Intergiro developer portal

# Cards as a Service

Card programmes

We provide processing and banking so you can create a programme with all these features in a single contract:

  • Issue virtual and physical cards
  • Real-time funding
  • PCI-certified APIs
  • Dynamic spend controls
  • Live data feeds

# PCI compliance

Using our PCI-compliant API allows you to develop your custom solutions without waiting for certification. By connecting to our API, you avoid handling unnecessary personal data while the data is hosted on secure, PCI-compliant servers and encrypted for transmission. We’re fully PCI compliant and regulated in Sweden as an EMI.

PCI redirect flow

In order to minimize your PCI obligations, we rely on hosted pages to which the user is redirected. This helps us practically eliminate the risks associated with handling sensitive card information on your end.

# Order card

Every card is linked to an account, so make sure to get an account in place first.

Example virtual card order request:

 













POST /v3/cards

Content-Type: application/json
Authorization: Bearer <access_token>

{
  "individual_id": "bd4af0ff-0a72-4e09-b247-c6d8c2391496",
  "account_id": "3c4c7a7b-2266-47a5-b774-d6d1a299e85c",
  "display_name": "Expenses",
  "exp_month": "12",
  "exp_year": "2024",
  "type": "virtual"
}

Response:

 
















HTTP 200 OK

{
  "id": "3cb11f6a-0da4-486c-9745-6f6c6c05d26d",
  "display_name": "Expenses",
  "type": "virtual",
  "brand": "visa",
  "region": "europe",
  "exp_month": "12",
  "exp_year": "2024",
  "last4": "3770",
  "currency": "EUR",
  "account_id": "3c4c7a7b-2266-47a5-b774-d6d1a299e85c",
  "individual_id": "bd4af0ff-0a72-4e09-b247-c6d8c2391496",
  "status": "not_activated"
}

# Activate card

Physical cards require activation in order to be used.

Example activate card request:

 




POST /v3/cards/a1c5ad61-5506-4c90-ab93-11221af2abdc/activate

Content-Type: application/json
Authorization: Bearer <access_token>

Which responds with a pending Consent:

 



 




HTTP 412 Precondition Failed

{
  "consent": {
    "id": "01cd329f-e668-4ea9-903c-26d3f469cfb4",
    "status": "pending"
  }
}

Proceed with the Consent as explained in the SCA section.

On the UI, user will be able to set up their initial PIN and activate the card.

Activate card flow

# Freeze / unfreeze card

You can report the card stolen or lost as well as put it on a temporary or permanent block by sending a card update request.

Example freeze card request:

 





 


PATCH /v3/cards/a1c5ad61-5506-4c90-ab93-11221af2abdc

Content-Type: application/json
Authorization: Bearer <access_token>

{
  "status": "frozen"
}

In order to make a card active again after being frozen, proceed as explained in the card activation section.

The following actions are terminating, meaning there is no way to use the card again:

  • block - permanent block
  • stolen - report card as stolen
  • lost - report card as lost

# Apple Pay

Phase 1: Initiate process

Before implementation, you must contact Intergiro to start the process. Intergiro will assist with the initial steps required from both Apple and VISA.

Phase 2: Steps required

The following steps need to be completed prior to integration:

  • Entitlement and Whitelisting Request
  • Entitlement configuration
  • Splash screen and Apple Pay Mark control logic to be implemented in your application

Details about these steps can be found in the official Apple documentation.

Phase 3: Integration

Start the integration according to the technical documentation below.

Phase 4: Certification

Apple Pay certification must be completed before going live. This certification will need to be booked by your company and carried out by an authorised certifier. Intergiro can advise but cannot book this on your company’s behalf.

Apple Pay tokenization is initiated by calling the following endpoint with card ID you wish to tokenize:

 




POST /v3/cards/a1c5ad61-5506-4c90-ab93-11221af2abdc/apple_pay/tokenize

Content-Type: application/json
Authorization: Bearer <access_token>

Which responds with a pending Consent:

 



 




HTTP 412 Precondition Failed

{
  "consent": {
    "id": "e1dd9cd7-1650-42b3-8496-a970fb40ed3f",
    "status": "pending"
  }
}

Use the following endpoint with consent.id you got from response to the previous request:

 




POST /v3/consents/e30b2da8-879d-4d9d-b9f9-7c461500245f

Content-Type: application/json
Authorization: Bearer <access_token>

Response:

 




 




HTTP 200 OK

{
  "method": {
    "redirect_url": "https://3d.staging.intergiro.tech/...",
    "token": "YW55IGNhcm5hbCBwbGVhc3Vy",
    "expires_at": "2021-07-27T12:00:33+02:00"
  }
}

Using the method.token you can call the Intergiro.launch() method on the iOS Mobile SDK:





 

import IntergiroSDK

Intergiro.setPublicKey("<PUBLIC_KEY>")

Intergiro.launch(token: "YW55IGNhcm5hbCBwbGVhc3Vy", callback: completion)

This in turn will open a UI provided by Intergiro where the Apple Pay provisioning flow takes place.

Depending on what happened within the SDK UI, the callback may return a payload or an error. For a list of possible error codes, see the IntergiroError enum.

When provisioning was successful and the card was added to Apple Pay, the callback returns:

{
  "status": "approved"
}

When provisioning was not successful for any reason, the callback returns:

{
  "status": "error"
}

← Events →