Marqeta Core API

naftiko: 1.0.0-alpha2
info:
  label: Marqeta Core API
  description: The Marqeta Core API is a RESTful interface that enables developers to build and manage card payment programs
    programmatically. It provides endpoints for creating and managing users (cardholders) and businesses, issuing physical
    and virtual payment cards, defining spending controls via authorization controls and velocity controls, processing and
    retrieving transactions, managing funding sources, and configuring webhooks for real-time event notifications. The API
    supports use cases including prepaid cards, expense management, earned wage access, buy now pay later programs, and credit
    card issua
  tags:
  - Marqeta
  - API
  created: '2026-05-06'
  modified: '2026-05-06'
capability:
  consumes:
  - type: http
    namespace: marqeta
    baseUri: https://sandbox-api.marqeta.com/v3
    description: Marqeta Core API HTTP API.
    authentication:
      type: basic
      username: '{{MARQETA_USERNAME}}'
      password: '{{MARQETA_PASSWORD}}'
    resources:
    - name: users
      path: /users
      operations:
      - name: listusers
        method: GET
        description: List users
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createuser
        method: POST
        description: Create a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: users-token
      path: /users/{token}
      operations:
      - name: getuser
        method: GET
        description: Retrieve a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateuser
        method: PUT
        description: Update a user
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: usertransitions
      path: /usertransitions
      operations:
      - name: createusertransition
        method: POST
        description: Create a user transition
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: usertransitions-user-user-token
      path: /usertransitions/user/{user_token}
      operations:
      - name: listusertransitions
        method: GET
        description: List user transitions
        inputParameters:
        - name: user_token
          in: path
          type: string
          required: true
          description: Unique identifier of the user.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cards
      path: /cards
      operations:
      - name: listcards
        method: GET
        description: List cards for a user
        inputParameters:
        - name: user_token
          in: query
          type: string
          description: Filter cards by user token.
        - name: business_token
          in: query
          type: string
          description: Filter cards by business token.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcard
        method: POST
        description: Create a card
        inputParameters:
        - name: show_cvv_number
          in: query
          type: boolean
          description: If true, the response includes the card CVV2 value. This is only returned once at card creation.
        - name: show_pan
          in: query
          type: boolean
          description: If true, the response includes the full 16-digit PAN. This is only returned once at card creation.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cards-token
      path: /cards/{token}
      operations:
      - name: getcard
        method: GET
        description: Retrieve a card
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecard
        method: PUT
        description: Update a card
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cardtransitions
      path: /cardtransitions
      operations:
      - name: createcardtransition
        method: POST
        description: Create a card transition
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cardtransitions-card-card-token
      path: /cardtransitions/card/{card_token}
      operations:
      - name: listcardtransitions
        method: GET
        description: List card transitions
        inputParameters:
        - name: card_token
          in: path
          type: string
          required: true
          description: Unique identifier of the card.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cardproducts
      path: /cardproducts
      operations:
      - name: listcardproducts
        method: GET
        description: List card products
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createcardproduct
        method: POST
        description: Create a card product
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: cardproducts-token
      path: /cardproducts/{token}
      operations:
      - name: getcardproduct
        method: GET
        description: Retrieve a card product
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatecardproduct
        method: PUT
        description: Update a card product
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: transactions
      path: /transactions
      operations:
      - name: listtransactions
        method: GET
        description: List transactions
        inputParameters:
        - name: user_token
          in: query
          type: string
          description: Filter transactions by user token.
        - name: business_token
          in: query
          type: string
          description: Filter transactions by business token.
        - name: card_token
          in: query
          type: string
          description: Filter transactions by card token.
        - name: type
          in: query
          type: string
          description: Filter transactions by type (e.g., authorization, clearing).
        - name: state
          in: query
          type: string
          description: Filter transactions by state (e.g., PENDING, COMPLETION).
        - name: start_date
          in: query
          type: string
          description: Return transactions on or after this date (format YYYY-MM-DD).
        - name: end_date
          in: query
          type: string
          description: Return transactions on or before this date (format YYYY-MM-DD).
