Freeze/unfreeze card
PATCH /v1/api-gateway/card/{card_id}/freeze
Send { "frozen": true } to freeze the card and { "frozen": false } to unfreeze it. The response echoes the new state; fetch the card to see the updated frozen flag.
Request
Authentication: your API key in the x-api-key header.
Path parameters
| Field | Type | Description |
|---|---|---|
card_ required | string, uuid | Card UUID (the card id returned by the card endpoints). |
Body
| Field | Type | Description |
|---|---|---|
frozen required | boolean | true freezes the card, false unfreezes it. |
Example request
cURL
curl --request PATCH \
--url 'https://api.themooncard.com/v1/api-gateway/card/7c9e6679-7425-40de-944b-e07fc1f90ae7/freeze' \
--header 'x-api-key: YOUR_API_KEY' \
--header 'content-type: application/json' \
--data '{
"frozen": true
}'Responses
200 Success
| Field | Type | Description |
|---|---|---|
message required | string | Always "Card status updated successfully". |
frozen required | boolean | Echo of the requested state: true when the card is now frozen. |
JSON
{
"message": "Card status updated successfully",
"frozen": true
}400 Error
The body is the standard error object: see Errors.
401 Error
Missing or invalid credentials, e.g. { "message": "Invalid API Key", "code": "UNAUTHORIZED" }.
The body is the standard error object: see Errors.
404 Error
Card not found or not owned by this organization (CARD_).
The body is the standard error object: see Errors.
500 Error
Unexpected server error. Body is { message: "Internal server error", code: "INTERNAL_.
The body is the standard error object: see Errors.
Last updated April 30, 2026