Cardtonic

Cardtonic Business API

The Cardtonic Business API is the account, credential and compliance layer of Cardtonic's developer program, and the only Cardtonic surface with a published machine-readable contract. It covers business-account signup and email verification, business login, password recovery and change, two-factor enrollment, Nigerian BVN and corporate KYC submission, file upload, and issuance and retrieval of the PRIV_-prefixed API key a merchant integration authenticates with. Cardtonic publishes it as OpenAPI 3.0.1 through an Apidog-hosted documentation site at docs.cardtonic.com; the gift-card catalog, purchase, sale and bulk-order operations advertised on the developer page are NOT part of it and have no published contract.

GitHub OpenAPI

Operations 14

POST /auth/signup/business SIGN UP BUSINESS USER #
PATCH /auth/verify-email VERIFY EMAIL #
POST /auth/resend-verification-email RESEND EMAIL VERIFICATION #
POST /auth/login/business LOGIN BUSINESS #
POST /auth/forgot-password FORGOT PASSWORD #
POST /auth/reset-password RESET PASSWORD #
POST /users/kyc/verify-bvn Add BVN #
POST /users/enable-2fa ENABLE 2FA #
POST /users/generate-key GENERATE API KEY #
GET /users/show-api-key FETCH API KEY #
POST /users/disable-2fa DISABLE 2FA #
PATCH /users/change-password CHANGE PASSWORD #
POST /users/kyc/verify-kyc Verify KYC #
PUT /users/upload Upload File #

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/authentication/cardtonic-authentication.yml
📖
APIReference
https://docs.cardtonic.com
📖
Documentation
https://docs.cardtonic.com

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/openapi/cardtonic-openapi.yml

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/overlays/cardtonic-business-api-overlay.yaml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/conventions/cardtonic-conventions.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/errors/cardtonic-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/data-model/cardtonic-data-model.yml
🔗
Sandbox
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/sandbox/cardtonic-sandbox.yml
🔗
MCPServer
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/mcp/cardtonic-mcp.yml
🔗
AgentSkill
https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/skills/_index.yml
🔗
SignUp
https://cardtonic.com/developer

