Detach Payment Card from Authorized User

Detach Payment Card from Authorized User

This endpoint removes a payment card from a specific authorized user (subProfile) on a business account. Once detached, the authorized user can no longer initiate transactions using that card. Use this endpoint to revoke card access without deleting the subProfile or the card itself.

Endpoint

POST /api/subProfiles/detachFromPaymentCard

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when an authorized user should no longer have access to a specific payment card — for example, when an employee's role changes, when a card is reassigned to a different subProfile, or when access needs to be revoked immediately. This does not close the card or remove the subProfile from the account.

Query Parameters

Response

200 OK

A 200 status code confirms the payment card was successfully detached from the authorized user. No response body fields are returned.

{}

Error Codes

Common Mistakes

• Providing a SubProfileId that belongs to a personal customer — subProfiles are only available for business customers
• Omitting either SubProfileId or PaymentCardId — both query parameters are required
• Attempting to detach a card that is not currently attached to the specified subProfile
• Using a PaymentCardId formatted as a raw card number — always use the internal card ID, never a PAN (XXXX-XXXX-XXXX-XXXX)

Related Endpoints

• POST /api/subProfiles/attachToPaymentCard — Attach a payment card to an authorized user
• POST /api/subProfiles — Create a new authorized user (subProfile) for a business account
• GET /api/subProfiles — Retrieve authorized users associated with a business account
• DELETE /api/subProfiles/{subProfileId} — Remove an authorized user from a business account

Example

curl -X POST "https://api.banking.netevia.dev/api/subProfiles/detachFromPaymentCard?SubProfileId=1042&PaymentCardId=pc_9a8b7c6d5e4f3a2b" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json"