GET/api/v2/mor/public/cards/page

List a bounded page of merchant cards using stored balances. The original GET /cards remains unchanged.

Company scope comes exclusively from the current API key. MOR success and business-error properties use camelCase. Validation may return application/problem+json; authentication may return plain text. The existing sensitive-operation 429 body uses Message, Code and Status. 429 means the configured request limit was exceeded; honor Retry-After when present. Page defaults to 1 and pageSize to 25, clamped to 1–100. Data uses stored balances; GET /cards retains the existing full-list refresh behavior.

Authentication

Send your API key in the x-api-key header on every request.

Parameters

Request parameters
FieldTypeRequiredDescription
page (query)unknownNo
pageSize (query)unknownNo
assignedUserId (query)unknownNo

Responses

200 — OK

Response 200 fields
FieldTypeRequiredDescription
dataarray of objectNo
paginationobjectNo
balanceSourcestringNoStored balances; this endpoint does not refresh the provider portfolio.

400 — Bad Request

Response 400 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

401 — Unauthorized

Response 401 fields
FieldTypeRequiredDescription
typestringNo
titlestringNo
statusunknownNo
detailstringNo
instancestringNo

403 — Forbidden

Response 403 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

404 — Not Found

Response 404 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

409 — Conflict

Response 409 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

429 — Too Many Requests

Response 429 fields
FieldTypeRequiredDescription
typestringNo
titlestringNo
statusunknownNo
detailstringNo
instancestringNo

500 — Internal Server Error

Response 500 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

503 — Service Unavailable

Response 503 fields
FieldTypeRequiredDescription
messagestringNo
codestringNo

Example request

curl -X GET "https://{base_url}/api/v2/mor/public/cards/page" \
  -H "x-api-key: YOUR_API_KEY"

This page is generated from the live OpenAPI specification and always matches the current API.