Base URL

https://sandbox-api.cardcash.com/v3
Production:
https://production-api.cardcash.com/v3

Authentication

All endpoints require:
  • x-cc-app header with your partner app ID
  • Authorization: Bearer <token> header (except POST /session)
See Authentication for setup details.

Endpoint Groups

GroupDescriptionLogin Required
MerchantsBrowse merchants and inventoryNo (bulk endpoints require login)
OrdersPurchase cards and manage ordersYes
WalletAccess purchased card dataYes
AccountPayment methods and drawdown accountYes
CartManual cart management (advanced)Yes

Common Patterns

Error Responses

All errors return a JSON object with a message array:
{
  "message": ["Human-readable error description"]
}

Pagination

List endpoints currently return all results. No pagination parameters are required.

ID Formats

  • Cart IDs, Order IDs, Session IDs: UUID v4 format (a1b2c3d4-e5f6-7890-abcd-ef1234567890)
  • Merchant IDs, Card IDs: Numeric integers

Token Refresh

When your token is near expiration, the API will include a refreshed token in the authorization response header. Always check for this header and store the new token when present.