# Get all spend rules for a managed card

Fetch the list of spend rules associated with the managed card identified by the id path parameter.

Endpoint: GET /managed_cards/{id}/spend_rules
Version: 3.63.5
Security: auth_token, api-key

## Path parameters:

  - `id` (string, required)

## Response 200 fields (application/json):

  - `cardLevelSpendRules` (object)

  - `cardLevelSpendRules.allowedMerchantCategories` (array)
    Whitelist MCC: A list of allowed merchant category codes (MCCs). If the MCC does not match, then the transaction will be declined. If an MCC is also in the blocked list, the blocked list will take precedence.

  - `cardLevelSpendRules.blockedMerchantCategories` (array)
    Blacklist MCC: A list of disallowed merchant category codes (MCCs). If the MCC matches, then the transaction will be declined. If an MCC is also in the allowed list, the blocked list will take precedence.

  - `cardLevelSpendRules.allowedMerchantIds` (array)
    Whitelist Merchant Id: A list of allowed merchant IDs. If the Merchant Id does not match, then the transaction will be declined. If a Merchant Id is also provided in the blocked list, the blocked list will take precedence.

  - `cardLevelSpendRules.blockedMerchantIds` (array)
    Blacklist Merchant Id: A list of disallowed merchant IDs. If the Merchant Id matches, then the transaction will be declined. If a Merchant Id is also in the allowed list, the blocked list will take precedence.

  - `cardLevelSpendRules.allowedMerchantCountries` (array)
    Whitelist Merchant Country: A list of allowed merchant countries, in ISO 3166-1 alpha-2 format. If the Merchant country does not match, then the transaction will be declined. If a Merchant Country is also provided in the blocked list, the blocked list will take precedence.

  - `cardLevelSpendRules.blockedMerchantCountries` (array)
    Blacklist Merchant Country: A list of disallowed merchant countries, in ISO 3166-1 alpha-2 format. If the Merchant country matches, then the transaction will be declined. If a Merchant Country is also in the allowed list, the blocked list will take precedence.

  - `cardLevelSpendRules.allowContactless` (boolean)
    Indicates if a contactless transaction is allowed on the card.

  - `cardLevelSpendRules.allowAtm` (boolean)
    Indicates if an ATM Withdrawal transaction is allowed on the card.

  - `cardLevelSpendRules.allowECommerce` (boolean)
    Indicates if an online transaction is allowed on the card.

  - `cardLevelSpendRules.allowCashback` (boolean)
    Indicates if a cashback transaction at a physical terminal is allowed on the card.

  - `cardLevelSpendRules.allowCreditAuthorisations` (boolean)
    Indicates if a the card can receive a credit transaction.

  - `cardLevelSpendRules.rolloverPolicy` (object)
    The rollover policy will dictate how Weavr handles any eventual overspending. This is possible if a merchant clears more funds than authorised, or when a merchant clears funds without authorising, resulting in the availableToSpend value to go into negative. Rollover is relative to a spendLimit.interval

  - `cardLevelSpendRules.rolloverPolicy.rolloverNegative` (boolean, required)
    If set to true any overspend will keep rolling over and get deducted in the upcoming intervals until the availableToSpend is back to a positive value. Any overspend will be deducted from the availableToSpend at the beginning of the next interval.

  - `cardLevelSpendRules.spendLimit` (array)
    The total amount of funds that can be spent using this card, in a given time interval.

  - `cardLevelSpendRules.spendLimit.startTimestamp` (integer)
    The start timestamp of the spend limit, expressed in Epoch timestamp using millisecond precision.

  - `cardLevelSpendRules.spendLimit.value` (object, required)
    The spend limit, as amount and currency, (for the given interval).

  - `cardLevelSpendRules.spendLimit.value.currency` (string, required)
    The currency expressed in ISO-4217 code. Example: GBP, EUR, USD.

  - `cardLevelSpendRules.spendLimit.value.amount` (integer, required)
    The monetary amount, scaled to the lowest denomination of the currency.

Example, an amount of 1000 for a EUR currency is actually 1000 Euro cents or EUR 10.00.

  - `cardLevelSpendRules.spendLimit.interval` (string, required)
    The time period for which the spendLimit is valid.
 - DAILY: starting from 00:00:00 UTC of current day to 23:59:59 UTC of current day
 - WEEKLY: 00:00:00 UTC Monday of current week to following Sunday 23:59:59 UTC
 - MONTHLY: 1st of current calendar month to end of current calendar month
 - QUARTERLY: starting from beginning of current quarter where quarters are defined as follows:
  - 1 January 00:00:00 UTC to 31 March 23:59:59 UTC
  - 1 April 00:00:00 UTC to 30 Jun 23:59:59 UTC
  - 1 July 00:00:00 UTC to 30 September 23:59:59 UTC
  - 1 October 00:00:00 UTC to 31 December 23:59:59 UTC

- YEARLY: 1 January 00:00:00 UTC of current calendar year to 31 December 23:59:59 UTC of current calendar year.
- ALWAYS: This indicates that the spendLimit is the total amount that can be spent through the card throughout the whole lifetime of the card.
    Enum: "DAILY", "WEEKLY", "MONTHLY", "QUARTERLY", "YEARLY", "ALWAYS"

  - `cardLevelSpendRules.minTransactionAmount` (integer)
    The minimum transaction amount, in card currency, that is allowed. If the transaction amount is less than this value, then the transaction will be declined.

