Skip to main content
Freeze a previously issued card. The card will reject subsequent authorizations until unfrozen (unfreeze tool ships in v1.1).

​
Metadata

FieldValue
Namecards.freeze
Categorywrite
Required scopecards:manage
Idempotency key requiredno

​
Annotations

AnnotationValue
TitleFreeze Card
Read-onlyno
Destructiveno
Idempotentyes
Open-worldno
Requires human approvalno

​
Input schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
    },
    "reason": {
      "default": "user_request",
      "type": "string",
      "enum": [
        "user_request",
        "anomaly",
        "admin_kill_switch",
        "expired_agent"
      ]
    }
  },
  "required": [
    "card_id",
    "reason"
  ],
  "additionalProperties": false
}

​
Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
    },
    "frozen_at": {
      "type": "string",
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
    },
    "reason": {
      "type": "string"
    }
  },
  "required": [
    "card_id",
    "frozen_at",
    "reason"
  ],
  "additionalProperties": false
}

​
Auth

Caller’s grant must include the cards:manage scope. Grants whose scope set is a superset of the required scope are accepted.

​
Request examples

curl -X POST https://mcp.glide.co/mcp/write \
  -H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "cards.freeze",
    "params": {
      "card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
      "reason": "anomaly"
    }
  }'

​
Response examples

Success — card frozen: 
{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "card_id": "d4e5f6a7-b8c9-0123-defa-234567890123",
    "frozen_at": "2026-05-04T14:22:10Z",
    "reason": "anomaly"
  }
}
Card not found: 
{
  "jsonrpc": "2.0",
  "id": 1,
  "error": {
    "code": -32602,
    "message": "no card d4e5f6a7-b8c9-0123-defa-234567890123",
    "data": { "reason_id": "card_not_found" }
  }
}
Card belongs to a different vault: 
{
  "jsonrpc": "2.0",
  "id": 1,
  "error": {
    "code": -32001,
    "message": "card d4e5f6a7-b8c9-0123-defa-234567890123 does not belong to vault b2c3d4e5-f6a7-8901-bcde-f12345678901",
    "data": { "reason_id": "card_belongs_to_other_vault" }
  }
}

​
Errors

CodeNameCauseRemediation
-32600Invalid requestMalformed JSON-RPC envelopeCheck method, jsonrpc, and id fields
-32602Invalid paramscard_id not a valid UUID, or card does not exist (card_not_found)Confirm the card was issued by this agent
-32001UnauthorizedCard belongs to a different vault or a sibling agentUse the card_id returned by cards.issue for this grant
-32002Policy deniedGrant missing cards:manage scopeIssue a new grant with the required scope
-32603Internal errorIssuer-side freeze call failedRetry — freeze is idempotent; a second call is safe