List card transactions

curl --request GET \
  --url https://api.bitnob.com/api/cards/transactions \
  --header 'X-Auth-Client: <api-key>' \
  --header 'X-Playground-Client-Secret: <api-key>'

const options = {
  method: 'GET',
  headers: {'X-Auth-Client': '<api-key>', 'X-Playground-Client-Secret': '<api-key>'}
};

fetch('https://api.bitnob.com/api/cards/transactions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.bitnob.com/api/cards/transactions"

headers = {
    "X-Auth-Client": "<api-key>",
    "X-Playground-Client-Secret": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.bitnob.com/api/cards/transactions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-Auth-Client: <api-key>",
    "X-Playground-Client-Secret: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.bitnob.com/api/cards/transactions"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-Auth-Client", "<api-key>")
	req.Header.Add("X-Playground-Client-Secret", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.bitnob.com/api/cards/transactions")
  .header("X-Auth-Client", "<api-key>")
  .header("X-Playground-Client-Secret", "<api-key>")
  .asString();

{
  "data": {
    "page_info": {
      "has_next_page": true,
      "has_previous_page": false,
      "next_cursor": "eyJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI5VDExOjAyOjA3LjExNFoiLCJpZCI6IjAxOWEzYjVjLTVhNzEtN2MzZC04ZTRmLTZhN2I4YzlkMGU4MiJ9"
    },
    "transactions": [
      {
        "amount": "12500000",
        "balance_after": "37500000",
        "balance_before": "50000000",
        "business_pool": false,
        "card_id": "019a3b5c-2c4d-7e6f-8a9b-0c1d2e3f4a51",
        "cardholder_name": "Adaeze Okafor",
        "company_id": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "created_at": "2026-10-29T11:02:07.114Z",
        "created_by": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "currency": "USD",
        "description": "Sandbox Coffee Roasters",
        "display_amount": 12.5,
        "fee_amount": "0",
        "id": "019a3b5c-5a71-7c3d-8e4f-6a7b8c9d0e82",
        "last_four_digit": "4242",
        "masked_pan": "000000******4242",
        "merchant_category": "Eating Places and Restaurants",
        "merchant_mcc": "5814",
        "merchant_name": "Sandbox Coffee Roasters",
        "network": "visa",
        "reference": "auth_sbx_5c1e9a04",
        "status": "completed",
        "transaction_date": "2026-10-29T11:02:06Z",
        "type": "authorization",
        "updated_at": "2026-10-29T11:02:07.114Z"
      },
      {
        "amount": "50000000",
        "balance_after": "50000000",
        "balance_before": "0",
        "business_pool": false,
        "card_id": "019a3b5c-2c4d-7e6f-8a9b-0c1d2e3f4a51",
        "cardholder_name": "Adaeze Okafor",
        "company_id": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "created_at": "2026-10-28T14:10:07.214Z",
        "created_by": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "currency": "USD",
        "description": "Card funding",
        "display_amount": 50,
        "fee_amount": "500000",
        "fee_type": "funding_fee",
        "id": "019a3b5c-5a71-7c3d-8e4f-6a7b8c9d0e81",
        "last_four_digit": "4242",
        "reference": "ref_sbx_fund_0007",
        "status": "completed",
        "transaction_date": "2026-10-28T14:10:07.214Z",
        "type": "funding",
        "updated_at": "2026-10-28T14:10:09.880Z"
      }
    ]
  },
  "message": "Card transactions retrieved successfully",
  "success": true,
  "timestamp": "2026-10-30T09:15:02.481Z"
}

GET

api

cards

transactions

List card transactions

curl --request GET \
  --url https://api.bitnob.com/api/cards/transactions \
  --header 'X-Auth-Client: <api-key>' \
  --header 'X-Playground-Client-Secret: <api-key>'

const options = {
  method: 'GET',
  headers: {'X-Auth-Client': '<api-key>', 'X-Playground-Client-Secret': '<api-key>'}
};

fetch('https://api.bitnob.com/api/cards/transactions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.bitnob.com/api/cards/transactions"

headers = {
    "X-Auth-Client": "<api-key>",
    "X-Playground-Client-Secret": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.bitnob.com/api/cards/transactions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-Auth-Client: <api-key>",
    "X-Playground-Client-Secret: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.bitnob.com/api/cards/transactions"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-Auth-Client", "<api-key>")
	req.Header.Add("X-Playground-Client-Secret", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.bitnob.com/api/cards/transactions")
  .header("X-Auth-Client", "<api-key>")
  .header("X-Playground-Client-Secret", "<api-key>")
  .asString();

