Build virtual cards into your own product. Explore the API →
For developers & builders

Virtual Card API

Issue virtual Visa cards, set spend rules, fund them from a wallet, and react to events, all from your own app, platform, or workflow. The card layer is ready, so you ship instead of building it from scratch.

A single REST API for the whole card lifecycle: create a card, control it, read its transactions, and receive signed webhooks. SDKs for PHP, Python, and Node.js.

REST endpoints Signed webhooks PHP, Python, Node.js SDKs

Virtual Card Maker - Powered by Zil Money. Zil Money is a financial technology company, not a bank. Banking services are provided by our partner bank, Member FDIC. FDIC insurance applies only to eligible products with funds held at the partner bank, subject to applicable limits and requirements.

PCI DSS aligned
ISO 9001 Quality Management Certified
ISO 20000 IT Service Management Certified
ISO 27001 Information Security Management Certified
Aligned with NIST SP 800-53 controls
AICPA SOC for Service Organizations
AICPA SOC Service Organization Control Reports
The hard way

Building a card program from scratch is months of work.

Issuing real Visa cards usually means standing up bank partnerships, processing, ledgers, and compliance before you write a line of product code.

  • Banking and processing. Sourcing a sponsor bank and a processor takes months of contracts and reviews.
  • Controls and ledgers. Spend rules, funding, and reconciliation all have to be built and kept correct.
  • Compliance overhead. Card-data handling and security standards sit on your team from day one.
With our API

Issue a controlled card in one API call.

Send one request and get back a live virtual Visa card, funded from your wallet, with the limits and rules you set. Card issuing, processing, and settlement run on Zil Money's licensed banking partners.

  • One endpoint to issue. Create a card with a name, a limit, and rules in a single POST.
  • Built-in controls. Cap the amount, lock the merchant or category, and freeze or cancel any card.
  • Events, not polling. Signed webhooks tell your systems the moment a card or transaction changes.
How it works

From zero to issuing cards in four steps.

  1. Create an account and fund a wallet. Open a Virtual Card Maker account and add funds to your Zil Money wallet by ACH or wire.
  2. Get your API token. Turn on API access and generate a token for the sandbox, then for production when you are ready.
  3. Issue your first card. Send a POST /v1/cards request with a cardholder name, spend limit, and any rules.
  4. Subscribe to webhooks. Register an HTTPS endpoint and react to card and transaction events as they happen.
What you can build

One API across the whole card lifecycle.

Issue & control

Create virtual Visa cards on demand, set per-card limits, lock a merchant or category, and freeze or cancel from your own app.

Automate payouts

Pay out sellers, contributors, contractors, and vendors with cards you issue, fund, and control programmatically.

Embed in your product

Give your users their own controlled cards inside your SaaS, and sync every transaction into your dashboards.

Run programs across multiple entities and wallets from one integration. See the full API reference.

Endpoints at a glance

The core of the card API.

MethodEndpointWhat it does
POST/v1/cardsIssue a new virtual Visa card funded from your wallet.
GET/v1/cards/{id}Retrieve a card and its spend in the current interval.
PATCH/v1/cards/{id}Update limits and rules, or freeze and cancel a card.
GET/v1/cards/{id}/transactionsList authorizations and settled transactions.
POST/v1/webhooksRegister an endpoint for signed card and transaction events.

Full request and response details live in the API documentation.

SDKs

Start in your language.

Skip the boilerplate with an official SDK, or call the REST endpoints directly with cURL.

PHP

Drop the SDK into your Laravel or vanilla PHP backend and issue cards in a few lines.

Python

Install the package and wire card issuing into your scripts, services, or data pipelines.

Node.js

Use the SDK in your Node or serverless functions to create and control cards on the fly.

FAQ

API questions, answered.

Does Virtual Card Maker have an API?+
Yes. Virtual Card Maker offers a REST API to issue virtual Visa cards, set spend rules, fund cards from a wallet, pull transactions, and receive webhook events. You can see every endpoint in the API reference.
What can I build with the API?+
Anything that needs controlled card spend: embed branded cards in your SaaS, pay out creators and contractors, automate vendor and payroll cards, or sync transactions into your own dashboards. You can run card programs across multiple entities and wallets from one integration.
Do you offer SDKs?+
Yes. Official SDKs are available for PHP, Python, and Node.js, and you can always call the REST endpoints directly with cURL or any HTTP client.
How do I get API access?+
Open an account at live.virtualcardmaker.com, fund a wallet, and enable API access to generate your token. If you need a private endpoint that is not publicly listed, reach out to our team.
Is my money safe, and is it FDIC insured?+
Zil Money is a financial technology company, not a bank. Banking services are provided by our partner bank, Member FDIC, and FDIC insurance applies only to eligible products with funds held at the partner bank, subject to applicable limits and requirements. Zil Money uses encryption and multi-factor authentication to help protect your account.

Start building with cards.

Dive into the full API reference, see every endpoint, and issue your first card. Need a hand or a private endpoint? Our team is here.