Everest Card — API reference
  • Credit
  • Debit
  • Prepaid
  • Common Methods
  • OAuth2
  • Delivery
Information
Cards
    Card applications
      getCardApplicationListpostgetDebitApplicationIdByFromShadowCardNumberpostsubmitCardApplicationExtStatuspost
    Card issuance and personalisation
      getApplicableProductsByCustomerNumberpostcreateIndividualCardpostcreateIndividualSupplementaryCardpostcreateCorporateCardpostcreateDummyCorporateCardpostcreateVirtualCardpostgetPendingCardEmbossListpostcancelCardEmbossByShadowCardNumberpost
    Card lifecycle
      getCustomerDebitCardListByTenantIdpostgetCustomerDebitShadowCardsByTenantIdpostchangeCardStatuspostgetCardListpostgetCardListNewpostgetCardInfopostreplaceCardpostchangeAndReplaceCardpostisCardFoundInpostaddDebitCardLogpost
    No-name cards
      createNoNameCardApplicationpostcancelNoNameCardApplicationpostupdateNoNameCardApplicationpostactivateNoNameCardpostcreateCardUsingNoNameApplicationpostcreateAndProcessNoNameCardApplicationpostreplaceNoNameCardpostreplaceCardUsingNoNameApplicationpostchangeAndReplaceNoNameCardpost
Customers and accounts
    Branch management
      changeCardBranchpostchangeCustomerBranchposttransferBranchCustomerpostgetDebitCustomerLisfOfBranchpost
    Customers
      getCorporateCustomerInfoByIndividualCustomerpostgetCustomerAssetpostisCustomerConvertToRipperpostgetCustomerAssetsSummaryDebitpost
    Account linking
      attachCardAccountpostdetachCardAccountpostdetachCardAccountByAccountNumberpostmodifyCardAccountpostlistCardAccountByAccountNumberpostlistCardAccountByShadowCardNumberpostrecreateCustomerCardAccountspostsaveCardAccountCurrencyConversionpostgetCardAccountCurrencyConversionpost
Transactions
    getDebitCardTransactionByUtidpostgetDebitCardTransactionByUtidNewpostgetDebitTransactionAllpostupdateTransactionForBNPLpostgetDigitalSlipReceiptpostgetAuthorizationListByBegindateEnddatepostgetDbttransactionByCardrefCustomernumpost
Limits and controls
    Card and customer limits
      getAvailableECommerceLimitpost
    Operation limits
      getCardLimitationParameterDatapostgetCardOperationLimitpostsetCardOperationLimitpostremoveCardOperationLimitpostgetCustomerOperationLimitpostsetCustomerOperationLimitpostremoveCustomerOperationLimitpostgetCustomerLimitationParameterDatapost
    Permissions and restrictions
      getCardPermissionspostsaveCardPermissionspostsaveCardBnplPermissionpostchangeCardMiscOptionpostgetCardMiscOptionpost
Security
    PIN and card security
      setCardPinpostchangeCardPinpostverifyCardPinpostverifyRsaPinpostsetRsaPinpostchangeRsaPinpostincreasePinTryCountpostverifyRsaPinWithStaticSaltpostverifyCVVpostverifyCVVPartialpostgenerateCVVpostgetCardPinOperationHistorypostresetCvvCounterpost
Disputes
    Disputes and chargebacks
      createDisputeCasepostgetDisputeListpostaddDocumentByCaseNumberpostcancelDisputeCasepost
Platform
    Platform operations
      healthCheckpostrefreshCachepost
    Reference data
      getCardTypeByBinpost
SchemasError codesChannels
powered by Zudoku
Debit Digital Channels Integration
Debit Digital Channels Integration

Permissions and restrictions

Turn individual capabilities on and off for a card — e-commerce, international use, mail order and other miscellaneous options.


getCardPermissions

POST
https://sandboxpub.cms.dgpays.com/SandBox
/IntegrationDigitalChannelDebit/debit/api/getCardPermissions

Retrieves the permissions set on a debit card based on ShadowCardNumber. Returns a list of DebitCardPermissions including restriction codes, descriptions, permission indicators, channel, and security flags. Uses _dbtServiceProxy.GetCardPermissions for fetching data.

getCardPermissions › Headers

evrst-ptrnid
​string

Correlation id for this request. Echo it in your own logs to trace the call through the platform.

