---
title: cards.setupLink | Doing Work API
description: Get a secure page where the customer saves a card with the shop's payment processor (owner or office). Send the link to the customer; Doing Work never sees
url: https://doingwork.work/docs/reference/cards-setuplink/
---

# cards.setupLink

Get a secure page where the customer saves a card with the shop's payment processor (owner or office). Send the link to the customer; Doing Work never sees the card number. Saving a new card replaces the old one.

|  |  |
|---|---|
| Who | Agents can call this |
| REST | `POST /v1/cards/setup-link` |
| MCP tool | `cards_setupLink` |
| Writes | no |
| Area | [Stripe connection](https://doingwork.work/docs/reference/#stripe-connection) |

## When to use it

Get a secure page where the customer saves a card with the shop's payment processor (owner or office). Send the link to the customer; Doing Work never sees the card number.

## What to tell the owner

Tell them what you found in plain words. Don't read back raw fields.

## Input

| Field | Type | Required |
|---|---|---|
| `customer_id` | string (uuid) | yes |

## Example

```http
POST https://doingwork.work/v1/cards/setup-link
content-type: application/json
Idempotency-Key: 3f1c...

{
  "customer_id": "00000000-0000-4000-8000-000000000000"
}
```

## Output

JSON. The response shape isn't published yet; read the fields you need and ignore the rest. Errors are `{code, message, status}`.

## Errors

| Code | Status | What to do |
|---|---|---|
| `invalid_input`, `invalid_token`, `rate_limited` |  | Can happen on any call. See [errors](https://doingwork.work/docs/errors/). |