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: transactions-token
      path: /transactions/{token}
      operations:
      - name: gettransaction
        method: GET
        description: Retrieve a transaction
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: balances-token
      path: /balances/{token}
      operations:
      - name: getbalance
        method: GET
        description: Retrieve GPA balance
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: gpaorders
      path: /gpaorders
      operations:
      - name: listgpaorders
        method: GET
        description: List GPA orders
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: creategpaorder
        method: POST
        description: Create a GPA order
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: gpaorders-token
      path: /gpaorders/{token}
      operations:
      - name: getgpaorder
        method: GET
        description: Retrieve a GPA order
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: authcontrols
      path: /authcontrols
      operations:
      - name: listauthcontrols
        method: GET
        description: List authorization controls
        inputParameters:
        - name: card_product_token
          in: query
          type: string
          description: Filter authorization controls by card product token.
        - name: user_token
          in: query
          type: string
          description: Filter authorization controls by user token.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createauthcontrol
        method: POST
        description: Create an authorization control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: authcontrols-token
      path: /authcontrols/{token}
      operations:
      - name: getauthcontrol
        method: GET
        description: Retrieve an authorization control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updateauthcontrol
        method: PUT
        description: Update an authorization control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: velocitycontrols
      path: /velocitycontrols
      operations:
      - name: listvelocitycontrols
        method: GET
        description: List velocity controls
        inputParameters:
        - name: card_product_token
          in: query
          type: string
          description: Filter velocity controls by card product token.
        - name: user_token
          in: query
          type: string
          description: Filter velocity controls by user token.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createvelocitycontrol
        method: POST
        description: Create a velocity control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: velocitycontrols-token
      path: /velocitycontrols/{token}
      operations:
      - name: getvelocitycontrol
        method: GET
        description: Retrieve a velocity control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatevelocitycontrol
        method: PUT
        description: Update a velocity control
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: webhooks
      path: /webhooks
      operations:
      - name: listwebhooks
        method: GET
        description: List webhooks
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createwebhook
        method: POST
        description: Create a webhook
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: webhooks-token
      path: /webhooks/{token}
      operations:
      - name: getwebhook
        method: GET
        description: Retrieve a webhook
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatewebhook
        method: PUT
        description: Update a webhook
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: webhooks-token-resend-event-type-resource-token
      path: /webhooks/{token}/resend/{event_type}/{resource_token}
      operations:
      - name: resendwebhookevent
        method: POST
        description: Resend a webhook event
        inputParameters:
        - name: event_type
          in: path
          type: string
          required: true
          description: The event type to resend (e.g., transaction.clearing).
        - name: resource_token
          in: path
          type: string
          required: true
          description: Token of the resource associated with the event.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: kyc
      path: /kyc
      operations:
      - name: createkycverification
        method: POST
        description: Create a KYC verification
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: kyc-user-user-token
      path: /kyc/user/{user_token}
      operations:
      - name: listkycforuser
        method: GET
        description: List KYC verifications for a user
        inputParameters:
        - name: user_token
          in: path
          type: string
          required: true
          description: Unique identifier of the user.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: fundingsources-ach
      path: /fundingsources/ach
      operations:
      - name: createachfundingsource
        method: POST
        description: Create an ACH funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: fundingsources-ach-funding-source-token
      path: /fundingsources/ach/{funding_source_token}
      operations:
      - name: getachfundingsource
        method: GET
        description: Retrieve an ACH funding source
        inputParameters:
        - name: funding_source_token
          in: path
          type: string
          required: true
          description: Unique identifier of the ACH funding source.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: fundingsources-program-ach
      path: /fundingsources/program/ach
      operations:
      - name: createprogramachfundingsource
        method: POST
        description: Create a program ACH funding source
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: programreserve-balances
      path: /programreserve/balances
      operations:
      - name: getprogramreservebalance
        method: GET
        description: Retrieve program reserve balance
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: businesses
      path: /businesses
      operations:
      - name: listbusinesses
        method: GET
        description: List businesses
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: createbusiness
        method: POST
        description: Create a business
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: businesses-token
      path: /businesses/{token}
      operations:
      - name: getbusiness
        method: GET
        description: Retrieve a business
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: updatebusiness
        method: PUT
        description: Update a business
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
  exposes:
  - type: rest
    port: 8080
    namespace: marqeta-rest
    description: REST adapter for Marqeta Core API.
    resources:
    - path: /users
      name: listusers
      operations:
      - method: GET
        name: listusers
        description: List users
        call: marqeta.listusers
        outputParameters:
        - type: object
          mapping: $.
