GET/cards/{cardId}/transactions

List Card Transactions

Paged list of card transactions, newest first. Date and time values are UTC.

Default PageSize is 20. Allowed: 10, 20, 25, 50, 100.

Auth: session-token header. Card must belong to the broker.

bash

curl -X GET "{{API_BASE_URL}}/cards/{{cardId}}/transactions" \
  -H "session-token: {{sessionToken}}" \
  -H "Accept: application/json"

bash

curl -X GET "{{API_BASE_URL}}/cards/{{cardId}}/transactions?Status=AUTHORIZED&DateFrom=2026-01-01&DateTo=2026-09-30" \
  -H "session-token: {{sessionToken}}" \
  -H "Accept: application/json"

Path variables

Field	Type	Required	Possible values	Description
`cardId`	string	Required	55d0c52f-79ee-4d38-acf4-a16c07957898	Card reference ID from list cards.

Query parameters

Field	Type	Required	Possible values	Description
`DateFrom`	string	Optional	2026-01-01	Start date (ISO 8601), UTC.
`DateTo`	string	Optional	2026-09-30	End date, UTC. Must be ≥ DateFrom if both set.
`Status`	string	Optional	AUTHORIZED \| PENDING_AUTHORIZATION \| AUTHORIZATION_DENIED \| AUTHORIZATION_EXPIRED \| AUTHORIZATION_CANCELED \| NA	Authorization status. PascalCase is also accepted (`Authorized`, `PendingAuthorization`, `AuthorizationDenied`, `AuthorizationExpired`, `AuthorizationCanceled`, `Na`). Response `Status` is always PascalCase. Usual values: `Authorized`, `PendingAuthorization`, `AuthorizationDenied`, `AuthorizationExpired`.
`Merchant`	string	Optional	—	Search merchant / description.
`Amount`	number	Optional	—	Exact amount (≥ 0).
`AmountFrom`	number	Optional	—	Min amount (≥ 0).
`AmountTo`	number	Optional	—	Max amount (≥ AmountFrom if both set).
`Country`	string	Optional	Italy \| IT \| ITA \| 380	Country name, alpha-2, alpha-3, or ISO numeric (e.g. `Italy`, `IT`, `ITA`, `380`).
`Mcc`	string	Optional	6011 \| Eating Places	Numeric = exact MCC code. Text = MCC description match.
`TransactionType`	string	Optional	CardPurchaseTransfer \| CardAtmTransfer \| CashBackTransfer \| CardPurchaseReturn \| CardPurchaseCredit	Transfer type. `CardPurchaseTransfer` = Purchase, `CardAtmTransfer` = ATM, `CashBackTransfer` = Cash back, `CardPurchaseReturn` = Return, `CardPurchaseCredit` = Credit.
`PageNumber`	number	Optional	1	Page number. Starts at 1.
`PageSize`	number	Optional	10 \| 20 \| 25 \| 50 \| 100	Page size. Default 20. Allowed: `10`, `20`, `25`, `50`, `100`.

Headers

Field	Type	Required	Possible values	Description
`session-token`	string	Required	—	SessionToken obtained from the Create GMA Session endpoint. All secured endpoints require this header.

Additional info

Field	Type	Required	Possible values	Description
`GET Status mapping`	object	Optional	—	Use either form in the query. Response is PascalCase. \| Query \| Response \| \| --- \| --- \| \| `AUTHORIZED` \| `Authorized` \| \| `PENDING_AUTHORIZATION` \| `PendingAuthorization` \| \| `AUTHORIZATION_DENIED` \| `AuthorizationDenied` \| \| `AUTHORIZATION_EXPIRED` \| `AuthorizationExpired` \| \| `AUTHORIZATION_CANCELED` \| `AuthorizationCanceled` \| \| `NA` \| `Na` \|
`GET TransactionType`	object	Optional	—	\| Query \| Meaning \| \| --- \| --- \| \| `CardPurchaseTransfer` \| Purchase \| \| `CardAtmTransfer` \| ATM \| \| `CashBackTransfer` \| Cash back \| \| `CardPurchaseReturn` \| Return \| \| `CardPurchaseCredit` \| Credit \|
`401 — Missing session`	object	Optional	—	Missing broker session.
`403 — No access`	object	Optional	—	Card not owned by this broker.
`404 — Card not found`	object	Optional	—	cardId does not resolve to a card owned by this broker.

