BODY='{"card_identifier":"OLIV0001"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
BODY='{"card_identifier":"AA:BB:CC:DD:EE:01"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
{
"success": true,
"message": "Card found",
"card_serial": "OLIV0001",
"card_type": "PARENT",
"status": "ACTIVE",
"holder_name": "John Doe",
"holder_phone": "+23277123456",
"balance": "48,500.00 SLE"
}
Payment
Lookup Card
Get administrative details about a card
POST
/
payment
/
lookup-card
BODY='{"card_identifier":"OLIV0001"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
BODY='{"card_identifier":"AA:BB:CC:DD:EE:01"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
{
"success": true,
"message": "Card found",
"card_serial": "OLIV0001",
"card_type": "PARENT",
"status": "ACTIVE",
"holder_name": "John Doe",
"holder_phone": "+23277123456",
"balance": "48,500.00 SLE"
}
Administrative endpoint to resolve a card serial or MAC address to a subscriber.
Request
string
required
API key ID assigned to the integration
string
required
RFC3339 timestamp used in the HMAC signature
string
required
Hex-encoded HMAC-SHA256 of the request
Body Parameters
string
required
Card Serial OR MAC Address
Response
boolean
Whether lookup succeeded
string
Lookup result message
string
Card serial returned by the lookup
string
Card type
string
Card status
string
Linked subscriber name
string
Linked subscriber phone number
string
Formatted balance
Examples
BODY='{"card_identifier":"OLIV0001"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
BODY='{"card_identifier":"AA:BB:CC:DD:EE:01"}'
TIMESTAMP='2026-03-10T12:00:00Z'
SIGNATURE=$(printf 'POST\n/api/v1/payment/lookup-card\n%s\n%s' "$TIMESTAMP" "$BODY" | openssl dgst -sha256 -hmac "$OLIVE_HMAC_SECRET" -hex | sed 's/^.* //')
curl -X POST "https://demo.api.vultlocal.com/api/v1/payment/lookup-card" \
-H "X-API-Key-ID: $OLIVE_API_KEY_ID" \
-H "X-Timestamp: $TIMESTAMP" \
-H "X-Signature: $SIGNATURE" \
-H "Content-Type: application/json" \
-d "$BODY"
{
"success": true,
"message": "Card found",
"card_serial": "OLIV0001",
"card_type": "PARENT",
"status": "ACTIVE",
"holder_name": "John Doe",
"holder_phone": "+23277123456",
"balance": "48,500.00 SLE"
}
Errors
| Status | Code | Description |
|---|---|---|
| 400 | Validation error | Invalid payload |
| 401 | HMAC auth error | Missing/invalid X-API-Key-ID, X-Timestamp, or X-Signature |
| 404 | Not found | Card not found |
| 500 | Internal error | Server error |
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
application/json
Card lookup details
Supports any alphanumeric: CARD0001, 48290173K, etc.
Example:
"CARD0001"
Response
Card information retrieved
The response is of type object.
⌘I