cards.issue

Request a scoped virtual card with a funding cap and optional issuer controls.

Request a scoped virtual card with a funding cap and optional issuer controls.

The input accepts MCC filters and an expiry and passes them to the configured issuer integration. Those fields do not establish issuer enforcement. The funding cap must fit the tightest configured envelope amount cap. Consumer card controls separately reject merchant and category locks. Confirm the controls and status returned for the issued card.

Metadata

Field	Value
Name	cards.issue
Category	write
Required scope	cards:manage
Idempotency key required	yes

Annotations

Annotation	Value
Title	Issue Virtual Card
Read-only	no
Destructive	no
Idempotent	yes
Open-world	no
Requires human approval	no

Input schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "card_label": {
      "type": "string",
      "minLength": 1,
      "maxLength": 100
    },
    "funding_cap_cents": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "expires_at": {
      "type": "string",
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
    },
    "mcc_allowlist": {
      "type": "array",
      "items": {
        "type": "string",
        "minLength": 4,
        "maxLength": 4
      }
    },
    "mcc_blocklist": {
      "type": "array",
      "items": {
        "type": "string",
        "minLength": 4,
        "maxLength": 4
      }
    },
    "idempotency_key": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "card_label",
    "funding_cap_cents",
    "idempotency_key"
  ],
  "additionalProperties": false
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
    },
    "last4": {
      "type": "string",
      "minLength": 4,
      "maxLength": 4
    },
    "issued_at": {
      "type": "string",
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
    },
    "policy_version": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    }
  },
  "required": [
    "card_id",
    "last4",
    "issued_at",
    "policy_version"
  ],
  "additionalProperties": false
}

Auth

Caller’s grant must include the cards:manage scope. Grants whose scope set is a superset of the required scope are accepted.

Request examples

curl

curl -X POST https://mcp.glide.co/mcp/write \
  -H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "cards.issue",
    "params": {
      "card_label": "AWS Cloud Infra — May 2026",
      "funding_cap_cents": 50000,
      "expires_at": "2026-06-01T00:00:00Z",
      "mcc_allowlist": ["7372", "7379"],
      "single_use": false,
      "idempotency_key": "aws-infra-card-may2026-001"
    }
  }'

Response examples

Success — card issued with one-shot details envelope:

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
    "last4": "4242",
    "issued_at": "2026-05-04T08:00:00Z",
    "policy_version": 2,
    "details_envelope": {
      "pan": "4111111111114242",
      "cvv": "737",
      "expiry_month": "06",
      "expiry_year": "2026",
      "billing_address": {
        "line1": "340 Pine St Suite 800",
        "city": "San Francisco",
        "postal_code": "94104",
        "country": "US"
      }
    }
  }
}

Idempotent re-call (same idempotency_key) — details_envelope absent:

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
    "last4": "4242",
    "issued_at": "2026-05-04T08:00:00Z",
    "policy_version": 2,
    "details_envelope": null
  }
}

Funding cap exceeds the tightest envelope cap:

{
  "jsonrpc": "2.0",
  "id": 1,
  "error": {
    "code": -32602,
    "message": "card funding_cap 50000 exceeds tightest envelope cap 25000 (per_tx=25000, per_day=unset, lifetime=unset)",
    "data": { "reason_id": "funding_cap_over_envelope" }
  }
}

Errors

Code	Name	Cause	Remediation
-32600	Invalid request	Malformed JSON-RPC envelope	Check method, jsonrpc, and id fields
-32602	Invalid params	funding_cap_cents exceeds the tightest envelope cap; MCC code not 4 digits; envelope has no amount caps defined	Lower funding_cap_cents or update the envelope caps first
-32001	Unauthorized	Missing/expired grant token	Refresh via agent.grant.refresh
-32002	Policy denied	Grant missing cards:manage scope	Issue a new grant with the required scope
-32603	Internal error	Issuer-side card creation failed	Retry with the same idempotency_key; the response will be idempotent

Step-up flow

cards.issue does not trigger inline step-up. It requires the card-management scope, an authorized vault and a funding cap within the configured envelope. Review the tool’s result and the card’s recorded status.

For payments.initiate — which does trigger inline step-up — see the payments.initiate step-up flow.