> ## Documentation Index
> Fetch the complete documentation index at: https://developer.finogates.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Mint a Card-Connect URL

> Returns a one-time URL the platform redirects its end-user to. The user fills the hosted card form and is bounced back to Finogate's landing page, which posts the resulting code+state to ``/connect/callback``. The tenant must hold active AFT or OCT capability before this endpoint will mint a URL.



## OpenAPI

````yaml POST /v1/platform/payment-methods/cards/connect
openapi: 3.1.0
info:
  title: Finogate Platform API v1
  version: 0.1.0
servers:
  - url: https://api-sandbox.finogates.com
    description: Sandbox
  - url: https://api.finogates.com
    description: Production
security: []
tags:
  - name: auth
  - name: users
  - name: payees
  - name: verification
  - name: bank accounts
  - name: card processing
  - name: digital-assets
  - name: international
  - name: fees
  - name: onboarding
  - name: pending-applications
  - name: wallets
  - name: payments
  - name: document mailing
  - name: merchant onboarding
  - name: catalog
  - name: webhooks
  - name: screening
  - name: Platform - File Scanning
  - name: phone-numbers
  - name: sms
  - name: calls
  - name: listings
  - name: Card Transfers
  - name: embed-tokens
paths:
  /v1/platform/payment-methods/cards/connect:
    post:
      tags:
        - Card Transfers
      summary: Mint a card-connect URL
      description: >-
        Returns a one-time URL the platform redirects its end-user to. The user
        fills the hosted card form and is bounced back to Finogate's landing
        page, which posts the resulting code+state to ``/connect/callback``. The
        tenant must hold active AFT or OCT capability before this endpoint will
        mint a URL.
      operationId: connect_card_v1_platform_payment_methods_cards_connect_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CardConnectUrlCreate'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CommonResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - _AuthenticatedBearer: []
components:
  schemas:
    CardConnectUrlCreate:
      properties:
        user_id:
          type: string
          format: uuid
          title: User Id
        entity_type:
          type: string
          enum:
            - personal
            - business
          title: Entity Type
          description: >-
            Onboarding track for this user: `personal` (individual, KYC) or
            `business` (merchant/company, KYB ~24-48h review). Defaults to
            `personal`.
          default: personal
        return_url:
          type: string
          maxLength: 2083
          minLength: 1
          format: uri
          title: Return Url
          description: >-
            Where the end-user lands after we finish handling the callback. Must
            be present in the tenant's redirect-URL allow-list.
        ip_address:
          anyOf:
            - type: string
              maxLength: 45
              minLength: 3
            - type: 'null'
          title: Ip Address
          description: >-
            End-user's IP address as observed by your application. Used as a
            fraud signal by the card processor. If omitted, we fall back to the
            IP your server is calling Finogate from — which is the integrator's
            server, not the cardholder, so passing this explicitly is strongly
            recommended.
        date_of_birth:
          anyOf:
            - type: string
            - type: 'null'
          title: Date Of Birth
          description: >-
            End-user date of birth in ISO 8601 format YYYY-MM-DD (e.g.
            1990-01-31). Required when the user has not completed KYC. Ignored
            when the user has approved KYC on file — in that case the verified
            DOB from the KYC record is used regardless of what is supplied here.
        phone:
          anyOf:
            - type: string
              maxLength: 32
            - type: 'null'
          title: Phone
          description: >-
            End-user phone number. Required when the user has not completed KYC
            and Finogate has no phone on file for them. Ignored when the user
            has approved KYC on file — the verified phone from the KYC record is
            used regardless of what is supplied here.
        address1:
          anyOf:
            - type: string
              maxLength: 255
            - type: 'null'
          title: Address1
          description: >-
            End-user street address (line 1). Required when the user has not
            completed KYC and Finogate has no address on file for them. Ignored
            when the user has approved KYC on file — the verified address from
            the KYC record is used regardless of what is supplied here.
        city:
          anyOf:
            - type: string
              maxLength: 128
            - type: 'null'
          title: City
          description: >-
            End-user city. Required when the user has not completed KYC and
            Finogate has no city on file for them. Ignored when the user has
            approved KYC on file — the verified city from the KYC record is used
            regardless of what is supplied here.
        state:
          anyOf:
            - type: string
              maxLength: 64
            - type: 'null'
          title: State
          description: >-
            End-user state (USPS 2-letter code for US addresses). Required when
            the user has not completed KYC and Finogate has no state on file for
            them. Ignored when the user has approved KYC on file — the verified
            state from the KYC record is used regardless of what is supplied
            here.
        postal_code:
          anyOf:
            - type: string
              maxLength: 16
            - type: 'null'
          title: Postal Code
          description: >-
            End-user postal (ZIP) code. Required when the user has not completed
            KYC and Finogate has no postal code on file for them. Ignored when
            the user has approved KYC on file — the verified postal code from
            the KYC record is used regardless of what is supplied here.
      type: object
      required:
        - user_id
        - return_url
      title: CardConnectUrlCreate
      description: Mint a one-time hosted card-add URL for one of the platform's users.
    CommonResponse:
      properties:
        status_code:
          type: integer
          title: Status Code
          description: HTTP status code for the response.
        data:
          title: Data
          description: Payload or error details.
        query_generated_time:
          type: integer
          title: Query Generated Time
          description: >-
            UTC timestamp (milliseconds since epoch) when response was
            generated.
      type: object
      required:
        - status_code
        - data
        - query_generated_time
      title: CommonResponse
      description: |-
        Standard response wrapper for single-object responses and errors.

        Generic over the payload type. A route that declares
        ``CommonResponse[SomeModel]`` gets the real ``data`` schema rendered in
        OpenAPI/Swagger; a bare ``CommonResponse`` leaves ``data`` untyped.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    _AuthenticatedBearer:
      type: oauth2
      flows:
        password:
          scopes: {}
          tokenUrl: /v1/platform/auth/token

````