sardis-cards

# Sardis Cards - Virtual Card Management for AI Agents

Issue virtual cards for AI agents to make real-world purchases with automatic spending controls, fraud detection, and instant freeze capabilities.

## Capabilities

- **Instant Card Issuance**: Create virtual cards in seconds
- **Spending Controls**: Per-transaction, daily, monthly limits
- **Merchant Restrictions**: Category-based and merchant-specific controls
- **Freeze/Unfreeze**: Instant card control for security
- **Transaction Monitoring**: Real-time transaction alerts and history
- **Automatic Fraud Detection**: Block suspicious activity automatically

## Security Model

**ALWAYS ENFORCE:**
- NEVER expose full card numbers in logs or responses
- ALWAYS freeze cards on anomaly detection
- ALWAYS use spending limits (never unlimited)
- ALWAYS log card creation and transactions
- FAIL CLOSED on fraud detection (freeze immediately)

## Quick Setup

```bash
export SARDIS_API_KEY=sk_your_key_here
```

## API Endpoint Patterns

Base URL: `https://api.sardis.sh/v2`

### Issue Virtual Card

```bash
# Create a new virtual card
curl -X POST https://api.sardis.sh/v2/cards \
  -H "Authorization: Bearer $SARDIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "agent_id": "agent_abc123",
    "name": "SaaS Subscriptions Card",
    "spending_limit": {
      "per_transaction": "100.00",
      "daily": "500.00",
      "monthly": "2000.00"
    },
    "merchant_controls": {
      "allowed_categories": ["software", "saas", "cloud_services"],
      "blocked_merchants": []
    },
    "expires_in_months": 12
  }'

# Response includes masked card number (full number retrieved separately)
```

### Get Card Details

```bash
# Get card information (masked)
curl -X GET https://api.sardis.sh/v2/cards/{card_id} \
  -H "Authorization: Bearer $SARDIS_API_KEY"

# Response:
# {
#   "id": "card_abc123",
#   "last_four": "4242",
#   "status": "active",
#   "spending_limit": {...},
#   "current_spend": {"daily": "125.00", "mont...