Create card holder
curl --request POST \
--url https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reference_id": "employee_john_42",
"email": "john@acme.se",
"language": "sv"
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({reference_id: 'employee_john_42', email: 'john@acme.se', language: 'sv'})
};
fetch('https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders"
payload = {
"reference_id": "employee_john_42",
"email": "john@acme.se",
"language": "sv"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'reference_id' => 'employee_john_42',
'email' => 'john@acme.se',
'language' => 'sv'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"id": 15,
"reference_id": "employee_john_42",
"organization_id": 3,
"identity_id": 123,
"email": "john@acme.se",
"created_at": "2026-06-08T10:00:00.000000Z",
"updated_at": "2026-06-08T10:30:00.000000Z",
"meta": {
"ssn": true,
"signed": true,
"signed_at": "2026-06-08T10:30:00.000000Z",
"email_status": "delivered",
"pdpc_url": "https://sandbox-api.opencard.io/accounts/1/pdpcs/8/sign/abc...",
"system": "Acme EMS",
"organization_number": "5561234567"
},
"identity": {
"name": "Anna Andersson",
"employee_id": "001"
}
}Card Holders
Create card holder
Path A: email → PDPC email + eID. Path B: identity_id → instant, transactions flow immediately.
POST
/
accounts
/
{accountId}
/
organizations
/
{organizationId}
/
cardholders
Create card holder
curl --request POST \
--url https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reference_id": "employee_john_42",
"email": "john@acme.se",
"language": "sv"
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({reference_id: 'employee_john_42', email: 'john@acme.se', language: 'sv'})
};
fetch('https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders"
payload = {
"reference_id": "employee_john_42",
"email": "john@acme.se",
"language": "sv"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.opencard.io/api/v1/application/accounts/{accountId}/organizations/{organizationId}/cardholders",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'reference_id' => 'employee_john_42',
'email' => 'john@acme.se',
'language' => 'sv'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"id": 15,
"reference_id": "employee_john_42",
"organization_id": 3,
"identity_id": 123,
"email": "john@acme.se",
"created_at": "2026-06-08T10:00:00.000000Z",
"updated_at": "2026-06-08T10:30:00.000000Z",
"meta": {
"ssn": true,
"signed": true,
"signed_at": "2026-06-08T10:30:00.000000Z",
"email_status": "delivered",
"pdpc_url": "https://sandbox-api.opencard.io/accounts/1/pdpcs/8/sign/abc...",
"system": "Acme EMS",
"organization_number": "5561234567"
},
"identity": {
"name": "Anna Andersson",
"employee_id": "001"
}
}Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
Your account ID
Organization ID
Body
application/json
Response
201 - application/json
Card holder created
⌘I

