curl -X POST 'https://smtp.yativo.com/api/v1/sandbox/spend-cards/card_123/simulate' \
-H 'X-Api-Key: YOUR_SANDBOX_API_KEY' \
-H 'X-Api-Secret: YOUR_SANDBOX_API_SECRET' \
-H 'Content-Type: application/json' \
-d '{
"event": "business_spend_card.transaction.approved",
"amount": 19.99,
"description": "Sandbox coffee"
}'
{
"status": "failed",
"status_code": 123,
"message": "Request failed.",
"data": {
"error": "<string>"
},
"error_details": {
"code": "validation_error",
"message": "The amount field is required.",
"http_status": 422,
"fields": {},
"retryable": false,
"retry_after": 123
}
}{
"status": "failed",
"status_code": 123,
"message": "Request failed.",
"data": {
"error": "<string>"
},
"error_details": {
"code": "validation_error",
"message": "The amount field is required.",
"http_status": 422,
"fields": {},
"retryable": false,
"retry_after": 123
}
}Sandbox
Simulate a spend card event (sandbox only)
Fire a business_spend_card.* event on a card you own. Sandbox only.
POST
/
sandbox
/
spend-cards
/
{cardId}
/
simulate
curl -X POST 'https://smtp.yativo.com/api/v1/sandbox/spend-cards/card_123/simulate' \
-H 'X-Api-Key: YOUR_SANDBOX_API_KEY' \
-H 'X-Api-Secret: YOUR_SANDBOX_API_SECRET' \
-H 'Content-Type: application/json' \
-d '{
"event": "business_spend_card.transaction.approved",
"amount": 19.99,
"description": "Sandbox coffee"
}'
{
"status": "failed",
"status_code": 123,
"message": "Request failed.",
"data": {
"error": "<string>"
},
"error_details": {
"code": "validation_error",
"message": "The amount field is required.",
"http_status": 422,
"fields": {},
"retryable": false,
"retry_after": 123
}
}{
"status": "failed",
"status_code": 123,
"message": "Request failed.",
"data": {
"error": "<string>"
},
"error_details": {
"code": "validation_error",
"message": "The amount field is required.",
"http_status": 422,
"fields": {},
"retryable": false,
"retry_after": 123
}
}Transaction events are written to spend-card activity history and sent as
The card must belong to your business. Omit
See Corporate cards and every sandbox simulation endpoint in Sandbox.
business_spend_card.transaction.*. Lifecycle events (created, funded, suspended, …) only send the webhook.
POST /sandbox/spend-cards/{cardId}/simulate
Sandbox only. Call
https://smtp.yativo.com/api/v1. Production returns 404 with Not found.event to default to business_spend_card.transaction.approved, or .declined when outcome is fail.
curl -X POST 'https://smtp.yativo.com/api/v1/sandbox/spend-cards/card_123/simulate' \
-H 'X-Api-Key: YOUR_SANDBOX_API_KEY' \
-H 'X-Api-Secret: YOUR_SANDBOX_API_SECRET' \
-H 'Content-Type: application/json' \
-d '{
"event": "business_spend_card.transaction.approved",
"amount": 19.99,
"description": "Sandbox coffee"
}'
Authorizations
Your API key (yativo_pk_...) from Developers → API Keys. Send together with X-Api-Secret.
Your API secret (yativo_sk_...), shown once when the key is created.
Path Parameters
Body
application/json