  - `cardLevelSpendRules.maxTransactionAmount` (integer)
    The maximum transaction amount, in card currency, that is allowed. If the transaction amount is greater than this value, then the transaction will be declined.

  - `profileLevelSpendRules` (object)

  - `profileLevelSpendRules.authForwardingEnabled` (boolean)
    Indicates if auth forwarding is enabled on profile level

  - `identityLevelSpendRules` (object)

  - `identityLevelSpendRules.minTransactionAmount` (integer)
    The minimum transaction amount, in card currency, that is allowed. If the transaction amount is less than this value, then the transaction will be declined. Omit this, or set to 0 if no maximum transaction amount is to be set.

  - `allowedMerchantCategories` (array)
    Whitelist MCC: A list of allowed merchant category codes (MCCs). If the MCC does not match, then the transaction will be declined. If an MCC is also in the blocked list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."allowedMerchantCategories" instead.

  - `blockedMerchantCategories` (array)
    Blacklist MCC: A list of disallowed merchant category codes (MCCs). If the MCC matches, then the transaction will be declined. If an MCC is also in the allowed list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."blockedMerchantCategories" instead.

  - `allowedMerchantIds` (array)
    Whitelist Merchant Id: A list of allowed merchant IDs. If the Merchant Id does not match, then the transaction will be declined. If a Merchant Id is also provided in the blocked list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."allowedMerchantIds" instead.

  - `blockedMerchantIds` (array)
    Blacklist Merchant Id: A list of disallowed merchant IDs. If the Merchant Id matches, then the transaction will be declined. If a Merchant Id is also in the allowed list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."blockedMerchantIds" instead.

  - `allowedMerchantCountries` (array)
    Whitelist Merchant Country: A list of allowed merchant countries, in ISO 3166-1 alpha-2 format. If the Merchant country does not match, then the transaction will be declined. If a Merchant Country is also provided in the blocked list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."allowedMerchantCountries" instead.

  - `blockedMerchantCountries` (array)
    Blacklist Merchant Country: A list of disallowed merchant countries, in ISO 3166-1 alpha-2 format. If the Merchant country matches, then the transaction will be declined. If a Merchant Country is also in the allowed list, the blocked list will take precedence. This field is deprecated - use "cardLevelSpendRules"."blockedMerchantCountries" instead.

  - `allowContactless` (boolean)
    Indicates if a contactless transaction is allowed on the card. This field is deprecated - use "cardLevelSpendRules"."allowContactless" instead.

  - `allowAtm` (boolean)
    Indicates if an ATM Withdrawal transaction is allowed on the card. This field is deprecated - use "cardLevelSpendRules"."allowAtm" instead.

  - `allowECommerce` (boolean)
    Indicates if an online transaction is allowed on the card. This field is deprecated - use "cardLevelSpendRules"."allowECommerce" instead.

  - `allowCashback` (boolean)
    Indicates if a cashback transaction at a physical terminal is allowed on the card. This field is deprecated - use "cardLevelSpendRules"."allowCashback" instead.

  - `allowCreditAuthorisations` (boolean)
    Indicates if a the card can receive a credit transaction. This field is deprecated - use "cardLevelSpendRules"."allowCashback" instead.

  - `minTransactionAmount` (integer)
    The minimum transaction amount, in card currency, that is allowed. If the transaction amount is less than this value, then the transaction will be declined. Omit this, or set to 0 if no maximum transaction amount is to be set. This field is deprecated - use "cardLevelSpendRules"."minTransactionAmount" instead.

  - `maxTransactionAmount` (integer)
    The maximum transaction amount, in card currency, that is allowed. If the transaction amount is greater than this value, then the transaction will be declined. Omit this, or set to 0 if no maximum transaction amount is to be set. This field is deprecated - use "cardLevelSpendRules"."maxTransactionAmount" instead.

  - `spendLimit` (array)
    The total amount of funds that can be spent using this card, in a given time interval. This field is deprecated - use "cardLevelSpendRules"."spendLimit" instead.

## Response 400 fields (application/json):

  - `message` (string)
    When present helps to identify and fix the problem.

  - `syntaxErrors` (object)
    Is returned as part of an HTTP error response whenever a syntax error is detected. A list of the fields together with their syntax error will be provided.

  - `syntaxErrors.invalidFields` (array)

  - `syntaxErrors.invalidFields.params` (array)

  - `syntaxErrors.invalidFields.fieldName` (string)

  - `syntaxErrors.invalidFields.error` (string)
    Enum: "REQUIRED", "HAS_TEXT", "REQUIRES", "SIZE", "RANGE", "IN", "NOT_IN", "REGEX", "EXACTLY", "AT_LEAST", "AT_MOST", "ALL_OR_NONE"

## Response 404 fields (application/json):

  - `code` (string)

  - `message` (string)

## Response default fields (application/json):

  - `code` (string)

  - `message` (string)


## Response 401 fields

## Response 403 fields

## Response 429 fields

## Response 500 fields

## Response 503 fields