Cartão Carrefour card, Pix and Open Finance data
Cartão Carrefour: Crédito e + is Banco CSF S/A's cardholder app for the Carrefour Soluções private-label credit card (COMPE bank code 368) sold across Carrefour, Atacadão and Sam's Club in Brazil. After CPF login with password, SMS token and optional biometrics, the home tracks purchases and available limit, lists contracted products as modules, and opens fatura (open, previous, download, due-date and send-type), Pix (keys, cash-in/out, QR, automatic Pix, MED contest, trusted contacts, limits), Conta Digital with yield, Open Finance bank linking, a virtual card plus Click to Pay and Google/Samsung Wallet provisioning, Parcele Fácil / parcelamento, debt agreement and FGTS, personal credit, consignado, PayContas boletos on the card, Carrefour cashback missions, insurance and additional cards. The app is Brazil-only; on Google Play it holds a 4.73 rating across 303,511 reviews and sits next to Nubank, C6 Bank, Inter, MagaluPay and other retailer-issued cards.
Open-fatura rows on Banco CSF's private-label book carry invoiceValue next to availableLimitValue, with dueDate, minimumPayment and a boleto barcode for the same cycle. Lançamentos underneath stamp transactionId, cardFinalDigits, installmentPosition and authCode so a Carrefour / Atacadão ticket can be matched to the plastic that swiped it.
Conta Digital yield sits beside that card: balance, unavailableBalance and daily yield keyed by referenteDate, while Pix DICT returns pixKey / pixKeyType plus daytime currentLimit. Open Finance reception lists organizationName and consentId; the rewards wallet exposes currentBalance and daysToExpire. Lending stacks, household ledgers and loyalty ops consume those objects; openData Studio turns them into callable open data.
Screenshots
API surface
The endpoints and request/response examples below are reconstructed from the app's interface — illustrative, not a live capture.
CSF SSO login
POST
/v1/auth/sessionsopendataExchanges the cardholder CPF and password (plus optional smsToken) for the CSF SSO session: accessToken, refreshToken, sessionState and tokenType.
Auth: None. CPF, password and device identifiers mint accessToken; later calls send Authorization: Bearer plus a device attestation header.
- username
- password
- deviceId
- smsToken
- accessToken
- expiresIn
- refreshToken
- refreshExpiresIn
- tokenType
- notBeforePolicy
- sessionState
- scope
- acquisition
POST /v1/auth/sessions HTTP/1.1 Content-Type: application/json { "username": "12345678901", "password": "********", "deviceId": "a1b2c3d4-e5f6", "smsToken": "840291" }{ "accessToken": "<jwt-access-token>", "expiresIn": "3600", "refreshToken": "rt_csf_9f21", "refreshExpiresIn": "2592000", "tokenType": "Bearer", "notBeforePolicy": "0", "sessionState": "sess-csf-7c21", "scope": "openid profile", "acquisition": false }Identify cardholder
GET
/v1/customers/me/profileosintResolves the signed-in CSF customer into uniqueUserId plus mapped card, digital-account and cashback product flags used on the home modules.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- uniqueUserId
- debtType
- accountStatus
- cardStatus
- situation
- cardTypeLabel
- flag
- accountType
- origin
- isBlockedProduct
- rewardWalletStatus
GET /v1/customers/me/profile HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "uniqueUserId": "usr-csf-88412019", "card": { "debtType": "REVOLVING", "accountStatus": "ACTIVE", "cardStatus": "NORMAL", "situation": "LIBERADO", "cardTypeLabel": "Cartão Carrefour Visa", "flag": "VISA" }, "account": { "accountStatus": "ACTIVE", "accountType": "DIGITAL", "origin": "CSF", "isBlockedProduct": false }, "cashback": { "rewardWalletStatus": "ACTIVE" } }Credit-card home summary
GET
/v1/cards/summaryopenfinanceLoads the card home snapshot: invoiceValue, availableLimitValue, expirationDate and the pay / parcel action flags.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- status
- expirationDate
- allowedActions
- hasAvailableLimit
- invoiceValue
- availableLimitValue
- enablePaymentButton
- enableAdvancePaymentButton
- hasPendingParcele