    - path: /users
      name: createuser
      operations:
      - method: POST
        name: createuser
        description: Create a user
        call: marqeta.createuser
        outputParameters:
        - type: object
          mapping: $.
    - path: /users/{token}
      name: getuser
      operations:
      - method: GET
        name: getuser
        description: Retrieve a user
        call: marqeta.getuser
        outputParameters:
        - type: object
          mapping: $.
    - path: /users/{token}
      name: updateuser
      operations:
      - method: PUT
        name: updateuser
        description: Update a user
        call: marqeta.updateuser
        outputParameters:
        - type: object
          mapping: $.
    - path: /usertransitions
      name: createusertransition
      operations:
      - method: POST
        name: createusertransition
        description: Create a user transition
        call: marqeta.createusertransition
        outputParameters:
        - type: object
          mapping: $.
    - path: /usertransitions/user/{user_token}
      name: listusertransitions
      operations:
      - method: GET
        name: listusertransitions
        description: List user transitions
        call: marqeta.listusertransitions
        with:
          user_token: rest.user_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /cards
      name: listcards
      operations:
      - method: GET
        name: listcards
        description: List cards for a user
        call: marqeta.listcards
        outputParameters:
        - type: object
          mapping: $.
    - path: /cards
      name: createcard
      operations:
      - method: POST
        name: createcard
        description: Create a card
        call: marqeta.createcard
        outputParameters:
        - type: object
          mapping: $.
    - path: /cards/{token}
      name: getcard
      operations:
      - method: GET
        name: getcard
        description: Retrieve a card
        call: marqeta.getcard
        outputParameters:
        - type: object
          mapping: $.
    - path: /cards/{token}
      name: updatecard
      operations:
      - method: PUT
        name: updatecard
        description: Update a card
        call: marqeta.updatecard
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardtransitions
      name: createcardtransition
      operations:
      - method: POST
        name: createcardtransition
        description: Create a card transition
        call: marqeta.createcardtransition
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardtransitions/card/{card_token}
      name: listcardtransitions
      operations:
      - method: GET
        name: listcardtransitions
        description: List card transitions
        call: marqeta.listcardtransitions
        with:
          card_token: rest.card_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardproducts
      name: listcardproducts
      operations:
      - method: GET
        name: listcardproducts
        description: List card products
        call: marqeta.listcardproducts
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardproducts
      name: createcardproduct
      operations:
      - method: POST
        name: createcardproduct
        description: Create a card product
        call: marqeta.createcardproduct
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardproducts/{token}
      name: getcardproduct
      operations:
      - method: GET
        name: getcardproduct
        description: Retrieve a card product
        call: marqeta.getcardproduct
        outputParameters:
        - type: object
          mapping: $.
    - path: /cardproducts/{token}
      name: updatecardproduct
      operations:
      - method: PUT
        name: updatecardproduct
        description: Update a card product
        call: marqeta.updatecardproduct
        outputParameters:
        - type: object
          mapping: $.
    - path: /transactions
      name: listtransactions
      operations:
      - method: GET
        name: listtransactions
        description: List transactions
        call: marqeta.listtransactions
        outputParameters:
        - type: object
          mapping: $.
    - path: /transactions/{token}
      name: gettransaction
      operations:
      - method: GET
        name: gettransaction
        description: Retrieve a transaction
        call: marqeta.gettransaction
        outputParameters:
        - type: object
          mapping: $.
