​
Overview

This documentation covers the main Cardcore API workflows and provides interactive endpoint pages for testing against the sandbox environment. The API is organized into four main areas:
  • Institution OAuth: application management, token exchange, and authorization flows.
  • Institution Cards: card issuance, activation, PIN operations, renewal, digitization, and 2FA enrollment.
  • Institution Users: invitation, update, permissions, and user-management operations.
  • Utility: bank lookup, name enquiry, and card import.

​
What You Can Do Here

  • Read a concise guide for authentication, environment setup, and testing.
  • Open each endpoint in the API reference and send requests directly from Mintlify once you set the correct server host and credentials.
  • Use the provided request payloads as a starting point for testing.

​
Before You Send Live Requests

  • All endpoint playgrounds are preconfigured to use https://sandbox-api.cardcore.cloud.
  • Use a valid institutionToken for protected institution endpoints.
  • Use x-api-key for the card import utility endpoint.