GET /v1/cards/summary HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "status": "NORMAL", "expirationDate": "2026-11-10", "allowedActions": ["PAY", "PARCEL"], "hasAvailableLimit": true, "invoiceValue": 1842.55, "availableLimitValue": 3210.40, "enablePaymentButton": true, "enableAdvancePaymentButton": true, "hasPendingParcele": false }List my cards
GET
/v1/cardholder/cardsopenfinanceReturns the CSF card account and plastic list shown on Meus Cartões, including invoiceSendType and expirationDay.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- cardAccountNumber
- accountStatus
- invoiceSendType
- expirationDay
- cards
GET /v1/cardholder/cards HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "cardAccountNumber": "0001234567", "accountStatus": "ACTIVE", "invoiceSendType": "EMAIL", "expirationDay": 10, "cards": [ { "flag": "VISA", "cardTypeLabel": "Titular" } ] }Open and previous invoices
GET
/v1/statementsopenfinanceReads open and previous faturas with invoiceAmount, minimumPayment, dueDate, barcode and limit remaining.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- invoiceId
- invoiceType
- idInvoiceType
- dueDate
- closeDate
- invoiceAmount
- minimumPayment
- totalLimit
- availableLimit
- bestDayToBuy
- barcode
- isEligibleToAnticipate
- enablePaymentButton
GET /v1/statements HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "invoiceId": "fat-202610", "invoiceType": "OPEN", "idInvoiceType": 1, "dueDate": "2026-11-10", "closeDate": "2026-10-28", "invoiceAmount": {"amount": 1842.55, "currency": "BRL"}, "minimumPayment": {"amount": 276.38, "currency": "BRL"}, "totalLimit": 8000.00, "availableLimit": 3210.40, "bestDayToBuy": 12, "barcode": "23791.11111 11111.111111 11111.111111 1 00000000184255", "isEligibleToAnticipate": true, "enablePaymentButton": true }Invoice releases
GET
/v1/statements/entriesopenfinanceLists fatura lançamentos with merchant description, installmentPosition and authCode for the statement screen.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- accountNumber
- date
- hasFutureReleases
- releaseMonth
- transactionId
- idFatura
- cardFinalDigits
- cardName
- description
- amount
- installment
- installmentPosition
- installmentQuantity
- authCode
- transactionDate
GET /v1/statements/entries HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "accountNumber": "0001234567", "date": "2026-10-15", "hasFutureReleases": true, "releaseMonth": [ { "transactionId": "txn-9f21", "idFatura": "fat-202610", "cardFinalDigits": "4421", "cardName": "MARIA SILVA", "cardType": "TITULAR", "description": "CARREFOUR HORTOLANDIA", "amount": 189.90, "installment": "02/03", "installmentPosition": 2, "installmentQuantity": 3, "authCode": "884120", "transactionDate": "2026-10-12" } ] }Invoice Pix QR code
GET
/v1/statements/pix-qr/{accountNumber}openbankingIssues the Pix copia-e-cola and QR image used to pay the open fatura, plus remaining invoiceValue.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- imageBase64
- copyPaste
- invoiceValue
- minimumPayment
- expirationDate
- closingDate
- writableLine
- invoicePaid
- quantityGenerated
GET /v1/statements/pix-qr/0001234567 HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "imageBase64": "iVBORw0KGgoAAAANSUhEUgAA...", "copyPaste": "00020126580014br.gov.bcb.pix0136csf-invoice-9f21", "invoice": { "invoiceValue": 1842.55, "minimumPayment": 276.38, "expirationDate": "2026-11-10", "closingDate": "2026-10-28", "writableLine": "23791.11111 11111.111111 11111.111111 1 00000000184255", "invoicePaid": false }, "pix": { "quantityGenerated": 1, "invoicePaid": false } }Digital-account yield balances
GET
/v1/wallet/yieldopenbankingReads Conta Digital yield: available balance, unavailableBalance, nested yield.totals (date / inYear) and referenteDate.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- balance
- unavailableBalance
- referenteDate
- yield
- totals
- messageSuggestion
- date
- inYear
GET /v1/wallet/yield HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "balance": 1520.33, "unavailableBalance": 40.00, "referenteDate": "2026-10-20", "yield": { "totals": {"date": 12.47, "inYear": 186.20}, "messageSuggestion": "Seu rendimento de ontem" } }List Pix DICT keys
GET
/v1/pix/aliasesopenbankingLists DICT keys registered on the CSF digital account with pixKeyType and the settlement account (agency, accountNumber).