    - path: /balances/{token}
      name: getbalance
      operations:
      - method: GET
        name: getbalance
        description: Retrieve GPA balance
        call: marqeta.getbalance
        outputParameters:
        - type: object
          mapping: $.
    - path: /gpaorders
      name: listgpaorders
      operations:
      - method: GET
        name: listgpaorders
        description: List GPA orders
        call: marqeta.listgpaorders
        outputParameters:
        - type: object
          mapping: $.
    - path: /gpaorders
      name: creategpaorder
      operations:
      - method: POST
        name: creategpaorder
        description: Create a GPA order
        call: marqeta.creategpaorder
        outputParameters:
        - type: object
          mapping: $.
    - path: /gpaorders/{token}
      name: getgpaorder
      operations:
      - method: GET
        name: getgpaorder
        description: Retrieve a GPA order
        call: marqeta.getgpaorder
        outputParameters:
        - type: object
          mapping: $.
    - path: /authcontrols
      name: listauthcontrols
      operations:
      - method: GET
        name: listauthcontrols
        description: List authorization controls
        call: marqeta.listauthcontrols
        outputParameters:
        - type: object
          mapping: $.
    - path: /authcontrols
      name: createauthcontrol
      operations:
      - method: POST
        name: createauthcontrol
        description: Create an authorization control
        call: marqeta.createauthcontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /authcontrols/{token}
      name: getauthcontrol
      operations:
      - method: GET
        name: getauthcontrol
        description: Retrieve an authorization control
        call: marqeta.getauthcontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /authcontrols/{token}
      name: updateauthcontrol
      operations:
      - method: PUT
        name: updateauthcontrol
        description: Update an authorization control
        call: marqeta.updateauthcontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /velocitycontrols
      name: listvelocitycontrols
      operations:
      - method: GET
        name: listvelocitycontrols
        description: List velocity controls
        call: marqeta.listvelocitycontrols
        outputParameters:
        - type: object
          mapping: $.
    - path: /velocitycontrols
      name: createvelocitycontrol
      operations:
      - method: POST
        name: createvelocitycontrol
        description: Create a velocity control
        call: marqeta.createvelocitycontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /velocitycontrols/{token}
      name: getvelocitycontrol
      operations:
      - method: GET
        name: getvelocitycontrol
        description: Retrieve a velocity control
        call: marqeta.getvelocitycontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /velocitycontrols/{token}
      name: updatevelocitycontrol
      operations:
      - method: PUT
        name: updatevelocitycontrol
        description: Update a velocity control
        call: marqeta.updatevelocitycontrol
        outputParameters:
        - type: object
          mapping: $.
    - path: /webhooks
      name: listwebhooks
      operations:
      - method: GET
        name: listwebhooks
        description: List webhooks
        call: marqeta.listwebhooks
        outputParameters:
        - type: object
          mapping: $.
    - path: /webhooks
      name: createwebhook
      operations:
      - method: POST
        name: createwebhook
        description: Create a webhook
        call: marqeta.createwebhook
        outputParameters:
        - type: object
          mapping: $.
    - path: /webhooks/{token}
      name: getwebhook
      operations:
      - method: GET
        name: getwebhook
        description: Retrieve a webhook
        call: marqeta.getwebhook
        outputParameters:
        - type: object
          mapping: $.
    - path: /webhooks/{token}
      name: updatewebhook
      operations:
      - method: PUT
        name: updatewebhook
        description: Update a webhook
        call: marqeta.updatewebhook
        outputParameters:
        - type: object
          mapping: $.
    - path: /webhooks/{token}/resend/{event_type}/{resource_token}
      name: resendwebhookevent
      operations:
      - method: POST
        name: resendwebhookevent
        description: Resend a webhook event
        call: marqeta.resendwebhookevent
        with:
          event_type: rest.event_type
          resource_token: rest.resource_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /kyc
      name: createkycverification
      operations:
      - method: POST
        name: createkycverification
        description: Create a KYC verification
        call: marqeta.createkycverification
        outputParameters:
        - type: object
          mapping: $.