Default: x_request_id

getCardPermissions › Request Body

GetCardPermissionsRequest
shadowCardNumber
​string · maxLength: 19 · optional

The card whose permissions are read. Not validated here — unlike the credit twin, this operation checks nothing and a card it cannot find comes back as an empty list rather than an error.

getCardPermissions › Responses

Success

GetCardPermissionsResponse
​array · optional
POST/IntegrationDigitalChannelDebit/debit/api/getCardPermissions
curl https://sandboxpub.cms.dgpays.com/SandBox/IntegrationDigitalChannelDebit/debit/api/getCardPermissions \ --request POST \ --header 'Content-Type: application/json' \ --header 'evrst-ptrnid: x_request_id' \ --header 'Authorization: Bearer <access_token>' \ --data '{ "shadowCardNumber": "shadowCardNumber" }'
Example Request Body
{ "shadowCardNumber": "shadowCardNumber" }
json
application/json
Example Responses
{ "cardPermissionsList": [ { "restrictionCode": "restrictionCode", "restrictionCodeDescription": "restrictionCodeDescription", "restrictionPermissionIndicator": "restrictionPermissionIndicator", "restrictionPermissionIndicatorDescription": "restrictionPermissionIndicatorDescription", "channel": "002", "securityFlag": true } ] }
json
application/json

saveCardPermissions

POST
https://sandboxpub.cms.dgpays.com/SandBox
/IntegrationDigitalChannelDebit/debit/api/saveCardPermissions

Saves or updates card permissions for a specific card. Accepts card reference number, shadow card number, channel, and a list of permission items with start/end dates and restriction codes. Returns the count of changed permissions and their record IDs.

saveCardPermissions › Headers

evrst-ptrnid
​string

Correlation id for this request. Echo it in your own logs to trace the call through the platform.

Default: x_request_id

saveCardPermissions › Request Body

SaveCardPermissionsRequest
channel
​string · maxLength: 3 · required

Three-digit code identifying the channel on behalf of which the request is made (e.g. 002 for Internet). Mandatory in every request. Used for entitlement checks, limit enforcement and audit logging. Channel codes are managed through configuration parameters and may change over time. Refer to the Channels page for the current list of valid codes.

​SaveCardPermissionsRequestItem[] · required

The permissions to write. Must be sent; an empty list is accepted and changes nothing.

cardRefNumber
​string · maxLength: 19 · optional

One-of · NotNull — The card to permit or restrict. Send this or shadowCardNumber; sending neither is refused with both named.

shadowCardNumber
​string · maxLength: 19 · optional

One-of · NotNull — The card to permit or restrict. Send this or cardRefNumber; when both are sent this one finds the card.

saveCardPermissions › Responses

Success

SaveCardPermissionsResponse
changedCount
​integer · int32 · required

How many entries actually changed. An entry already holding the value it was sent is skipped, so this can be lower than the number sent — and zero is a success.

listOfRecordId
​array · optional
POST/IntegrationDigitalChannelDebit/debit/api/saveCardPermissions
curl https://sandboxpub.cms.dgpays.com/SandBox/IntegrationDigitalChannelDebit/debit/api/saveCardPermissions \ --request POST \ --header 'Content-Type: application/json' \ --header 'evrst-ptrnid: x_request_id' \ --header 'Authorization: Bearer <access_token>' \ --data '{ "channel": "channel", "cardRefNumber": "cardRefNumber", "shadowCardNumber": "shadowCardNumber", "permissions": [ { "restrictionCode": "restrictionCode", "permitted": true, "startDate": "2026-10-16T14:30:00Z", "endDate": "2026-10-16T14:30:00Z", "transactionId": "transactionId" } ] }'
Example Request Body
{ "channel": "channel", "cardRefNumber": "cardRefNumber", "shadowCardNumber": "shadowCardNumber", "permissions": [ { "restrictionCode": "restrictionCode", "permitted": true, "startDate": "2026-10-16T14:30:00Z", "endDate": "2026-10-16T14:30:00Z", "transactionId": "transactionId" } ] }
json
application/json
Example Responses
{ "changedCount": 0, "listOfRecordId": [ 0 ] }
json
application/json

saveCardBnplPermission

POST
https://sandboxpub.cms.dgpays.com/SandBox
/IntegrationDigitalChannelDebit/debit/api/saveCardBnplPermission

Saves or updates Buy Now Pay Later (BNPL) permissions for a card. Accepts card reference number, channel, and BNPL permission details to enable or disable BNPL features on the card.

saveCardBnplPermission › Headers

evrst-ptrnid
​string

Correlation id for this request. Echo it in your own logs to trace the call through the platform.

