Guides Use cases API Changelog

Get merchant categories

List the predefined merchant category groups available for issued card spend controls, along with the merchant category codes (MCCs) each group covers. Use these category names in an issued card's merchantCategoryRestrictions.

To access this endpoint using an access token, you'll need to specify the /issued-cards.read scope.

GET
/issuing/merchant-categories
curl -X GET "https://api.moov.io/issuing/merchant-categories" \
  -H "Authorization: Bearer {token}" \
  -H "X-Moov-Version: v2026.07.00"
import { Moov } from "@moovio/sdk";

const moov = new Moov({
  security: {
    username: "",
    password: "",
  },
});

async function run() {
  const result = await moov.cardIssuing.listMerchantCategories();

  console.log(result);
}

run();
declare(strict_types=1);

require 'vendor/autoload.php';

use Moov\MoovPhp;
use Moov\MoovPhp\Models\Components;

$sdk = MoovPhp\Moov::builder()
    ->setSecurity(
        new Components\Security(
            username: '',
            password: '',
        )
    )
    ->build();



$response = $sdk->cardIssuing->listMerchantCategories(

);

if ($response->merchantCategories !== null) {
    // handle response
}
package hello.world;

import io.moov.sdk.Moov;
import io.moov.sdk.models.components.Security;
import io.moov.sdk.models.operations.ListIssuingMerchantCategoriesResponse;
import java.lang.Exception;

public class Application {

    public static void main(String[] args) throws Exception {

        Moov sdk = Moov.builder()
                .security(Security.builder()
                    .username("")
                    .password("")
                    .build())
            .build();

        ListIssuingMerchantCategoriesResponse res = sdk.cardIssuing().listMerchantCategories()
                .call();

        if (res.merchantCategories().isPresent()) {
            System.out.println(res.merchantCategories().get());
        }
    }
}
from moovio_sdk import Moov
from moovio_sdk.models import components


with Moov(
    security=components.Security(
        username="",
        password="",
    ),
) as moov:

    res = moov.card_issuing.list_merchant_categories()

    # Handle response
    print(res)
require 'moov_ruby'

Models = ::Moov::Models
s = ::Moov::Client.new(
  security: Models::Components::Security.new(
    username: '',
    password: ''
  )
)
res = s.card_issuing.list_merchant_categories

unless res.merchant_categories.nil?
  # handle response
end
using Moov.Sdk;
using Moov.Sdk.Models.Components;

var sdk = new MoovClient(security: new Security() {
    Username = "",
    Password = "",
});

var res = await sdk.CardIssuing.ListMerchantCategoriesAsync();

// handle response
The request completed successfully.
application/json
Example
The predefined merchant category groups available for issued card spend controls.
{
  "merchantCategories": [
    {
      "category": "advertising",
      "mccs": [
        "string"
      ]
    }
  ]
}

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request contained missing or expired authentication.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The user is not authorized to make the request.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
Request was refused due to rate limiting.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request failed due to an unexpected error.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request failed because a downstream service failed to respond.

Response headers

x-request-id

string required
A unique identifier used to trace requests.

Headers

X-Moov-Version

string
Set this header to v2026.07.00 to use the API described in this specification. When omitted, the server defaults to v2024.01.00, which may not match the behavior documented here.
Possible values: v2026.07.00

Response

application/json
The predefined merchant category groups available for issued card spend controls.

merchantCategories

array<object> required
Show child attributes

category

string
The predefined category group.
Predefined merchant category groups.
Possible values: advertising, airlines, alcohol-and-bars, car-rental, education, electronics, fuel-and-gas, gambling, groceries, ground-transportation, hardware-and-home, healthcare, live-entertainment, lodging, movies, office-supplies, parking, personal-care, professional-services, restaurants-and-dining, retail-general, rideshare-and-taxis, software-and-saas, sports-and-recreation, subscriptions, travel-agencies

mccs

array<string>
The merchant category codes (MCCs) covered by this category. Each entry is either a single 4-digit MCC, such as 4511, or an inclusive range of MCCs, such as 3000-3299.