Overview

Everything under API Reference runs against one production base URL:

https://api.global.direct.reap.global/2026-07-13

The version is part of the path; see Versioning. There is no sandbox; every request is production.

Expenses: uploading receipt notes and updating categories are Coming soon; this version covers cards, team members, card account and Treasury.

Headers

Header	When	Notes
`x-api-key`	Every request	Your API key; see Authentication
`Content-Type: application/json`	Requests with a body	Required
`Idempotency-Key`	`POST /cards`, `POST /treasury/bank-transfer-confirmations`	See Idempotency

Paths start with the version, then the resource: /2026-07-13/cards/{cardId}.
Money is a { "amount": "100.00", "currency": "USD" } pair; amounts are strings to preserve precision.
Dates are ISO 8601 in UTC (2026-10-14T08:00:00.000Z); date filters take calendar days (2026-10-14).
Fields marked required must be sent; fields that can be null say so in their description; don’t send null for fields that aren’t nullable.
Response fields marked required are always present, but a required field can still be null; check each field’s nullability, not just its presence.
Errors share one envelope; see Errors.
Error responses include a requestId; quote it when contacting support. Version 404/410 rejections are the exception and don’t carry one.

curl "https://api.global.direct.reap.global/2026-07-13/health" \
  -H "x-api-key: $REAP_KEY"

200 means the key works. Then try the Quickstart.