Connect a card provider and manage cards

This guide shows you how to connect a card provider, get cards into ExitNode, and manage them on the Cards screen. You’ll also see how to unlock cards and control who can see their numbers.

Everything here is in the desktop app. Click Cards in the sidebar.

The Cards screen

The left side lists Folders: All cards, Uncategorized, and your own. + makes a new folder. Click a folder to show its cards.

The toolbar has search, Filters, Columns, and these buttons:

Button	What it does
Refresh	Reloads your cards and checks their state with the issuers. The note beside it says when they were last checked.
Card providers (gear)	Connects and manages issuers.
Card access and devices (people)	Devices, PIN and how long cards stay unlocked.
Show card numbers (eye)	Shows numbers in the table, after you unlock.
Add card	Adds a card by hand, generates one, or imports a file.

Unlock cards

Numbers stay hidden until you unlock. The list itself shows without unlocking, with only the last four digits.

Your organization’s cards use one of two methods. The app asks for whichever applies.

Cards passphrase. The first time, Set a cards passphrase asks you to create one. After that, Unlock cards asks for it, with an option to remember it on this computer. Cards lock again after a period without use. See Change your settings.

A PIN for each device. Each device has its own 6-digit PIN, and the owner approves it. See Card access below.

Click the eye again, Hide card numbers and lock, to hide and lock.

Connect a provider

A provider lets ExitNode generate new cards with your issuer account. You can connect Extend or Slash. You don’t need one to add a card by hand.

1. Click the gear, Card providers.
2. Click Add provider.
3. Choose an Issuer, then follow its steps.

Extend

1. Enter your Account email and Password.
2. Optionally enter a Name, such as Main.
3. Choose whether to turn on Sync to the cloud. See below.
4. Click Save & sign in.
5. A window opens. Sign in to Extend there, once.

The login is stored in this computer’s Keychain.

Slash

1. Paste your API key, from Slash’s settings under API keys.
2. If it’s a user-scoped key, enter its Legal entity ID. Leave this blank for an entity key.
3. Optionally enter a Name.
4. Choose whether to turn on Sync to the cloud.
5. Click Check key & add.

If the key sees several accounts, Account appears. Pick the one to create cards in, and click Check key & add again.

Sync to the cloud

Setting	What it does	Pick it when
Off	The provider stays on this computer only.	Only this computer generates cards.
On	An encrypted copy is kept, so your organization’s other computers can use it. It’s encrypted with your cards passphrase.	Several computers generate cards.

You can change this later with the Sync switch on the provider’s row.

Manage your providers

Card providers lists each provider with its status.

Status	What it means
Connected	It’s ready to generate cards.
Sign-in needed	Sign in again.

• Open opens the issuer in its own browser window, and leaves it open. Extend only.
• ⋯ has Sign in again, Check sign-in and Remove from this Mac. Slash only has the last one.
• In the cloud · not on this Mac lists providers synced from another computer. Use on this Mac sets one up here.

Removing a synced provider leaves its cloud copy for your other computers. Turn Sync off first to delete that too.

Add a card by hand

1. Click Add card, then Add card in the menu.
2. Fill in:

Field	What to enter
Label	Your name for the card.
Cardholder	The name on the card.
Card number	The full number.
Exp month and Exp year	MM and YYYY.
CVV	The security code.
Billing ZIP	The billing postcode.
Provider	Who issued it. Starts as manual.
Site	The site this card is for, or No site.
Folder	Uncategorized, or a folder.

3. Click Add card.

The dialog tells you the number and CVV are encrypted on this computer before saving.

Import cards

1. Click Add card, then Import cards….
2. Choose a CSV file.
3. Check how its columns match Label, Cardholder name, Card number, CVV, Exp month, Exp year, Billing ZIP and Provider.
4. Click Import.

Generate cards

This needs a connected provider. On some setups, only the owner can do it.

1. Click Add card, then Generate card.
2. Fill in:

Field	What it means
Provider	Which connected account to use.
How many	From 1 to 100.
Amount each (USD)	The limit on each card.
Single use	Closes each card after its first charge. Slash only.
Label	The label on each card.
Site	The site these cards are for, or No site.
Folder	Required. Pick one, or + Create new folder….

3. Click Generate.

Progress shows as Prepare, Generate, Save and Done.

