Pass `?page=2&limit=20` to paginate. `limit` accepts 1–100 (default 20); `page` defaults to 1. ## Errors All errors return: ```json { "success": false, "error": "Human-readable message" } ``` servers: - url: https://api.contro.me/v1 description: Production server for live traffic - url: https://stg-api.contro.dev/v1 description: Sandbox environment for testing security: - apiKey: [] paths: /partner/cards: get: tags: - Partner - Cards summary: List cards description: List cards for this partner operationId: listCards parameters: - schema: type: integer minimum: 1 default: 1 description: Page number required: false description: Page number name: page in: query - schema: type: integer minimum: 1 maximum: 100 default: 20 description: Number of items per page (1-100) required: false description: Number of items per page (1-100) name: limit in: query - schema: type: string enum: - created - active - frozen - cancelled description: Filter by card status example: active required: false description: Filter by card status name: status in: query responses: '200': description: List of cards content: application/json: schema: type: object properties: data: type: array items: type: object properties: id: type: string description: Card ID example: card_def456 type: type: string description: 'Card type. One of: virtual, physical' example: virtual brand: type: string description: 'Card network brand. One of: Visa, Mastercard' example: Visa status: type: string description: >- Current card status. One of: created, active, frozen, cancelled example: active nameOnCard: type: - string - 'null' description: Name embossed on the card, or null for virtual cards example: JANE DOE limit: type: - number - 'null' description: >- Deprecated. Mirrors `spendControl.sales.allTime`. Use `spendControl` for per-transaction-type velocity caps. example: 5000 deprecated: true spendControl: type: - object - 'null' properties: sales: type: object properties: perTransaction: type: - number - 'null' description: >- Maximum amount per single transaction. null/omit = no cap. example: 200 daily: type: - number - 'null' description: Maximum total amount per calendar day. example: 1000 monthly: type: - number - 'null' description: Maximum total amount per calendar month. example: 20000 allTime: type: - number - 'null' description: >- Maximum total amount over the card's lifetime. example: 50000 description: Caps for purchase (point-of-sale) transactions. cash: type: object properties: perTransaction: type: - number - 'null' description: >- Maximum amount per single transaction. null/omit = no cap. example: 200 daily: type: - number - 'null' description: Maximum total amount per calendar day. example: 1000 monthly: type: - number - 'null' description: Maximum total amount per calendar month. example: 20000 allTime: type: - number - 'null' description: >- Maximum total amount over the card's lifetime. example: 50000 description: Caps for cash withdrawal (ATM) transactions. spent: type: object properties: sales: type: object properties: perTransaction: type: - number - 'null' description: >- Maximum amount per single transaction. null/omit = no cap. example: 200 daily: type: - number - 'null' description: Maximum total amount per calendar day. example: 1000 monthly: type: - number - 'null' description: Maximum total amount per calendar month. example: 20000 allTime: type: - number - 'null' description: >- Maximum total amount over the card's lifetime. example: 50000 description: >- Velocity caps for one transaction-type bucket. cash: type: object properties: perTransaction: type: - number - 'null' description: >- Maximum amount per single transaction. null/omit = no cap. example: 200 daily: type: - number - 'null' description: Maximum total amount per calendar day. example: 1000 monthly: type: - number - 'null' description: Maximum total amount per calendar month. example: 20000 allTime: type: - number - 'null' description: >- Maximum total amount over the card's lifetime. example: 50000 description: >- Velocity caps for one transaction-type bucket. description: >- Read-only accrued spend per bucket. Returned by Get card; ignored on update. description: >- Per-transaction-type velocity caps and accrued spend. null/omit = no caps. last4: type: - string - 'null' description: Last 4 digits of the card number example: '0000' programId: type: - string - 'null' description: Card program this card was issued from example: prog_xyz createdAt: type: string description: ISO 8601 creation timestamp example: '2026-03-20T14:30:00Z' required: - id - type - brand - status - nameOnCard - limit - last4 - programId - createdAt total: type: number page: type: number limit: type: number required: - data - total - page - limit '400': description: Bad Request '401': description: Unauthorized '404': description: Not Found '429': description: Rate Limited '500': description: Internal Server Error components: securitySchemes: apiKey: type: apiKey in: header name: x-contro-api-key description: Partner API key (sk_live_* for production, sk_test_* for sandbox) ````