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- keys
- pixKey
- pixKeyType
- dateGenerateKey
- dateDomainKey
- institution
- accountNumber
- agency
- name
GET /v1/pix/aliases HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "keys": [ { "pixKey": "11987654321", "pixKeyType": "PHONE", "dateGenerateKey": "2025-03-12T11:04:00Z", "dateDomainKey": "2025-03-12T11:05:10Z" } ], "account": { "institution": "BANCO CSF S.A.", "accountNumber": "0001234567", "agency": "0001", "name": "MARIA SILVA" } }Pix transfer limits
GET
/v1/pix/limit-rulesopenbankingReturns daytime/nighttime Pix currentLimit and in-flight inProcessingLimit used on the safety screen.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- limits
- limitsRuleFor
- limitsRulePeriod
- currentLimit
- inProcessingLimit
GET /v1/pix/limit-rules HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "limits": [ { "limitsRuleFor": "DAYTIME", "limitsRulePeriod": "DAILY", "currentLimit": 5000.00, "inProcessingLimit": 8000.00 }, { "limitsRuleFor": "NIGHTTIME", "limitsRulePeriod": "DAILY", "currentLimit": 1000.00, "inProcessingLimit": 1000.00 } ] }Get Open Finance consent
GET
/v1/consents/currentopenfinanceStarts or resumes a Banco CSF Open Finance consent, returning interactionId and the redirect url.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- url
- interactionId
- consent
- consentId
GET /v1/consents/current HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "url": "https://consent.example.com/callback", "interactionId": "int-7c21-of", "consent": { "consentId": "urn:csf:consent:9f21" } }Open Finance reception accounts
GET
/v1/consents/inboundopenfinanceLists inbound Open Finance consents (reception) with organizationName, consentId and expirationDate.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- status
- expirationDate
- updatedDate
- consentId
- organizationName
- organizationIcon
GET /v1/consents/inbound HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "status": "AUTHORISED", "expirationDate": "2027-04-20T00:00:00Z", "updatedDate": "2026-10-18T14:22:00Z", "consentId": "urn:csf:consent:9f21", "organizationName": "Nubank", "organizationIcon": "https://cdn.example/nubank.png" }Cashback rewards summary
GET
/v1/loyalty/accounts/{accountId}/balanceopendataReads the Carrefour rewards wallet: currentBalance, daysToExpire, totalAccumulated and accumulationLimit.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- accumulationInformations
- balanceInformations
- engagementInformations
- redemptionInformations
- accumulationLimit
- isInAccumulationPeriod
- totalAccumulated
- currentBalance
- daysToExpire
- expireDate
- rewardFuturePoints
- rewardWalletStatus
GET /v1/loyalty/accounts/0001234567/balance HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "accumulationInformations": { "accumulationLimit": 500.00, "isInAccumulationPeriod": true, "totalAccumulated": 87.40 }, "balanceInformations": { "currentBalance": 42.10, "daysToExpire": 18, "expireDate": "2026-11-07", "rewardFuturePoints": 12.00, "rewardWalletStatus": "ACTIVE", "activatedForTransactionExpiration": true }, "engagementInformations": {}, "redemptionInformations": {} }Create virtual card
POST
/v1/cards/virtualopenfinanceMints a CSF virtual card (PAN, CVV, holderName, expirationMinutes) for online or wallet use.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- id
- cardNumber
- holderName
- securityCode
- type
- expirationDate
- expirationMinutes
- flag
- dailyTotals
POST /v1/cards/virtual HTTP/1.1 Authorization: Bearer <accessToken> Content-Type: application/json { "type": "SINGLE_USE" }{ "id": "vc-7c21", "cardNumber": "4000000000004421", "holderName": "MARIA SILVA", "securityCode": "123", "type": "SINGLE_USE", "expirationDate": "2026-10-20T23:59:00Z", "expirationMinutes": 1440, "flag": "VISA", "dailyTotals": [] }Digital-account statement
GET
/v1/wallet/movements/{transactionId}openbankingReads one Conta Digital movement including Pix end-to-end id (codEndToEnd) and receiptId.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- id
- transactionType
- title
- description
- amount
- movementType
- codEndToEnd
- hour
- hasReceipt
- receiptId
- productType
