To link cards directly through Moov's API, you must submit an attestation of PCI compliance to Moov. You are responsible for storing and handling card data by linking a card through Moov's API.

Moov strongly suggests using the [card link Drop](https://docs.moov.io/moovjs/drops/card-link/). With the Drop, card information is entered by the user and processed directly by Moov.

### API Endpoints

- [**Link a card**](https://docs.moov.io/api/sources/cards/create/)
  - **Method:** POST
  - **Endpoint:** /accounts/{accountID}/cards

- [**List cards**](https://docs.moov.io/api/sources/cards/list/)
  - **Method:** GET
  - **Endpoint:** /accounts/{accountID}/cards

- [**Retrieve a card**](https://docs.moov.io/api/sources/cards/get/)
  - **Method:** GET
  - **Endpoint:** /accounts/{accountID}/cards/{cardID}

- [**Update a card**](https://docs.moov.io/api/sources/cards/update/)
  - **Method:** PATCH
  - **Endpoint:** /accounts/{accountID}/cards/{cardID}

- [**Disable a card**](https://docs.moov.io/api/sources/cards/delete/)
  - **Method:** DELETE
  - **Endpoint:** /accounts/{accountID}/cards/{cardID}

- [**Get card metadata**](https://docs.moov.io/api/sources/cards/metadata/)
  - **Method:** POST
  - **Endpoint:** /card-metadata