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/business-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cardtonic-openapi.yml Raw ↑ 
# method: searched
# source: https://docs.cardtonic.com - the 14 per-operation OpenAPI 3.0.1 fragments Cardtonic publishes at <operation>.md
openapi: 3.0.1
info:
  title: Cardtonic Business API
  description: Cardtonic business/developer API. Covers business-account signup and email verification,
    business login, password recovery, BVN and KYC verification, two-factor authentication, API-key issuance
    and retrieval, and file upload. Harvested from Cardtonic's own published documentation at https://docs.cardtonic.com;
    the gift-card catalog, purchase, sale and bulk-order operations advertised on https://cardtonic.com/developer
    are NOT published in that documentation and are not represented here.
  version: 1.0.0
  contact:
    name: Cardtonic Support
    email: support@cardtonic.com
    url: https://cardtonic.com/contact-us
  termsOfService: https://cardtonic.com/terms
x-provenance:
  method: searched
  generated: '2026-09-05'
  source: https://docs.cardtonic.com/llms.txt + the 14 per-operation OpenAPI fragments published at https://docs.cardtonic.com/<operation>.md
  note: 'Operations, parameters, request bodies, responses and servers[] are VERBATIM from Cardtonic''s
    own Apidog-published OpenAPI fragments (see openapi/_original/). API Evangelist added only: info.title,
    info.description, info.contact, info.termsOfService (the source info block was empty) and one operationId
    per operation (the source declares none). Those additions are also recorded in overlays/cardtonic-business-api-overlay.yaml.'
  ownership: servers[] declares https://api.cardtonic.com/v1 - Cardtonic's own API host - on all 14 fragments;
    request headers are X-Tonic-Env and example asset URLs are on staging.assets.cardtonic.com, both first-party
    to Cardtonic (The Tonic Technologies).
  excluded: The Apidog project also carries 5 default Petstore 'Sample APIs' operations (/pet, /pet/{petId},
    /pet/findByStatus). They are Apidog demo content, not a Cardtonic surface, and were deliberately excluded.
  liveness: api.cardtonic.com resolves (Cloudflare) but returns a Go '404 page not found' on / , /v1 and
    on the documented paths anonymously as of 2026-09-05; credentials are issued through the waitlist
    at https://cardtonic.com/developer.
servers:
- url: https://api.cardtonic.com/v1
  description: Prod Env
paths:
  /auth/signup/business:
    post:
      summary: SIGN UP BUSINESS USER
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                name:
                  type: string
                password:
                  type: string
                phoneNumber:
                  type: string
                username:
                  type: string
                email:
                  type: string
                country:
                  type: string
                business:
                  type: object
                  properties:
                    name:
                      type: string
                    website:
                      type: string
                    description:
                      type: string
                  required:
                  - name
                  - website
                  - description
                  x-apidog-orders:
                  - name
                  - website
                  - description
              required:
              - name
              - password
              - phoneNumber
              - username
              - email
              - country
              - business
              x-apidog-orders:
              - name
              - password
              - phoneNumber
              - username
              - email
              - country
              - business
            example:
              name: Akinbiyi Fatunmbi
              password: Computer7,
              phoneNumber: '+2347038784406'
              username: akinpiers
              email: akinbiyi@thetonictech.com
              country: Nigeria
              business:
                name: Akinpiers's Business
                website: https://thetonictech.com
                description: About this business
      responses:
        '201':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                  success:
                    type: boolean
                  data:
                    type: object
                    properties:
                      name:
                        type: string
                      email:
                        type: string
                      phoneNumber:
                        type: string
                      username:
                        type: string
                      business:
                        type: object
                        properties:
                          name:
                            type: string
                          website:
                            type: string
                          description:
                            type: string
                        required:
                        - name
                        - website
                        - description
                        x-apidog-orders:
                        - name
                        - website
                        - description
                    required:
                    - name
                    - email
                    - phoneNumber
                    - username
                    - business
                    x-apidog-orders:
                    - name
                    - email
                    - phoneNumber
                    - username
                    - business
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                required:
                - message
                - success
                - data
                - meta
                x-apidog-orders:
                - message
                - success
                - data
                - meta
              example:
                message: data fetched
                success: true
                data:
                  name: Michael George
                  email: george@thetonictech.com
                  phoneNumber: '2348000000000'
                  username: michaelgeorge_1730672802298
                  business:
                    name: Mikkycody's Business
                    website: https://thetonictech.com
                    description: About this business
                meta:
                  settings: {}
          headers: {}
          x-apidog-name: 201 SIGN UP BUSINESS USER
        '422':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                  errors:
                    type: array
                    items:
                      type: object
                      properties:
                        message:
                          type: string
                        field:
                          type: string
                        location:
                          type: string
                      required:
                      - message
                      - field
                      - location
                      x-apidog-orders:
                      - message
                      - field
                      - location
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: validation errors
                meta:
                  settings: {}
                errors:
                - message: password must contain 8 characters and at least 1 number, 1 uppercase, and
                    1 lowercase letter
                  field: password
