> ## Documentation Index
> Fetch the complete documentation index at: https://docs.incard.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Unfreeze card

> Reactivates a `frozen` card. Cards blocked by Incard cannot be unfrozen through the API; unfreezing a card
that is already `active` succeeds without change.
Requires permission `manage_cards`.




## OpenAPI

````yaml /specs/company.openapi.yaml post /developer/company/card/{id}/unfreeze
openapi: 3.1.0
info:
  title: Incard Developer API
  version: 0.1.0
  description: OpenAPI definition for the Incard Developer API.
servers:
  - url: https://api.incard.com
    description: Developer Gateway
security:
  - BearerAuth: []
tags:
  - name: ACCOUNTS
    description: Currency accounts and their available balances.
  - name: TRANSACTIONS
    description: Transaction history with filters, pagination, and running balances.
  - name: CARDS
    description: List cards and freeze or unfreeze them.
  - name: INVOICES
  - name: webhooks
paths:
  /developer/company/card/{id}/unfreeze:
    post:
      tags:
        - CARDS
      summary: Unfreeze card
      description: >
        Reactivates a `frozen` card. Cards blocked by Incard cannot be unfrozen
        through the API; unfreezing a card

        that is already `active` succeeds without change.

        Requires permission `manage_cards`.
      operationId: unfreeze_card
      parameters:
        - name: id
          in: path
          required: true
          description: Card UUID.
          schema:
            type: string
      responses:
        '200':
          description: The updated card record with `status` set to `active`.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CardRecord'
              example:
                id: 3f8b2c1d-9e4a-4b7c-8d2e-1f3a5b7c9d0e
                companyId: bebb185d-8210-4e66-ac63-397b49a1e09f
                theme: midnight
                name: Marketing spend
                nickname: null
                token: 84de8ea0-e52a-4888-afd2-9d8dd5a42c20
                type: virtual
                status: active
                lastFour: '4242'
                expiryDate: 07/29
                startDate: 07/26
                userId: 29b297ca-c617-437e-9c1d-32f494fbf44d
                autoConvert: true
                auth3dsCredential: otpSms
                createdAt: '2026-07-01T08:30:00.000Z'
                updatedAt: '2026-09-02T11:20:02.000Z'
        '400':
          description: Card not found, or the card is not `frozen`.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CompanyError'
              example:
                severity: warning
                path: >-
                  /api/company/card/3f8b2c1d-9e4a-4b7c-8d2e-1f3a5b7c9d0e/unfreeze
                status: 400
                reason: Card has invalid source status for this action
                method: POST
        '401':
          description: Unauthorized
        '403':
          description: Forbidden — insufficient permission for this user
components:
  schemas:
    CardRecord:
      type: object
      title: CardRecord
      description: >-
        The stored card record returned by card action endpoints. Additional
        internal fields may be present.
      properties:
        id:
          type: string
        companyId:
          type: string
        name:
          type: string
        nickname:
          type:
            - string
            - 'null'
        token:
          type: string
        type:
          type: string
          enum:
            - physical
            - virtual
        theme:
          type:
            - string
            - 'null'
        status:
          type: string
          enum:
            - pending
            - active
            - frozen
            - blocked
            - closing
            - terminated
        lastFour:
          type: string
        startDate:
          description: '`MM/YY`.'
          type: string
        expiryDate:
          description: '`MM/YY`.'
          type: string
        userId:
          type:
            - string
            - 'null'
        autoConvert:
          type: boolean
        auth3dsCredential:
          type: string
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
      required:
        - id
        - companyId
        - name
        - token
        - type
        - status
        - lastFour
        - createdAt
        - updatedAt
    CompanyError:
      type: object
      title: CompanyError
      description: >-
        Error envelope returned by company endpoints for permission and
        validation failures.
      properties:
        severity:
          description: '`warning` for 4xx, `critical` for 5xx.'
          type: string
        path:
          description: Upstream request path.
          type: string
        status:
          description: HTTP status code.
          type: integer
        reason:
          description: Human-readable error message.
          type: string
        method:
          description: HTTP method of the request.
          type: string
      required:
        - status
        - reason
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: access_token
      description: Short-lived access token. Obtain with your api_key.

````