GET /v1/wallet/movements/txn-pix-9f21 HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "id": "txn-pix-9f21", "transactionType": "PIX", "title": "Pix enviado", "description": "Pagamento fatura", "amount": 1842.55, "movementType": "DEBIT", "codEndToEnd": "E36820261020123456789012345", "hour": "14:22:11", "hasReceipt": true, "receiptId": "rcpt-7c21", "productType": "DIGITAL_ACCOUNT" }Personal-credit onboarding
POST
/v1/lending/applicantsopenfinanceStarts crédito pessoal onboarding for the CSF card account: holder identity plus preApproved, minimumOfferValue and eligibility flags.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- name
- cpf
- birthDate
- accountNumber
- accountStatus
- proposalId
- preApproved
- minimumOfferValue
- approvedEligibility
- cardWithoutRestriction
- cpInProgress
- cpRejected
- isStatusAccountNorm
POST /v1/lending/applicants HTTP/1.1 Authorization: Bearer <accessToken> Content-Type: application/json { "accountNumber": "0001234567" }{ "name": "Maria Silva", "cpf": "12345678901", "birthDate": "1988-03-14", "email": "[email protected]", "accountNumber": "0001234567", "accountStatus": "ACTIVE", "proposalId": 88412019, "preApproved": 4500.00, "minimumOfferValue": 300.00, "approvedEligibility": true, "cardWithoutRestriction": true, "cpInProgress": false, "cpRejected": false, "isStatusAccountNorm": true }Personal-credit contract in progress
GET
/v1/lending/contracts/{accountNumber}openfinanceReads the in-flight crédito pessoal contract: requiredValue, totalvalue, installmentValue and the status pipeline (userState).
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- contractNumber
- contractDate
- requiredValue
- totalvalue
- installmentValue
- quantitiesOfInstallments
- status
- order
- title
- message
- userState
GET /v1/lending/contracts/0001234567 HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "contractNumber": "CP-2026-8841", "contractDate": "2026-09-02", "requiredValue": 3000.00, "totalvalue": 3486.40, "installmentValue": 290.53, "quantitiesOfInstallments": 12, "status": [ { "order": 2, "title": "Em análise", "message": "Proposta em análise de crédito", "userState": "IN_REVIEW" } ] }Simulate personal credit
GET
/v1/lending/quotes/{accountNumber}openfinancePrices crédito pessoal plans for the card account: valueRequested, valueParcel, cetYearly, iofTotalValue and quantityOfInstallment.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- maximumInstallmentQuantity
- installmentMinimumQuantity
- retakeValue
- gracePeriods
- plans
- planCode
- valueRequested
- percentageRequestedValue
- totalValue
- percentTotalValue
- valueParcel
- quantityOfInstallment
- cetYearly
- fees
- iofTotalValue
- dateFirstParcel
- valueInsurance
GET /v1/lending/quotes/0001234567 HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "maximumInstallmentQuantity": 24, "installmentMinimumQuantity": 6, "retakeValue": 4500.00, "gracePeriods": [], "plans": [ { "planCode": "CP24", "valueRequested": 3000.00, "percentageRequestedValue": "66.67", "totalValue": 3720.48, "percentTotalValue": "124.02", "valueParcel": 155.02, "quantityOfInstallment": 24, "cetYearly": 89.4, "fees": 412.10, "iofTotalValue": 48.22, "dateFirstParcel": "2026-11-10", "valueInsurance": 96.00 } ] }Parcele Fácil modalities
GET
/v1/installments/{accountNumber}/optionsopenfinanceLists Parcele Fácil modalities on the card account: offerProfile, invoice-permission flags and totalBalanceAmount eligible to parcel.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- offerProfile
- closedInvoicePermission
- partialBalancePermission
- totalBalancePermission
- isUpToDay
- totalBalanceAmount
- minimumAmountDebt
- openedInvoice
- closedInvoice
- transactions
GET /v1/installments/0001234567/options HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "offerProfile": 2, "closedInvoicePermission": true, "partialBalancePermission": true, "totalBalancePermission": false, "isUpToDay": true, "totalBalanceAmount": {"amount": 1842.55, "currency": "BRL"}, "minimumAmountDebt": {"amount": 276.38, "currency": "BRL"}, "openedInvoice": {"invoiceValue": 1842.55}, "closedInvoice": {}, "transactions": [] }Payment-account balance
GET
/v1/digital-account/balanceopenbankingReads the Conta Digital payment-account cash position: availableAmount, blockedAmount and agencyNumber.
