Cards via Access Link

Distribute a virtual card to someone outside your organization without a Pliant account. Issue the card for a LIMITED cardholder, create an access link for it, and share the link. The recipient can view card details, add the card to a mobile wallet and lock or unlock it.

New: access links for cards

An access link gives someone temporary access to a single virtual card without a Pliant account.

POST /access-links with organizationId and a grant { linkType: CARD_WIDGET, resourceId: <cardId> }.

• The response contains accessLinkId, the accessLink URL (returned only once), and one grant with scope, expiresAt, maxUseCount, usedCount.
• One link, one card. More than one card is rejected with ONLY_ONE_CARD.
• Expiry is defined by the card product configuration agreed during setup. You cannot send an expiry. A link can be opened up to maxUseCount times (3 by default).
• Creating a new link for a card replaces its active link.
• POST /access-links/{accessLinkId}/revoke stops the link and is idempotent.
• Errors: NOT_FOUND, CARD_NOT_MINTABLE, ACCESS_LINK_NOT_ENABLED, ONLY_ONE_CARD.

Prerequisite: Access links must be enabled for the card product. Please contact us if you’re interested in using this feature.

New: LIMITED cardholders

A LIMITED cardholder can only access their card through an access link, so you can hand a card to someone outside your organization without them registering for Pliant.

Issue card and cardholder in one call with membershipType: LIMITED. No invitation email, no web app access, GUEST role assigned automatically. STANDARD stays the default, EMBEDDED is for partners embedding the cardholder experience.

Availability: LIMITED cardholders are currently enabled on organization level. Please contact us to have this enabled for your organizations.

Phone number: Provide the cardholder's phone number if 3DS or wallet tokenization are in scope for the card.

Replaced early access preview

Removed POST/DELETE /cards/{cardId}/access-link and CARD_ACCESS_LINK_REQUESTED callback.