                  location: body
                - message: phone number must be correct nigerian number
                  field: phoneNumber
                  location: body
                - message: name cannot be empty
                  field: name
                  location: body
                - message: business must be an object
                  field: business
                  location: body
                - message: business object cannot be empty
                  field: business
                  location: body
                - message: Business must be an object
                  field: business
                  location: body
                - message: must be valid email
                  field: email
                  location: body
                - message: must be valid email
                  field: email
                  location: body
          headers: {}
          x-apidog-name: 422 SIGN UP BUSINESS USER
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https://app.apidog.com/web/project/737471/apis/api-11716510-run
      operationId: signUpBusinessUser
  /auth/verify-email:
    patch:
      summary: VERIFY EMAIL
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                token:
                  type: string
                otp:
                  type: string
              required:
              - token
              - otp
              x-apidog-orders:
              - token
              - otp
            example:
              token: I46xcijA9RBNP35xxt5ol
              otp: '3271'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                  success:
                    type: boolean
                  data:
                    type: object
                    properties: {}
                    x-apidog-orders: []
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                required:
                - message
                - success
                - data
                - meta
                x-apidog-orders:
                - message
                - success
                - data
                - meta
              example:
                message: email verified, welcome to Cardtonic, please login to continue
                success: true
                data: {}
                meta:
                  settings: {}
          headers: {}
          x-apidog-name: 200 VERIFY EMAIL
        '400':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      email:
                        type: 'null'
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - email
                    - settings
                    x-apidog-orders:
                    - email
                    - settings
                  errors:
                    type: array
                    items:
                      type: string
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: you entered an incorrect code, or the verification link has expired
                meta:
                  email: null
                  settings: {}
                errors: []
          headers: {}
          x-apidog-name: 400 VERIFY EMAIL
        '422':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                  errors:
                    type: array
                    items:
                      type: object
                      properties:
                        message:
                          type: string
                        field:
                          type: string
                        location:
                          type: string
                      required:
                      - message
                      - field
                      - location
                      x-apidog-orders:
                      - message
                      - field
                      - location
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: validation errors
                meta:
                  settings: {}
                errors:
                - message: provide the token
                  field: token
                  location: body
                - message: provide the otp
                  field: otp
                  location: body
          headers: {}
          x-apidog-name: 422 VERIFY EMAIL
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https://app.apidog.com/web/project/737471/apis/api-11716511-run
      operationId: verifyEmail
  /auth/resend-verification-email:
    post:
      summary: RESEND EMAIL VERIFICATION
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
              required:
              - email
              x-apidog-orders:
              - email
            example:
              email: george@thetonictech.com
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                  success:
                    type: boolean
                  data:
                    type: object
                    properties:
                      token:
                        type: string
                      email:
                        type: string
                    required:
                    - token
                    - email
                    x-apidog-orders:
                    - token
                    - email
                  meta:
                    type: 'null'
                required:
                - message
                - success
                - data
                - meta
                x-apidog-orders:
                - message
                - success
                - data
                - meta
              example:
                message: a new email verification link has been sent to your mail
                success: true
                data:
                  token: Mil-IM1fo5cWdvlJZq2p0
                  email: george@thetonictech.com
                meta: null
          headers: {}
          x-apidog-name: 200 RESEND EMAIL VERIFICATION
        '403':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                  errors:
                    type: array
                    items:
                      type: string
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: your email is verified, please sign in to continue to your dashboard
                meta:
                  settings: {}
                errors: []
          headers: {}
          x-apidog-name: 403 RESEND EMAIL VERIFICATION
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https://app.apidog.com/web/project/737471/apis/api-11716512-run
      operationId: resendEmailVerification
  /auth/login/business:
    post:
      summary: LOGIN BUSINESS
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                password:
                  type: string
                email:
                  type: string
              required:
              - password
              - email
              x-apidog-orders:
              - password
              - email
            example:
              password: Password1#,
              email: george@thetonictech.com
      responses:
        '403':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties: {}
                    x-apidog-orders: []
                  errors:
                    type: array
                    items:
                      type: string
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: you're yet to verify your email, please check your mail for verification link.
                meta: {}
                errors: []
          headers: {}
          x-apidog-name: 403 LOGIN BUSINESS
        '422':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties: {}
                    x-apidog-orders: []
                  errors:
                    type: array
                    items:
                      type: object
                      properties:
                        message:
                          type: string
                        field:
                          type: string
                        location:
                          type: string
                      required:
                      - message
                      - field
                      - location
                      x-apidog-orders:
                      - message
                      - field
                      - location
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: validation errors
                meta: {}
                errors:
                - message: password must contain 8 characters and at least 1 number, 1 uppercase, and
                    1 lowercase letter
                  field: password
                  location: body
                - message: you should provide your username or email
                  field: ''
                  location: body
                - message: must be valid email
                  field: email
                  location: body
                - message: must be valid email
                  field: email
                  location: body
          headers: {}
          x-apidog-name: 422 LOGIN BUSINESS
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https://app.apidog.com/web/project/737471/apis/api-11716513-run
      operationId: loginBusiness
  /auth/forgot-password:
    post:
      summary: FORGOT PASSWORD
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
              required:
              - email
              x-apidog-orders:
              - email
            example:
              email: george@thetonictech.com
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                  success:
                    type: boolean
                  data:
                    type: object
                    properties:
                      token:
                        type: string
                      username:
                        type: string
                    required:
                    - token
                    - username
                    x-apidog-orders:
                    - token
                    - username
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                required:
                - message
                - success
                - data
                - meta
                x-apidog-orders:
                - message
                - success
                - data
                - meta
              example:
                message: otp has been sent to 'george@thetonictech.com
                success: true
                data:
                  token: 30c504889e7325179003880bfd096303ec3b13c877a33b2f016e9a1b16d6f79b5338ad4870f38dec99c718ea298e9a3e3746a5a7376a1e8d4d196b5ce0fbbe63
                  username: michaelgeorge_1730672802298
                meta:
                  settings: {}
          headers: {}
          x-apidog-name: 200 FORGOT PASSWORD
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https://app.apidog.com/web/project/737471/apis/api-11716514-run
      operationId: forgotPassword
  /auth/reset-password:
    post:
      summary: RESET PASSWORD
      deprecated: false
      description: ''
      tags:
      - Auth
      parameters:
      - name: X-Tonic-Env
        in: header
        description: ''
        required: true
        example: development
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                otp:
                  type: string
                token:
                  type: string
                password:
                  type: string
              required:
              - otp
              - token
              - password
              x-apidog-orders:
              - otp
              - token
              - password
            example:
              otp: '8179'
              token: 433ccf537425e1f4064244bb9852b317f46886b163624aebe37e5680a02761f63caaeced7252c43724de070270e9f43a0be4cd81dbd3c91bc7b1fbd7fb38eb08
              password: Password1#
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                  success:
                    type: boolean
                  data:
                    type: object
                    properties: {}
                    x-apidog-orders: []
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                required:
                - message
                - success
                - data
                - meta
                x-apidog-orders:
                - message
                - success
                - data
                - meta
              example:
                message: password successfully changed, please login to continue to your dashboard
                success: true
                data: {}
                meta:
                  settings: {}
          headers: {}
          x-apidog-name: 200 RESET PASSWORD
        '400':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                  errors:
                    type: array
                    items:
                      type: string
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: incorrect and/or expired otp, please request a new password reset otp
                meta:
                  settings: {}
                errors: []
          headers: {}
          x-apidog-name: 400 RESET PASSWORD
        '422':
          description: ''
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                  message:
                    type: string
                  meta:
                    type: object
                    properties:
                      settings:
                        type: object
                        properties: {}
                        x-apidog-orders: []
                    required:
                    - settings
                    x-apidog-orders:
                    - settings
                  errors:
                    type: array
                    items:
                      type: object
                      properties:
                        message:
                          type: string
                        field:
                          type: string
                        location:
                          type: string
                      required:
                      - message
                      - field
                      - location
                      x-apidog-orders:
                      - message
                      - field
                      - location
                required:
                - success
                - message
                - meta
                - errors
                x-apidog-orders:
                - success
                - message
                - meta
                - errors
              example:
                success: false
                message: validation errors
                meta:
                  settings: {}
                errors:
                - message: password must contain 8 characters and at least 1 number, 1 uppercase, and
                    1 lowercase letter
                  field: password
                  location: body
                - message: provide the token
                  field: token
                  location: body
                - message: provide the otp
                  field: otp
                  location: body
          headers: {}
          x-apidog-name: 422 RESET PASSWORD
      security: []
      x-apidog-folder: Auth
      x-apidog-status: released
      x-run-in-apidog: https:

# --- truncated at 32 KB (53 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cardtonic/refs/heads/main/openapi/cardtonic-openapi.yml