> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agentcard.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Change a card's limit

> Set a new total limit on a user-funded multi-use card.

Sets a new total limit on a user-funded multi-use card. A company-funded card
moves company money, so raise it with a [top-up](https://docs.agentcard.com/api-reference/cards/top-up.md).


## OpenAPI

````yaml openapi.json PATCH /api/v2/cards/{card_id}
openapi: 3.1.0
info:
  title: Agentcard API
  version: 2.0.0
  description: >-
    The Agentcard v2 API — connect your users and verify their identity from
    your own backend. Every call is authenticated with a platform access token
    minted from your `client_id` + `client_secret`.
servers:
  - url: https://api.agentcard.sh
    description: >-
      There is one base URL. Sandbox vs production is decided by the client
      credential you use, never by the host.
security:
  - platformToken: []
tags:
  - name: Authentication
    description: >-
      Exchange your client credentials for a platform access token, and
      introspect what a token acts as.
  - name: Connect
    description: >-
      Connect a user to your platform: send a one-time code, verify it, record
      consent, and keep the connection alive.
  - name: Identity verification
    description: >-
      Verify a connected user's identity: upload their ID, submit any extra
      fields we ask for, then show a short face scan.
paths:
  /api/v2/cards/{card_id}:
    patch:
      tags:
        - Cards
      summary: Change a card's limit
      description: >-
        Sets a new total limit on a user-funded multi-use card. A company-funded
        card is refused with `company_flow_card`: raise it with a top-up
        instead.
      operationId: cardUpdate
      parameters:
        - name: card_id
          in: path
          required: true
          schema:
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
                - spend_limit_cents
              properties:
                spend_limit_cents:
                  type: integer
                  description: The new total limit, in cents. At least 100.
                  minimum: 100
      responses:
        '200':
          description: The card.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Card'
        '400':
          description: '`company_flow_card`, `limit_below_spent`, or `card_not_updatable`.'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          description: >-
            `card_not_found`: no such card on your company, in this credential's
            mode.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - platformToken: []
components:
  schemas:
    Card:
      type: object
      required:
        - object
        - id
        - status
        - spend_limit_cents
        - balance_cents
        - last4
        - expiry
        - type
        - created_at
      properties:
        object:
          type: string
          description: Always `card`.
          enum:
            - card
        id:
          type: string
          description: The card's id.
        status:
          type: string
          description: >-
            `creating`, `open`, `in_use`, `paused`, `pausing`, `closing`, or
            `closed`.
        type:
          type: string
          description: '`single_use` or `multi_use`.'
        spend_limit_cents:
          type: integer
          description: What the card can spend in all.
        balance_cents:
          type: integer
          description: What's left to spend.
        last4:
          type: string
          description: The last four digits.
        expiry:
          type: string
          description: '`MM/YY`.'
        user_id:
          type:
            - string
            - 'null'
          description: The user the card is for.
        cardholder_name:
          type: string
          description: The name the card was issued in, for the payment form.
        billing_address:
          type: string
          description: The billing address, for the payment form.
        funds_source:
          type: string
          description: 'On a new card: what funded it.'
        transfer_id:
          type: string
          description: 'On a company-funded new card: the transfer that funded it.'
        closed_reason:
          type: string
          description: 'Only when `closed`: `used`, `canceled`, `expired`, `declined`.'
        card_expires_at:
          type: string
          description: When a `multi_use` card closes itself.
          format: date-time
        created_at:
          type: string
          description: When it was issued.
          format: date-time
    Error:
      type: object
      description: Every v2 error uses the same envelope.
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              description: A stable, machine-readable string (snake_case). Branch on this.
            message:
              type: string
              description: A human-readable explanation, safe to log.
            docs:
              type: string
              description: A link back to the reference.
            field_errors:
              type: object
              additionalProperties:
                type: string
              description: Only on `invalid_fields` — names each field to fix.
            warnings:
              type: array
              items:
                type: string
              description: >-
                Only on document upload errors — actionable feedback safe to
                show the user.
  responses:
    Unauthorized:
      description: >-
        `unauthorized` — the platform access token is missing or expired.
        Exchange your client credentials for a fresh one.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  securitySchemes:
    platformToken:
      type: http
      scheme: bearer
      description: >-
        A platform access token. Get one on the **Create an access token**
        endpoint by exchanging your `client_id` + `client_secret`, then send it
        as `Authorization: Bearer <token>`. Tokens live one hour.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.