Default: x_request_id

saveCardBnplPermission › Request Body

SaveCardBnplPermissionRequest
channel
​string · maxLength: 3 · required

Three-digit code identifying the channel on behalf of which the request is made (e.g. 002 for Internet). Mandatory in every request. Used for entitlement checks, limit enforcement and audit logging. Channel codes are managed through configuration parameters and may change over time. Refer to the Channels page for the current list of valid codes.

cardRefNumber
​string · maxLength: 19 · optional

The card reference, which identifies one issued card including its renewals. Returned by the create and listing operations alongside the shadow number.

bnplFlag
​boolean · optional

Whether the transaction is a buy-now-pay-later one.

saveCardBnplPermission › Responses

Success

SaveCardBnplPermissionResponse
bnplFlag
​boolean · required

Whether the transaction is a buy-now-pay-later one.

cardRefNumber
​string · optional

The card reference, which identifies one issued card including its renewals. Returned by the create and listing operations alongside the shadow number.

POST/IntegrationDigitalChannelDebit/debit/api/saveCardBnplPermission
curl https://sandboxpub.cms.dgpays.com/SandBox/IntegrationDigitalChannelDebit/debit/api/saveCardBnplPermission \ --request POST \ --header 'Content-Type: application/json' \ --header 'evrst-ptrnid: x_request_id' \ --header 'Authorization: Bearer <access_token>' \ --data '{ "channel": "channel", "cardRefNumber": "cardRefNumber", "bnplFlag": true }'
Example Request Body
{ "channel": "channel", "cardRefNumber": "cardRefNumber", "bnplFlag": true }
json
application/json
Example Responses
{ "cardRefNumber": "cardRefNumber", "bnplFlag": true }
json
application/json

changeCardMiscOption

POST
https://sandboxpub.cms.dgpays.com/SandBox
/IntegrationDigitalChannelDebit/debit/api/changeCardMiscOption

Changes miscellaneous options of a debit card, supporting individual or all cards for a customer, and returns the list of log record IDs.

changeCardMiscOption › Headers

evrst-ptrnid
​string

Correlation id for this request. Echo it in your own logs to trace the call through the platform.

Default: x_request_id

changeCardMiscOption › Request Body

ChangeCardMiscOptionRequest
channel
​string · maxLength: 3 · required

Three-digit code identifying the channel on behalf of which the request is made (e.g. 002 for Internet). Mandatory in every request. Used for entitlement checks, limit enforcement and audit logging. Channel codes are managed through configuration parameters and may change over time. Refer to the Channels page for the current list of valid codes.

optionType
​string · enum · maxLength: 20 · required

Which miscellaneous option is being set. The type and its value are checked together and both must resolve against the option definitions.

Values:

  • DS — digital slip — whether the cardholder's slip is printed
  • DC — dynamic CVV — whether the card's CVV is generated per period
optionValue
​string · enum · maxLength: 100 · required

The value the option is set to, checked against the values its type allows.

Values:

  • HardCopy — a printed slip — the value DS takes
  • DigitalSlip — a digital slip — the value DS takes
  • true — dynamic CVV on — the value DC takes, compared as this exact string
customerNumber
​integer · int64 · optional

The customer the change applies to. Not validated — the service's checks on this field are commented out, so a zero or absent value is not refused here.

mainCardRefNumber
​string · maxLength: 19 · optional

The card reference of the main card. On a supplementary card this is the card it hangs from; on a main card it is the card's own reference.

cardRefNumber
​string · maxLength: 19 · optional

The card reference, which identifies one issued card including its renewals. Returned by the create and listing operations alongside the shadow number.

allMainCardFlag
​boolean · optional

Whether every main card of the customer is included.

allCardFlag
​boolean · optional

Whether every card of the customer is included.

