Lock Card

POST /api/v1/cards//lock - Lock a card

POST /api/v1/cards/{card_id}/lock

Lock Card

cURL

curl --request POST \
  --url https://api.usezentra.com/api/v1/cards/{card_id}/lock \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.usezentra.com/api/v1/cards/{card_id}/lock"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.usezentra.com/api/v1/cards/{card_id}/lock', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.usezentra.com/api/v1/cards/{card_id}/lock",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.usezentra.com/api/v1/cards/{card_id}/lock"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.usezentra.com/api/v1/cards/{card_id}/lock")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.usezentra.com/api/v1/cards/{card_id}/lock")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

Lock a card through the reviewed public gateway. This is the current public equivalent of older freeze card terminology.

Endpoint

POST /api/v1/cards/{card_id}/lock

Path Parameters

card_id · string · required

The card identifier returned during card creation or listing.

Request Body

This operation accepts an optional JSON body. If you send metadata, keep it stable and auditable. Common examples include:

• reason
• request_id
• idempotency_key

Example Request

curl -X POST https://api.usezentra.com/api/v1/cards/card_123/lock \
  -H "Authorization: Bearer YOUR_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "reason": "suspected_fraud",
    "request_id": "lock_card_123_001"
  }'

Response Notes

• The reviewed public OpenAPI models this as an accepted async-style operation.
• For longer-lived policy changes, use the security settings endpoint as well.

Next Steps

Unlock Card

Restore card usage when review is complete

Security Settings

Review broader card controls