Get your own cardholder status
GET /v2/api-gateway/controls/velocity/status
Spending status of the cardholder the session token belongs to — the same payload as GET /controls/velocity/cardholder/{external_, without needing to know your own external_. Requires a cardholder session token; API keys are not accepted here.
Request
Authentication: a cardholder session token in the Authorization header.
Example request
cURL
curl --request GET \
--url 'https://api.themooncard.com/v2/api-gateway/controls/velocity/status' \
--header 'authorization: Bearer CARDHOLDER_SESSION_TOKEN'Responses
200 Success
| Field | Type | Description |
|---|---|---|
[]. required | number | |
[]. required | number | |
[]. required | string, nullable | |
[]. required | string, nullable | ISO code used and limit are denominated in: the currency of the card's ledger account. Null on a COUNT control. |
JSON
[
{
"used": 124.5,
"limit": 500,
"velocityControlId": "e2c4a6b8-0d1f-4a2b-8c3d-4e5f6a7b8c9d",
"currency": "USD"
}
]401 Error
Missing or invalid credentials, e.g. { "message": "Invalid API Key", "code": "UNAUTHORIZED" }.
The body is the standard error object: see Errors.
403 Error
The request did not carry a cardholder session token.
The body is the standard error object: see Errors.
404 Error
The cardholder no longer exists (CARDHOLDER_).
The body is the standard error object: see Errors.
500 Error
Unexpected server error. Body is { message: "Internal server error", code: "INTERNAL_.
The body is the standard error object: see Errors.
Last updated August 24, 2026