Vydapay API Reference

# Using cURL
curl https://api.vydapay.com/v1/cards \
  -H "Authorization: Bearer sk_live_abc123def456..."

// Using Node.js with the official SDK
const Vydapay = require('@vydapay/sdk');

const vydapay = new Vydapay('sk_live_abc123def456...');

// Or using fetch directly
const response = await fetch('https://api.vydapay.com/v1/cards', {
  headers: {
    'Authorization': 'Bearer sk_live_abc123def456...',
    'Content-Type': 'application/json'
  }
});

# Using Python with the official SDK
import vydapay

vydapay.api_key = 'sk_live_abc123def456...'

# Or using requests directly
import requests

headers = {
    'Authorization': 'Bearer sk_live_abc123def456...',
    'Content-Type': 'application/json'
}
response = requests.get('https://api.vydapay.com/v1/cards', headers=headers)

{
  "error": {
    "type": "invalid_request_error",
    "code": "parameter_invalid",
    "message": "The spending_limit amount must be a positive integer.",
    "param": "spending_limit.amount",
    "doc_url": "https://docs.vydapay.com/errors/parameter_invalid"
  }
}

try {
  const card = await vydapay.cards.create({
    type: 'virtual',
    currency: 'GBP',
    cardholder_id: 'ch_abc123'
  });
} catch (error) {
  if (error.type === 'invalid_request_error') {
    console.log('Invalid parameters:', error.message);
  } else if (error.type === 'authentication_error') {
    console.log('Check your API key');
  } else {
    console.log('Unexpected error:', error.message);
  }
}

try:
    card = vydapay.Card.create(
        type='virtual',
        currency='GBP',
        cardholder_id='ch_abc123'
    )
except vydapay.error.InvalidRequestError as e:
    print(f'Invalid parameters: {e.message}')
except vydapay.error.AuthenticationError as e:
    print('Check your API key')
except vydapay.error.VydapayError as e:
    print(f'Unexpected error: {e.message}')

{
  "object": "list",
  "data": [
    { "id": "card_xyz789", ... },
    { "id": "card_abc456", ... }
  ],
  "has_more": true,
  "url": "/v1/cards"
}

// Using auto-pagination (recommended)
for await (const card of vydapay.cards.list({ limit: 100 })) {
  console.log(card.id);
}

// Manual pagination
let hasMore = true;
let startingAfter = null;

while (hasMore) {
  const params = { limit: 100 };
  if (startingAfter) params.starting_after = startingAfter;
  
  const response = await vydapay.cards.list(params);
  
  for (const card of response.data) {
    console.log(card.id);
  }
  
  hasMore = response.has_more;
  if (response.data.length > 0) {
    startingAfter = response.data[response.data.length - 1].id;
  }
}

# Using auto-pagination (recommended)
for card in vydapay.Card.list(limit=100).auto_paging_iter():
    print(card.id)

# Manual pagination
has_more = True
starting_after = None

while has_more:
    params = {'limit': 100}
    if starting_after:
        params['starting_after'] = starting_after
    
    response = vydapay.Card.list(**params)
    
    for card in response.data:
        print(card.id)
    
    has_more = response.has_more
    if response.data:
        starting_after = response.data[-1].id

curl -X POST https://api.vydapay.com/v1/cards \
  -H "Authorization: Bearer sk_live_..." \
  -H "Idempotency-Key: unique-request-id-abc123" \
  -H "Content-Type: application/json" \
  -d '{"type": "virtual", "currency": "GBP", "cardholder_id": "ch_abc123"}'

X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 987
X-RateLimit-Reset: 1701432000

{
  "id": "card_xyz789def456",
  "object": "card",
  "type": "virtual",
  "status": "active",
  "currency": "GBP",
  "cardholder_id": "ch_abc123",
  "last_four": "4821",
  "exp_month": 12,
  "exp_year": 2027,
  "brand": "mastercard",
  "spending_limit": {
    "amount": 50000,
    "interval": "monthly"
  },
  "spending_controls": {
    "allowed_categories": ["travel", "office_supplies"],
    "blocked_categories": ["gambling"],
    "allowed_countries": ["GB", "IE", "FR"]
  },
  "metadata": {
    "department": "engineering",
    "cost_center": "CC-1234"
  },
  "created_at": "2025-12-02T10:30:00Z",
  "updated_at": "2025-12-02T10:30:00Z"
}

{
  "id": "txn_abc123xyz789",
  "object": "transaction",
  "amount": 4599,
  "currency": "GBP",
  "status": "completed",
  "type": "purchase",
  "card_id": "card_xyz789def456",
  "cardholder_id": "ch_abc123def456",
  "merchant": {
    "name": "AMAZON UK",
    "category": "online_shopping",
    "category_code": "5411",
    "city": "London",
    "country": "GB"
  },
  "receipt": {
    "id": "rcpt_def456",
    "status": "matched"
  },
  "created_at": "2025-12-02T14:30:00Z"
}

{
  "id": "evt_abc123",
  "object": "event",
  "type": "transaction.created",
  "created_at": "2025-12-02T14:30:00Z",
  "data": {
    "object": {
      "id": "txn_abc123xyz789",
      "amount": 4599,
      "currency": "GBP",
      // ... full transaction object
    }
  }
}

const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
  const expectedSig = crypto
    .createHmac('sha256', secret)
    .update(payload, 'utf8')
    .digest('hex');
  
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSig)
  );
}

// In your webhook handler
app.post('/webhooks/vydapay', (req, res) => {
  const signature = req.headers['x-vydapay-signature'];
  
  if (!verifyWebhook(req.rawBody, signature, webhookSecret)) {
    return res.status(401).send('Invalid signature');
  }
  
  const event = JSON.parse(req.rawBody);
  
  switch (event.type) {
    case 'transaction.created':
      handleNewTransaction(event.data.object);
      break;
    case 'card.frozen':
      notifyCardholderOfFreeze(event.data.object);
      break;
  }
  
  res.status(200).send('OK');
});