| Tool | What it does | Upstream |
|---|---|---|
list_cards | List the organization’s cards (debit, credit, virtual, flash, advertising), paginated. Returns id, last digits, status, nickname, holder, card level, and bank account id. | List cards |
create_card | Create one card. card_level selects the variant (standard / plus / metal / virtual / virtual_partner / flash / advertising) and the required-field set. Physical cards trigger SCA. | Create a card |
update_card | Update one of two properties on a card: nickname (a string) or options (the four flags atm_option, nfc_option, online_option, foreign_option, all required together). Physical cards reject NFC option changes. | Update a card’s nickname / options |
change_card_status | Composite lifecycle transition. Set exactly one of lock (reversible), unlock (owners and admins only), lost, stolen, discard (all irreversible). | Lock, Unlock, Report lost, Report stolen, Discard |
get_card_iframe_url | Returns a short-lived URL that renders the card’s PAN, expiry, and CVV inside an iframe. The URL is a credential; treat it like a password. | Retrieve a card iframe URL |
Creating a card or changing its lifecycle can trigger Strong Customer Authentication in the Qonto mobile app. Your assistant will tell you when to approve.
Lock the card nicknamed “Ads”. Create a virtual card called “Subscriptions” with a €200 monthly limit, restricted to online payments. Show me the PAN of card ending 4242 so I can paste it into a form.
Related
- Card requests (employees asking for a card their manager approves) live under Requests.