Metadata
| Field | Value |
|---|---|
| Name | cards.freeze |
| Category | write |
| Required scope | cards:manage |
| Idempotency key required | no |
Annotations
| Annotation | Value |
|---|---|
| Title | Freeze Card |
| Read-only | no |
| Destructive | no |
| Idempotent | yes |
| Open-world | no |
| Requires human approval | no |
Input schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"card_id": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
},
"reason": {
"default": "user_request",
"type": "string",
"enum": [
"user_request",
"anomaly",
"admin_kill_switch",
"expired_agent"
]
}
},
"required": [
"card_id",
"reason"
],
"additionalProperties": false
}
Output schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"type": "object",
"properties": {
"card_id": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
},
"frozen_at": {
"type": "string",
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
},
"reason": {
"type": "string"
}
},
"required": [
"card_id",
"frozen_at",
"reason"
],
"additionalProperties": false
}
Auth
Caller’s grant must include thecards:manage scope. Grants whose scope set is a superset of the required scope are accepted.
Request examples
curl -X POST https://mcp.glide.co/mcp/write \
-H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "cards.freeze",
"params": {
"card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
"reason": "anomaly"
}
}'
import { GlideClient } from './glide-client';
const client = new GlideClient({ grantToken: process.env.GLIDE_GRANT_TOKEN! });
const result = await client.call('write', 'cards.freeze', {
card_id: 'd4e5f6a7-b8c9-0123-defa-234567890123',
reason: 'anomaly',
});
console.log(result);
from glide_client import GlideClient
import os
client = GlideClient(grant_token=os.environ["GLIDE_GRANT_TOKEN"])
result = client.call("write", "cards.freeze", {
"card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
"reason": "anomaly",
})
print(result)
Response examples
Success — card frozen:{
"jsonrpc": "2.0",
"id": 1,
"result": {
"card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
"frozen_at": "2026-05-04T14:22:10Z",
"reason": "anomaly"
}
}
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": -32602,
"message": "no card d4e5f6a7-b8c9-0123-defa-234567890123",
"data": { "reason_id": "card_not_found" }
}
}
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": -32001,
"message": "card d4e5f6a7-b8c9-0123-defa-234567890123 does not belong to vault b2c3d4e5-f6a7-8901-bcde-f12345678901",
"data": { "reason_id": "card_belongs_to_other_vault" }
}
}
Errors
| Code | Name | Cause | Remediation |
|---|---|---|---|
-32600 | Invalid request | Malformed JSON-RPC envelope | Check method, jsonrpc, and id fields |
-32602 | Invalid params | card_id not a valid UUID, or card does not exist (card_not_found) | Confirm the card was issued by this agent |
-32001 | Unauthorized | Card belongs to a different vault or a sibling agent | Use the card_id returned by cards.issue for this grant |
-32002 | Policy denied | Grant missing cards:manage scope | Issue a new grant with the required scope |
-32603 | Internal error | Issuer-side freeze call failed | Retry — freeze is idempotent; a second call is safe |