Retrieve all Applicable Authorization Rules for a Card or Account

Overview

The Auth Rules API now supports a newscope value that enables users to retrieve all rules affecting a given card or account. Previously, when requesting rules for a card or account, it was only possible to retrieve rules directly attached to the specified card or account token. Now, users can specify a scope of ANY to include broader entities (like program-level rules) that apply to the given card or account.

Details

When querying the GET /v2/auth_rules endpoint with a card or account token, you can now specify a scope value. For example, when querying for a specific card token:

• Without scope (default): Returns only rules directly attached to the specified card token
• Withscope=any: Returns all applicable rules including:
  • Rules attached to the specific card token
  • Rules attached to the card's account token
  • Program-level rules that apply to the card or account

Example: Retrieving All Rules for a Card

Previous behavior (still the default):

GET /v2/auth_rules?card_token=7ef7bcc5-e27b-4678-b493-952a1a2db263

Returns only rules directly attached to this card token.

New behavior with scope parameter:

GET /v2/auth_rules?card_token=7ef7bcc5-e27b-4678-b493-952a1a2db263&scope=any

Returns all rules that would apply to transactions on this card, including:

• Card-specific rules
• Account-level rules for this card's account
• Program-level rules

Release Timeline

• Available now

User Impact

This change is additive only. The scope parameter is optional, so existing integrations continue to work without modification.

Updated Documentation

For updated API information, visit our API Reference.

If you have any questions or concerns, please contact us via the HELP link in your Lithic Dashboard.

The Lithic changelog has an RSS feed! To monitor for new update announcements, subscribe with your preferred RSS reader.