Read the table

Column	What it shows
Card	The network, label, last four digits and cardholder.
Site	The site it’s for. A second line can say when it was used, or From the label.
Status	See below. Hover for the reason.
Balance	What’s left of its limit, with a bar.
Provider	Extend, Slash or Manual.
Exp	The expiry date.

CVV, Folder and Added are off by default. Turn them on with Columns.

Status

Status	What it means
Active	The card can be used.
Pending	The issuer hasn’t made it active yet.
Paused	The issuer has paused it.
Spent	Its limit is used up.
Closed	The issuer closed or cancelled it.
Expired	It’s past its expiry date.
Burned	You marked it as done with.
Archived	You archived it.

Burned and Archived are the only ones you set yourself. Cards you’ve finished with are dimmed.

If the note in the toolbar says a provider should sign in again, its saved login no longer works. Open Card providers to fix it.

Filter

Filters offers Status, Provider and Site. Search matches the label, brand, last four digits, cardholder, provider, site and status.

Manage a card

Click a row to edit it. In the editor, Reveal shows the number, and Delete removes the card. For an existing card, leave Card number and CVV blank to keep them.

Or click ⋯, or right-click:

Item	What it does
Copy card number	Copies it, after you unlock.
Copy CVV	Copies it, after you unlock.
Shared with…	Chooses who can use it. Owners on the PIN method only.
Edit…	Opens the editor.
Set site…	Sets the site.
Mark burned	Marks it as done with.
Archive	Keeps it in the list, dimmed, and leaves it out of autofill.
Make active again	Undoes Mark burned or Archive.
Delete	Removes it.

You can also click the number or CVV in the table to copy it, once unlocked.

To change several, tick them. The bottom bar offers Move to folder, Set site, Mark burned, Archive and Delete.

Deleting only removes the card from ExitNode. The issuer keeps its own copy. It can’t be undone.

Card access

This panel appears on the PIN method. Click Card access and devices.

This device

The panel shows this device’s state:

State	What it means	What to do
Not set up	The device has no PIN yet.	Click Set PIN and choose 6 digits.
Waiting for approval	The owner hasn’t approved it.	Ask the owner to approve it.
Approved	Your PIN unlocks cards here.	Click Unlock.
Unlocked	Cards are open now.	Click Lock now when you’re done.
Revoked	The owner revoked this device.	Click Set up again to ask again.
Locked out	Too many wrong PINs.	Click Set up again.

Change PIN changes your PIN.

Stay unlocked

Keep cards unlocked on this device chooses how long: 15 minutes, 8 hours, Until ExitNode quits or Always. Your organization can limit this with Let members keep cards unlocked under Browser Settings.

Lock now locks straight away, and forgets any kept unlock.

Approve devices

If you’re the owner, the list shows each person’s devices, with a status of pending, approved or revoked. Click Approve or Revoke.

Choose who can see a card

On a card, click Shared with…. For each person, choose:

Level	What they can do
Not shared	Nothing.
Can use	Their device can fill this card without showing the number.
Can use and reveal	They can also see and copy it, if their role allows it.

Upgrade an older setup

If you’re the owner on the passphrase method, you see Upgrade vault. It’s a one-time change. It moves your cards to the PIN method, and gives you a recovery kit to keep safe. If it’s interrupted, the button reads Finish upgrade.

If something goes wrong

“Only the organization owner can add or change card numbers on the upgraded vault” Ask the owner.

“You don’t have permission to reveal these cards” Ask the owner for Can use and reveal, or check your role.

“Cards are locked. Unlock them with your PIN.” Click the eye and enter your PIN.

“Not signed in yet. Sign in in its window, then check again.” Finish signing in to Extend, then click Check sign-in.

“Slash refused that key. Check it, and the legal entity for a user-scoped key.” Check the key.

“Slash needs the legal entity ID for this key” Fill in Legal entity ID.

“This key sees no account to create cards in” Check the key’s access in Slash.

“Slash is rate limiting. Try again in a minute.” Wait, then try again.

“Paste the Slash API key” or “Enter the account email and password” A field is empty.

“No providers on this Mac yet. Add one to start generating cards.” Click Add provider.

“No permission to create folders” Ask for a higher Cards level. See Members and roles.