    - path: /kyc/user/{user_token}
      name: listkycforuser
      operations:
      - method: GET
        name: listkycforuser
        description: List KYC verifications for a user
        call: marqeta.listkycforuser
        with:
          user_token: rest.user_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /fundingsources/ach
      name: createachfundingsource
      operations:
      - method: POST
        name: createachfundingsource
        description: Create an ACH funding source
        call: marqeta.createachfundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /fundingsources/ach/{funding_source_token}
      name: getachfundingsource
      operations:
      - method: GET
        name: getachfundingsource
        description: Retrieve an ACH funding source
        call: marqeta.getachfundingsource
        with:
          funding_source_token: rest.funding_source_token
        outputParameters:
        - type: object
          mapping: $.
    - path: /fundingsources/program/ach
      name: createprogramachfundingsource
      operations:
      - method: POST
        name: createprogramachfundingsource
        description: Create a program ACH funding source
        call: marqeta.createprogramachfundingsource
        outputParameters:
        - type: object
          mapping: $.
    - path: /programreserve/balances
      name: getprogramreservebalance
      operations:
      - method: GET
        name: getprogramreservebalance
        description: Retrieve program reserve balance
        call: marqeta.getprogramreservebalance
        outputParameters:
        - type: object
          mapping: $.
    - path: /businesses
      name: listbusinesses
      operations:
      - method: GET
        name: listbusinesses
        description: List businesses
        call: marqeta.listbusinesses
        outputParameters:
        - type: object
          mapping: $.
    - path: /businesses
      name: createbusiness
      operations:
      - method: POST
        name: createbusiness
        description: Create a business
        call: marqeta.createbusiness
        outputParameters:
        - type: object
          mapping: $.
    - path: /businesses/{token}
      name: getbusiness
      operations:
      - method: GET
        name: getbusiness
        description: Retrieve a business
        call: marqeta.getbusiness
        outputParameters:
        - type: object
          mapping: $.
    - path: /businesses/{token}
      name: updatebusiness
      operations:
      - method: PUT
        name: updatebusiness
        description: Update a business
        call: marqeta.updatebusiness
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    port: 9090
    namespace: marqeta-mcp
    transport: http
    description: MCP adapter for Marqeta Core API for AI agent use.
    tools:
    - name: listusers
      description: List users
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: marqeta.listusers
      outputParameters:
      - type: object
        mapping: $.
    - name: createuser
      description: Create a user
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: marqeta.createuser
      outputParameters:
      - type: object
        mapping: $.
    - name: getuser
      description: Retrieve a user
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: marqeta.getuser
      outputParameters:
      - type: object
        mapping: $.
    - name: updateuser
      description: Update a user
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: marqeta.updateuser
      outputParameters:
      - type: object
        mapping: $.
    - name: createusertransition
      description: Create a user transition
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: marqeta.createusertransition
      outputParameters:
      - type: object
        mapping: $.
    - name: listusertransitions
      description: List user transitions
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: marqeta.listusertransitions
      with:
        user_token: tools.user_token
      inputParameters:
      - name: user_token
        type: string
        description: Unique identifier of the user.
        required: true
      outputParameters:
      - type: object
        mapping: $.
    - name: listcards
      description: List cards for a user
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: marqeta.listcards
      with:
        user_token: tools.user_token
        business_token: tools.business_token
      inputParameters:
      - name: user_token
        type: string
        description: Filter cards by user token.
      - name: business_token
        type: string
        description: Filter cards by business token.
      outputParameters:
      - type: object
        mapping: $.
    - name: createcard
      description: Create a card
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: marqeta.createcard
      with:
        show_cvv_number: tools.show_cvv_number
        show_pan: tools.show_pan
      inputParameters:
      - name: show_cvv_number
        type: boolean
        description: If true, the response includes the card CVV2 value. This is only returned once at card creation.
      - name: show_pan
        type: boolean
        description: If true, the response includes the full 16-digit PAN. This is only returned once at card creation.
      outputParameters:
      - type: object
        mapping: $.
    - name: getcard
      description

# --- truncated at 32 KB (44 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/marqeta/refs/heads/main/capabilities/marqeta-capability.yaml