Z Zise Developers
/
卡发行 › API 参考 › 卡密

解除 CVV 锁定

POST /v1/cards/{id}/cvv/unblock scope: cards:write
代会员调用 · 必带 x-on-behalf-of 需 x-idempotency-key

卡密查看连错几次之后上游会把 CVV 锁掉（卡详情里的 cvv_blocked: true）。在这一条之前没有任何解锁入口 —— 那张卡的卡密从此永久看不到，而 POST /v1/cards/{id}/secure-session 照常签票、托管页照常打开，只在最后一步告诉用户去联系客服。

不需要强认证：解锁本身不泄露任何东西 —— 解完之后要看卡密，仍然要走 secure-session 那两道验证码。在这里再加一道，等于让一个已经被锁在门外的用户先过一遍门。

⚠ 有限流（每会员每小时 5 次）。它会打上游，而「反复解锁」没有正当用途。

⚠ 出参只说「解开了」。cvv_blocked 的事实源是GET /v1/cards/{id}，回查那里 —— 两处各给一份迟早分叉。

路径参数

字段类型必填说明
id string 必填 卡 id。带不带 crd_ 前缀都收。
字段类型必填说明
x-idempotency-key string 必填
x-on-behalf-of string 必填

响应

200已解锁
{
  "unblocked": true
}
400state_invalid 卡状态不允许 · idempotency_key_required
404not_found 卡不存在，或不在这个会员/这个商户名下
429rate_limited —— 按 Retry-After 退避
请求 
curl -X POST 'https://api.zise.com/v1/cards/{id}/cvv/unblock' \
  -H 'x-auth-token: Bearer $TOKEN' \
  -H 'x-on-behalf-of: $MEMBER_ID' \
  -H 'x-idempotency-key: $IDEMPOTENCY_KEY'
const res = await fetch("https://api.zise.com/v1/cards/{id}/cvv/unblock", {
  method: "POST",
  headers: {
    "x-auth-token": "Bearer $TOKEN",
    "x-on-behalf-of": "$MEMBER_ID",
    "x-idempotency-key": "$IDEMPOTENCY_KEY",
  },
});
// 金额按字符串读，别让它变成 number
const data = await res.json();
import requests

res = requests.post(
    "https://api.zise.com/v1/cards/{id}/cvv/unblock",
    headers={
        "x-auth-token": "Bearer $TOKEN",
        "x-on-behalf-of": "$MEMBER_ID",
        "x-idempotency-key": "$IDEMPOTENCY_KEY",
    },
)
# 金额用 Decimal(str(...))，不要 float
data = res.json()
req, _ := http.NewRequest("POST", "https://api.zise.com/v1/cards/{id}/cvv/unblock",
    nil)
req.Header.Set("x-auth-token", "Bearer $TOKEN")
req.Header.Set("x-on-behalf-of", "$MEMBER_ID")
req.Header.Set("x-idempotency-key", "$IDEMPOTENCY_KEY")
res, err := http.DefaultClient.Do(req)
// 金额字段用 string 接，不要 float64
HttpRequest req = HttpRequest.newBuilder()
    .uri(URI.create("https://api.zise.com/v1/cards/{id}/cvv/unblock"))
    .header("x-auth-token", "Bearer $TOKEN")
    .header("x-on-behalf-of", "$MEMBER_ID")
    .header("x-idempotency-key", "$IDEMPOTENCY_KEY")
    .method("POST", HttpRequest.BodyPublishers.noBody())
    .build();
// 金额字段用 String / BigDecimal，不要 double
$ch = curl_init('https://api.zise.com/v1/cards/{id}/cvv/unblock');
curl_setopt_array($ch, [
  CURLOPT_CUSTOMREQUEST => 'POST',
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'x-auth-token: Bearer $TOKEN',
    'x-on-behalf-of: $MEMBER_ID',
    'x-idempotency-key: $IDEMPOTENCY_KEY',
  ],
]);
$res = curl_exec($ch);
// 金额用 bcmath / 字符串，不要 floatval
200 
{
  "unblocked": true
}