> ## Documentation Index
> Fetch the complete documentation index at: https://docs.visorfinance.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List credit cards

> Returns the credit cards of a space with their limit and the dates of the current fatura. Requires the `pfm:read` scope. The card `id` is the credit account `id` from `GET /v1/spaces/{space_id}/accounts`. `used_limit` and `available_limit` are the figures the Faturas page shows and are null while the bank has not sent data for the card.



## OpenAPI

````yaml /openapi.json get /v1/spaces/{space_id}/cards
openapi: 3.0.3
info:
  description: >-
    Personal REST API for Visor Pro and Premium users. Authenticate with a
    personal API token created in Visor Settings, sent as `Authorization: Bearer
    visor_pat_...`, or with an OAuth access token from the Visor CLI browser
    login.
  title: Visor Personal API
  version: 1.0.0
servers:
  - url: https://api.visorfinance.app
    variables: {}
security:
  - personal_api_token: []
  - visor_cli_oauth:
      - pfm:read
tags: []
paths:
  /v1/spaces/{space_id}/cards:
    get:
      tags:
        - Cards
      summary: List credit cards
      description: >-
        Returns the credit cards of a space with their limit and the dates of
        the current fatura. Requires the `pfm:read` scope. The card `id` is the
        credit account `id` from `GET /v1/spaces/{space_id}/accounts`.
        `used_limit` and `available_limit` are the figures the Faturas page
        shows and are null while the bank has not sent data for the card.
      operationId: VisorWeb.Api.V1.CardController.index
      parameters:
        - description: A space `id` from `GET /v1/spaces`
          in: path
          name: space_id
          required: true
          schema:
            format: uuid
            type: string
      responses:
        '200':
          content:
            application/json:
              example:
                data:
                  - available_limit: '6479.65'
                    credit_limit: '8000'
                    currency_code: BRL
                    current_bill_close_date: '2026-10-25'
                    current_bill_due_date: '2026-11-05'
                    id: 0b7f6d2e-8c1a-4f3b-9d5e-6a2c4b8e1f90
                    name: Nubank Ultravioleta
                    provider_name: Nubank
                    used_limit: '1520.35'
              schema:
                $ref: '#/components/schemas/CardListResponse'
          description: Credit cards of the space
          headers:
            x-ratelimit-limit:
              description: Requests allowed for this token per minute
              schema:
                example: 60
                type: integer
              style: simple
            x-ratelimit-remaining:
              description: Requests left for this token in the current minute
              schema:
                example: 59
                type: integer
              style: simple
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
        '401':
          content:
            application/json:
              example:
                errors:
                  - code: INVALID_TOKEN
                    details: {}
                    message: The personal API token is not valid.
                    request_id: F8x2kQ9vXc1AAAAB
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Missing, invalid, expired, or revoked token
          headers:
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
        '403':
          content:
            application/json:
              example:
                errors:
                  - code: INSUFFICIENT_SCOPE
                    details:
                      required_scope: pfm:read
                    message: The personal API token does not grant this operation.
                    request_id: F8x2kQ9vXc1AAAAB
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Pro or Premium plan required, or insufficient scope
          headers:
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
        '404':
          content:
            application/json:
              example:
                errors:
                  - code: NOT_FOUND
                    details: {}
                    message: The resource does not exist.
                    request_id: F8x2kQ9vXc1AAAAB
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The space does not exist or the token's user cannot access it
          headers:
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
        '406':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The client does not accept JSON
          headers:
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
        '429':
          content:
            application/json:
              example:
                errors:
                  - code: RATE_LIMITED
                    details:
                      retry_after_seconds: 42
                    message: >-
                      Too many requests. Retry after the number of seconds in
                      Retry-After.
                    request_id: F8x2kQ9vXc1AAAAB
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Rate limit exceeded
          headers:
            retry-after:
              description: Seconds until the current window ends
              schema:
                example: 42
                type: integer
              style: simple
            x-ratelimit-limit:
              description: Requests allowed for this token per minute
              schema:
                example: 60
                type: integer
              style: simple
            x-ratelimit-remaining:
              description: Requests left for this token in the current minute
              schema:
                example: 59
                type: integer
              style: simple
            x-request-id:
              description: Request identifier, also returned as `request_id` in errors
              schema:
                type: string
              style: simple
      callbacks: {}
components:
  schemas:
    CardListResponse:
      additionalProperties: false
      properties:
        data:
          items:
            $ref: '#/components/schemas/Card'
          type: array
      required:
        - data
      title: CardListResponse
      type: object
    ErrorResponse:
      additionalProperties: false
      properties:
        errors:
          items:
            $ref: '#/components/schemas/Error'
          minItems: 1
          type: array
      required:
        - errors
      title: ErrorResponse
      type: object
    Card:
      additionalProperties: false
      properties:
        available_limit:
          description: >-
            The limit left to spend; null when the limit or the used part is
            unknown
          example: '6479.65'
          format: decimal
          nullable: true
          type: string
        credit_limit:
          description: The card limit as a decimal string; null when the limit is unknown
          example: '8000'
          format: decimal
          nullable: true
          type: string
        currency_code:
          description: ISO 4217 code of every amount of the card
          example: BRL
          type: string
        current_bill_close_date:
          description: The close date of the current fatura
          example: '2026-10-25'
          format: date
          nullable: true
          type: string
        current_bill_due_date:
          description: The due date of the current fatura
          example: '2026-11-05'
          format: date
          nullable: true
          type: string
        id:
          description: >-
            The credit account `id`, the same as in `GET
            /v1/spaces/{space_id}/accounts`
          format: uuid
          type: string
        name:
          description: The name the user set, or the bank's account name
          type: string
        provider_name:
          description: >-
            The bank or institution name of a connected card; null for a manual
            card
          nullable: true
          type: string
        used_limit:
          description: >-
            The part of the limit in use, as the Faturas page shows it; null
            when Visor has no bank data for the card yet
          example: '1520.35'
          format: decimal
          nullable: true
          type: string
      required:
        - id
        - name
        - provider_name
        - currency_code
        - credit_limit
        - used_limit
        - available_limit
        - current_bill_close_date
        - current_bill_due_date
      title: Card
      type: object
    Error:
      additionalProperties: false
      properties:
        code:
          description: Stable machine-readable code
          example: INVALID_TOKEN
          type: string
        details:
          additionalProperties: true
          description: Code-specific context
          type: object
        message:
          description: English text for developers
          type: string
        request_id:
          description: The x-request-id response header of the request
          nullable: true
          type: string
      required:
        - code
        - message
        - details
        - request_id
      title: Error
      type: object
  securitySchemes:
    personal_api_token:
      bearerFormat: visor_pat_<public_id>_<secret>
      description: Personal API token created in Visor Settings
      scheme: bearer
      type: http
    visor_cli_oauth:
      description: >-
        OAuth 2.0 access token of the Visor CLI browser login (authorization
        code with PKCE). Only the first-party Visor CLI client can use it on
        this API.
      flows:
        authorizationCode:
          authorizationUrl: https://dashboard.visorfinance.app/oauth/authorize
          refreshUrl: https://dashboard.visorfinance.app/oauth/token
          scopes:
            pfm:read: Read financial data
            pfm:transactions:write: Create, edit, and delete transactions
            pix:payments:write: Start Pix payments that you confirm with biometrics at your bank
          tokenUrl: https://dashboard.visorfinance.app/oauth/token
      type: oauth2

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.