/api/v2/mor/public/users/{userId}/cards/{cardId}/load-requestsCreate or update a load request for a card currently assigned to a user_simple in the API key's merchant.
Records a request and attempts to notify the merchant admin; it does not fund the card. Amount is rounded to two decimal places and must then be between 0.01 and 250000. Note is optional and limited to 500 characters after trimming. An existing pending request is updated. Company scope comes exclusively from the current API key. MOR success and business-error properties use camelCase. Validation may return application/problem+json; authentication may return plain text. The existing sensitive-operation 429 body uses Message, Code and Status. 429 means the configured request limit was exceeded; honor Retry-After when present.
Authentication
Send your API key in the x-api-key header on every request.
Parameters
| Field | Type | Required | Description |
|---|---|---|---|
| userId (path) | integer (int32) | Yes | |
| cardId (path) | integer (int32) | Yes | |
| Idempotency-Key (header) | string | No | Optional for existing clients; strongly recommended for every mutation. Use a unique key per company/business operation and reuse it with the identical method, path, query, content type and body on retry. Completed requests replay the original status/body, including 207 and errors. A different request returns 409 IDEMPOTENCY_KEY_CONFLICT. A running/interrupted request returns 409 IDEMPOTENCY_OUTCOME_PENDING; reconcile, never switch keys to bypass it. Records have no automatic expiry. No key means legacy behavior without replay protection. LabelPrefix is not a deduplication key. |
Request body
application/json
| Field | Type | Required | Description |
|---|---|---|---|
| Amount | unknown | No | |
| Note | string | No |
Responses
200 — OK
| Field | Type | Required | Description |
|---|---|---|---|
| id | unknown | No | |
| cardId | unknown | No | |
| requestedByUserId | unknown | No | |
| requestedByName | string | No | |
| requestedByEmail | string | No | |
| amount | unknown | No | |
| currency | string | No | |
| status | string | No | |
| note | string | No | |
| adminEmailSent | boolean | No | |
| createdAt | string (date-time) | No | |
| updatedAt | string (date-time) | No |
400 — Bad Request
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
401 — Unauthorized
| Field | Type | Required | Description |
|---|---|---|---|
| type | string | No | |
| title | string | No | |
| status | unknown | No | |
| detail | string | No | |
| instance | string | No |
403 — Forbidden
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
404 — Not Found
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
409 — Conflict
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
429 — Too Many Requests
| Field | Type | Required | Description |
|---|---|---|---|
| type | string | No | |
| title | string | No | |
| status | unknown | No | |
| detail | string | No | |
| instance | string | No |
500 — Internal Server Error
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
503 — Service Unavailable
| Field | Type | Required | Description |
|---|---|---|---|
| message | string | No | |
| code | string | No |
Example request
curl -X POST "https://{base_url}/api/v2/mor/public/users/{userId}/cards/{cardId}/load-requests" \
-H "x-api-key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{}'This page is generated from the live OpenAPI specification and always matches the current API.