{
  "data": {
    "page_info": {
      "has_next_page": true,
      "has_previous_page": false,
      "next_cursor": "eyJ0aW1lc3RhbXAiOiIyMDI2LTEwLTI5VDExOjAyOjA3LjExNFoiLCJpZCI6IjAxOWEzYjVjLTVhNzEtN2MzZC04ZTRmLTZhN2I4YzlkMGU4MiJ9"
    },
    "transactions": [
      {
        "amount": "12500000",
        "balance_after": "37500000",
        "balance_before": "50000000",
        "business_pool": false,
        "card_id": "019a3b5c-2c4d-7e6f-8a9b-0c1d2e3f4a51",
        "cardholder_name": "Adaeze Okafor",
        "company_id": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "created_at": "2026-10-29T11:02:07.114Z",
        "created_by": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "currency": "USD",
        "description": "Sandbox Coffee Roasters",
        "display_amount": 12.5,
        "fee_amount": "0",
        "id": "019a3b5c-5a71-7c3d-8e4f-6a7b8c9d0e82",
        "last_four_digit": "4242",
        "masked_pan": "000000******4242",
        "merchant_category": "Eating Places and Restaurants",
        "merchant_mcc": "5814",
        "merchant_name": "Sandbox Coffee Roasters",
        "network": "visa",
        "reference": "auth_sbx_5c1e9a04",
        "status": "completed",
        "transaction_date": "2026-10-29T11:02:06Z",
        "type": "authorization",
        "updated_at": "2026-10-29T11:02:07.114Z"
      },
      {
        "amount": "50000000",
        "balance_after": "50000000",
        "balance_before": "0",
        "business_pool": false,
        "card_id": "019a3b5c-2c4d-7e6f-8a9b-0c1d2e3f4a51",
        "cardholder_name": "Adaeze Okafor",
        "company_id": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "created_at": "2026-10-28T14:10:07.214Z",
        "created_by": "019a3b5c-1a2b-7c3d-8e4f-5a6b7c8d9e01",
        "currency": "USD",
        "description": "Card funding",
        "display_amount": 50,
        "fee_amount": "500000",
        "fee_type": "funding_fee",
        "id": "019a3b5c-5a71-7c3d-8e4f-6a7b8c9d0e81",
        "last_four_digit": "4242",
        "reference": "ref_sbx_fund_0007",
        "status": "completed",
        "transaction_date": "2026-10-28T14:10:07.214Z",
        "type": "funding",
        "updated_at": "2026-10-28T14:10:09.880Z"
      }
    ]
  },
  "message": "Card transactions retrieved successfully",
  "success": true,
  "timestamp": "2026-10-30T09:15:02.481Z"
}

Authorizations

X-Auth-Client

string

header

required

Your workspace client id.

All calls must include four headers:

X-Auth-Client — your workspace client id
X-Auth-Timestamp — Unix seconds
X-Auth-Nonce — 16-byte random hex
X-Auth-Signature — hex(HMAC-SHA256( {client_id}:{timestamp}:{nonce}:{raw_body}, client_secret))

The playground computes the timestamp, nonce and signature for you.

X-Playground-Client-Secret

string

header

required

Your sandbox client secret. The playground uses it to sign the request in your browser and removes it before the request is sent. Never send your client secret as a header in your own integration.

Query Parameters

card_id

string

Only this card's transactions.

limit

integer

default:20

Page size, default 20, at most 100.

Required range: 1 <= x <= 100

after

string

Cursor from page_info.next_cursor. Alias: cursor.

cursor

string

Alias of after.

type

string

Transaction type, for example funding, withdrawal, authorization, settlement, fee.

status

string

Transaction status (pending, processing, completed, failed, reversed, declined).

currency

string

Transaction currency.

start_date

string

Start of the date range.

end_date

string

End of the date range.

period

string

Date window.

card_type

string

Card type (virtual, physical).

cardholder_name

string

Cardholder name.

last_four_digit

string

Card last four digits.

amount_min

integer<int64>

Minimum amount, micro-units.

Required range: x >= 0

amount_max

integer<int64>

Maximum amount, micro-units.

Required range: x >= 0

merchant_name

string

Merchant name.

merchant_category

string

Merchant category.

merchant_mcc

string

Merchant category code.

merchant_country

string

Merchant country.

reference

string

Transaction reference.

has_fee

boolean

Only rows with (true) or without (false) a fee.

failure_code

string

Failure code.

network

string

Card network.

initiated_from

string

Channel the transaction was initiated from.

string

Free-text search.

Response

Successful responses are wrapped in this envelope, and so are errors a handler answers itself (request body and field validation, some not-found and conflict cases, ORG_NOT_ACTIVE): success is false and error carries a code and message. Errors raised by authentication and by the services behind a handler are a Problem instead.

success

boolean

required

true on success

timestamp

string<date-time>

required

When the response was written.

data

object

The payload; its shape is given per operation. Omitted when there is none.

Show child attributes

error

object

Show child attributes

message

string

Human-readable summary; omitted when empty.

metadata

object

List metadata. Page lists set page, per_page, total and total_pages; offset and cursor lists set limit, offset, has_more and next_cursor. Zero and empty fields are omitted, and metadata is absent when nothing is set.

Show child attributes

request_id

string

Set on error envelopes: the request's correlation id (req_ followed by a UUID), the same value as the X-Correlation-ID response header. Quote it to support.

Get started

Identity

Balances

Customers

Beneficiaries

Addresses

Lightning

LNURL

Nodes

Withdrawals

Transfers

Transactions

Exchange rates

Trading

Payouts

Virtual accounts

Virtual cards

List card transactions

Authorizations

Query Parameters

Response