Skip to main content
POST
/
cards
/
order
Order cards
curl --request POST \
  --url https://apigwuat.corpay.com/cards/order \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "customerAccountNumber": "<string>",
  "cards": [
    {
      "additionalEmbossing": "new purchase",
      "cardAddress": {
        "addressLines": "Unit 10, Industrial Estate Oxford Road",
        "city": "Oxford",
        "country": "United Kingdom",
        "countryCode": "GBR",
        "region": "Oxfordshire",
        "zipCode": "OX1 3PA"
      },
      "cardCategoryId": 1,
      "cardContact": {
        "emailAddress": "jane.smith@example.com",
        "firstName": "Jane",
        "lastName": "Smith",
        "middleName": "B",
        "mobilePhone": "+447700900124",
        "telephone": "+441234567891"
      },
      "cardGroupId": 12,
      "cardPIN": "2345",
      "cardTypeId": 1234,
      "driverName": "James Smith",
      "fuelProductRestrictionId": 1,
      "isDriverEmbossed": true,
      "isVRNEmbossed": true,
      "products": [
        {
          "productId": 101
        },
        {
          "productId": 102
        }
      ],
      "purchaseCategoryId": 12,
      "vehicleRegNumber": "AB12 CDE"
    }
  ]
}
'
{
  "orderReference": "ORD-20260117-001"
}

Documentation Index

Fetch the complete documentation index at: https://api.corpay.com/llms.txt

Use this file to discover all available pages before exploring further.

Performance expectations:
p50: 300 ms, p99: 900 ms.
Measured on successful requests (2xx), server-side only.
How to interpret these metrics

Authorizations

Authorization
string
header
required

Use OAuth2 client credentials to obtain a bearer token.

UAT token endpoint: POST https://apigwuat.corpay.com/keycloak/realms/longship/protocol/openid-connect/token

Example:

curl --location 'https://apigwuat.corpay.com/keycloak/realms/longship/protocol/openid-connect/token' \
--header 'accept: application/json' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=.......' \
--data-urlencode 'client_secret=......'

Body

application/json
customerAccountNumber
string
required
cards
object[]
required

Response

Order accepted (async)

orderReference
string
required