changeCardMiscOption › Responses

Success

CardMiscOptionResponse
listOfCardMiscOptionLogRecordId
​array · optional
POST/IntegrationDigitalChannelDebit/debit/api/changeCardMiscOption
curl https://sandboxpub.cms.dgpays.com/SandBox/IntegrationDigitalChannelDebit/debit/api/changeCardMiscOption \ --request POST \ --header 'Content-Type: application/json' \ --header 'evrst-ptrnid: x_request_id' \ --header 'Authorization: Bearer <access_token>' \ --data '{ "channel": "channel", "optionType": "optionType", "optionValue": "optionValue", "customerNumber": 0, "mainCardRefNumber": "mainCardRefNumber", "cardRefNumber": "cardRefNumber", "allMainCardFlag": true, "allCardFlag": true }'
Example Request Body
{ "channel": "channel", "optionType": "optionType", "optionValue": "optionValue", "customerNumber": 0, "mainCardRefNumber": "mainCardRefNumber", "cardRefNumber": "cardRefNumber", "allMainCardFlag": true, "allCardFlag": true }
json
application/json
Example Responses
{ "listOfCardMiscOptionLogRecordId": [ 0 ] }
json
application/json

getCardMiscOption

POST
https://sandboxpub.cms.dgpays.com/SandBox
/IntegrationDigitalChannelDebit/debit/api/getCardMiscOption

Retrieves miscellaneous options for debit cards based on filters such as OptionType, CustomerNumber, MainCardRefNumber, CardRefNumber, and flags for all main cards or all cards. Returns a list of CardMiscOptionData containing the option type, option value, customer number, main card reference, and card reference. Uses _dbtServiceProxy.GetCardMiscOption for fetching the data.

getCardMiscOption › Headers

evrst-ptrnid
​string

Correlation id for this request. Echo it in your own logs to trace the call through the platform.

Default: x_request_id

getCardMiscOption › Request Body

GetCardMiscOptionRequest
channel
​string · maxLength: 3 · required

Three-digit code identifying the channel on behalf of which the request is made (e.g. 002 for Internet). Mandatory in every request. Used for entitlement checks, limit enforcement and audit logging. Channel codes are managed through configuration parameters and may change over time. Refer to the Channels page for the current list of valid codes.

optionType
​string · enum · maxLength: 20 · required

Which miscellaneous option is read. The card identifiers beside it are not validated — naming a card that does not exist is a business failure rather than a field one.

Values:

  • DS — digital slip — whether the cardholder's slip is printed
  • DC — dynamic CVV — whether the card's CVV is generated per period
customerNumber
​integer · int64 · optional

The customer the option is read for. Not validated — the service's check on this field is commented out.

mainCardRefNumber
​string · maxLength: 19 · optional

The card reference of the main card. On a supplementary card this is the card it hangs from; on a main card it is the card's own reference.

cardRefNumber
​string · maxLength: 19 · optional

The card reference, which identifies one issued card including its renewals. Returned by the create and listing operations alongside the shadow number.

onlyMainCardFlag
​boolean · optional

Whether only main cards are included.

getCardMiscOption › Responses

Success

GetCardMiscOptionResponse
​array · optional
POST/IntegrationDigitalChannelDebit/debit/api/getCardMiscOption
curl https://sandboxpub.cms.dgpays.com/SandBox/IntegrationDigitalChannelDebit/debit/api/getCardMiscOption \ --request POST \ --header 'Content-Type: application/json' \ --header 'evrst-ptrnid: x_request_id' \ --header 'Authorization: Bearer <access_token>' \ --data '{ "channel": "channel", "optionType": "optionType", "customerNumber": 0, "mainCardRefNumber": "mainCardRefNumber", "cardRefNumber": "cardRefNumber", "onlyMainCardFlag": true }'
Example Request Body
{ "channel": "channel", "optionType": "optionType", "customerNumber": 0, "mainCardRefNumber": "mainCardRefNumber", "cardRefNumber": "cardRefNumber", "onlyMainCardFlag": true }
json
application/json
Example Responses
{ "cardMiscOptionDataList": [ { "customerNumber": 0, "mainCardRefNumber": "mainCardRefNumber", "cardRefNumber": "cardRefNumber", "optionType": "optionType", "optionValue": "optionValue" } ] }
json
application/json

Operation limitsPIN and card security