Sign in
GET/assets/cards/{sourceKey}Test keys only for now

A card's image

A card's image and its provider's logo as public URLs.

View as Markdown
All endpoints

EndpointsChangelog

Only Enterprise gets these inside other responses. No image or logo is a free 404.

Cost

5 DS Credits

per request

Scope

cards:read

Same data as

—

the DepositScout website

Test keys only for now. This endpoint returns sample data to test keys; a live key gets 403 endpoint_restricted and is not charged. When it opens it will cost 5 DS Credits per request. Early access: [email protected].

Request

GET https://depositscout.com/api/developer/v1/assets/cards/{sourceKey}

  • sourceKey*path · string

    Stable card id from /cards/rewards or /cards/travel.

Example

shell
curl "https://depositscout.com/api/developer/v1/assets/cards/sourceKey" \
  -H "Authorization: Bearer $DS_API_KEY"

Try it

Runs against this site. A ds_test_ key is free and returns sample data in the real shape; a live key returns real data and spends credits. The key is kept in this tab only.

No key yet? Create an account or sign in for a free test key.
GET /api/developer/v1/assets/cards/sourceKey
as curl
curl "/api/developer/v1/assets/cards/sourceKey" \
  -H "Authorization: Bearer ds_test_…"

Response

data is a single object. Every 2xx also sets X-DS-Request-Id, X-DS-Credits-Charged, X-DS-Credits-Balance, the X-RateLimit-* trio and an ETag.

response.json
{
  "data": {
    "…": "the item"
  },
  "meta": {
    "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
    "generatedAt": "2026-09-21T09:00:00.000Z",
    "creditsCharged": 5,
    "creditsBalance": 199,
    "attribution": "Rates powered by DepositScout — depositscout.com"
  }
}

Logos and images: imageUrl, logoUrl. An absolute, public HTTPS URL for the provider's logo (or, for imageUrl, the card's image) that you can load directly (usually SVG; PNG or JPG for a few), or null when we have none.

Errors

What this endpoint can return instead of data. Every error has the same shape: error (a stable code to branch on), message (what to do next), requestId and a docs link, plus the extra fields shown. None of them is charged.

401missing_api_key— No Authorization header, or it isn't a Bearer token.
401 missing_api_key.json
{
  "error": "missing_api_key",
  "message": "Send your key as 'Authorization: Bearer ds_live_…'. Create one at https://depositscout.com/developer.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#missing_api_key"
}
403insufficient_scope— The key doesn't carry the scope the endpoint needs.
403 insufficient_scope.json
{
  "error": "insufficient_scope",
  "message": "This key doesn't have the 'cards:read' scope.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#insufficient_scope",
  "required": "cards:read"
}
403endpoint_restricted— A live key was used on an endpoint that is test-only for now. See the open list on the endpoints table.
403 endpoint_restricted.json
{
  "error": "endpoint_restricted",
  "message": "This endpoint isn't open to live keys yet. Test keys get sample data; the open list is at https://depositscout.com/developers/docs#endpoints. Ask [email protected] for early access.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#endpoint_restricted"
}
402insufficient_credits— Balance is lower than the call's cost. A list whose page you can't fully afford is cut to the rows your balance covers instead (meta.limit and X-DS-Limit-Reduced say so), so this only happens below one row's price. Body has required, balance and topUp.
402 insufficient_credits.json
{
  "error": "insufficient_credits",
  "message": "Not enough DS Credits for this request. Top up at https://depositscout.com/developer/credits.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#insufficient_credits",
  "required": 5,
  "balance": 0,
  "topUp": "https://depositscout.com/developer/credits"
}
404not_found— Unknown route, unknown sourceKey or slug, or an endpoint that hasn't launched yet.
404 not_found.json
{
  "error": "not_found",
  "message": "Nothing at that address.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#not_found"
}
429rate_limited— Burst or daily limit hit. Retry-After tells you when.
429 rate_limited.json
{
  "error": "rate_limited",
  "message": "Too many requests. Retry after 12s.",
  "requestId": "req_7f3a9c2d1b4e5a6f7c8d",
  "docs": "https://depositscout.com/developers/docs#rate_limited",
  "retryAfter": 12
}

Every code is listed in the shared error contract. Back to all endpoints.