Example— 401 — Missing session

{
  "ResponseCode": 401,
  "ResponseMessage": "Unauthorized",
  "ResponseData": null
}

{
  "ResponseCode": 401,
  "ResponseMessage": "Unauthorized",
  "ResponseData": null
}

Example— 403 — No access

{
  "ResponseCode": 403,
  "ResponseMessage": "Forbidden",
  "ResponseData": null
}

{
  "ResponseCode": 403,
  "ResponseMessage": "Forbidden",
  "ResponseData": null
}

Example— 404 — Card not found

{
  "ResponseCode": 404,
  "ResponseMessage": "NotFound",
  "ResponseData": null
}

{
  "ResponseCode": 404,
  "ResponseMessage": "NotFound",
  "ResponseData": null
}

Path param stays camelCase (`cardId`). Query params are PascalCase.

Response

Field	Type	Possible values	Description
`ResponseCode`	integer	200 \| 201 \| 204 \| 301 \| 400 \| 401 \| 403 \| 404 \| 410 \| 422 \| 500 \| 503	API result code in the response envelope. Indicates success or the error category (e.g. 200 success, 400 bad request, 401 unauthorized).
`ResponseMessage`	string	Success \| Created \| NoContent \| BadRequest \| Unauthorized \| Forbidden \| NotFound \| Gone \| UnprocessableContent \| ServerError \| ResourceMoved \| ServiceUnAvailable \| UnProcessableEntity	Human-readable label paired with ResponseCode (e.g. Success, BadRequest, Unauthorized). Use with ResponseCode to interpret the outcome.
`ResponseData`	object	Please refer to below example for response body	Paged result. Envelope fields: `CurrentPage`, `PageSize`, `TotalCount`, `Data`. Date and time are UTC.
`ResponseData.CurrentPage`	number	—	Current page number (1-based).
`ResponseData.PageSize`	number	—	Page size used for this response.
`ResponseData.TotalCount`	number	—	Total matching rows.
`ResponseData.Data`	array	—	Transaction rows for this page, newest first.
`ResponseData.Data[].TransactionNumber`	string \| null	—	Transaction number (e.g. `FV000750791`).
`ResponseData.Data[].Date`	string	—	`YYYY-MM-DD` (UTC).
`ResponseData.Data[].Time`	string	—	`hh:mm:ss AM/PM (UTC)` e.g. `01:26:37 PM (UTC)`.
`ResponseData.Data[].MerchantName`	string	—	Merchant / description.
`ResponseData.Data[].MerchantCountry`	string \| null	—	Country.
`ResponseData.Data[].Mcc`	string \| null	—	MCC code (e.g. `5814`).
`ResponseData.Data[].TransactionType`	string	CardPurchaseTransfer \| CardAtmTransfer \| CashBackTransfer \| CardPurchaseReturn \| CardPurchaseCredit	PascalCase transfer type.
`ResponseData.Data[].Amount`	number \| null	—	Number (2 decimal places), or `null`.
`ResponseData.Data[].Currency`	string	—	Settlement currency (usually `USD`).
`ResponseData.Data[].Status`	string	Authorized \| PendingAuthorization \| AuthorizationDenied \| AuthorizationExpired \| AuthorizationCanceled \| Na	PascalCase authorization status.
`ResponseData.Data[].AuthorizationCode`	string \| null	—	Authorization number.
`ResponseData.Data[].CardLastFourDigits`	string \| null	—	Last 4 of the card.

Example response

{
  "ResponseCode": 200,
  "ResponseMessage": "Success",
  "ResponseData": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 1,
    "Data": [
      {
        "TransactionNumber": "FV000750791",
        "Date": "2026-07-15",
        "Time": "01:26:37 PM (UTC)",
        "MerchantName": "ACME STORE",
        "MerchantCountry": "US",
        "Mcc": "5814",
        "TransactionType": "CardPurchaseTransfer",
        "Amount": 42.5,
        "Currency": "USD",
        "Status": "Authorized",
        "AuthorizationCode": "123456",
        "CardLastFourDigits": "1234"
      }
    ]
  }
}

{
  "ResponseCode": 200,
  "ResponseMessage": "Success",
  "ResponseData": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 1,
    "Data": [
      {
        "TransactionNumber": "FV000750791",
        "Date": "2026-07-15",
        "Time": "01:26:37 PM (UTC)",
        "MerchantName": "ACME STORE",
        "MerchantCountry": "US",
        "Mcc": "5814",
        "TransactionType": "CardPurchaseTransfer",
        "Amount": 42.5,
        "Currency": "USD",
        "Status": "Authorized",
        "AuthorizationCode": "123456",
        "CardLastFourDigits": "1234"
      }
    ]
  }
}

Date and time on GET are UTC. Status query accepts `AUTHORIZED` or PascalCase (`Authorized`); response Status is PascalCase. `Amount` is a number (2 decimal places), or `null`.

Requires `session-token: {SessionToken}` from Create GMA Session. Use the same client IP as authentication.