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- accountNumber
- agencyNumber
- availableAmount
- blockedAmount
- balance
GET /v1/digital-account/balance HTTP/1.1 Authorization: Bearer <accessToken> Accept: application/json{ "accountNumber": "0001234567", "agencyNumber": "0001", "availableAmount": 1520.33, "blockedAmount": 40.00, "balance": 1480.33 }Invalidate SSO session
POST
/v1/auth/sessions/revokeopendataEnds the cardholder's CSF SSO session (accessToken / refreshToken / sessionState).
Auth: Bearer accessToken from the sign-in call; a device attestation header accompanies every request.
- sessionState
- tokenType
POST /v1/auth/sessions/revoke HTTP/1.1 Authorization: Bearer <accessToken> Content-Type: application/json {}{ "sessionState": "closed", "tokenType": "Bearer" }
Data categories
- cardholder identity
- credit-card limits and invoices
- Pix DICT keys and limits
- digital-account yield and movements
- Open Finance consents
- cashback rewards
- virtual cards
- personal credit offers and contracts
- invoice installment (Parcele Fácil)
Where teams use this data
Retail-card invoice reconciliation
Finance bots pull invoiceValue, minimumPayment and lançamento authCode rows so a Carrefour / Atacadão household ledger can match fatura closeDate against POS receipts.
Pix DICT and limit monitoring
Treasury dashboards watch pixKeyType registrations and daytime/nighttime currentLimit so CSF digital-account cash-out stays inside Banco Central Pix rules.
Open Finance reception inventory
Wealth aggregators list organizationName + consentId + expirationDate for banks the cardholder linked into Banco CSF as a reception institution.
Rewards wallet expiry alerts
Loyalty ops fire on daysToExpire and currentBalance so Carrefour cashback is spent at the banner before expireDate.
Frequently asked questions
Which invoice fields does the app expose?
Open and previous faturas return invoiceId, invoiceAmount, minimumPayment, dueDate, closeDate, barcode, totalLimit and availableLimit, with lançamentos carrying transactionId, description, installmentPosition and authCode.
Does the app run Brazilian Pix and Open Finance?
Yes. DICT keys (pixKey, pixKeyType) and Pix limits (currentLimit, limitsRuleFor) live on the digital account, and Open Finance consents return interactionId, consentId and organizationName for reception banks.
What yield and rewards balances are available?
Conta Digital yield reports balance, unavailableBalance, yield and referenteDate. The Carrefour rewards wallet reports currentBalance, daysToExpire, expireDate, totalAccumulated and accumulationLimit.
Does the app expose personal-credit offers?
Yes. Crédito pessoal onboarding returns name, CPF, preApproved and minimumOfferValue; in-progress contracts expose contractNumber, requiredValue, installmentValue and userState; simulation returns planCode, valueParcel, cetYearly and iofTotalValue.
Apps similar to Cartão Carrefour: Crédito e +
- BrasilCard Cliente — BrasilCard Cliente is BrasilCard's cardholder app for tracking invoices and live purchases, generating a barcode to pay the fatura, unblocking the card and changing the due date, and requesting a duplicate or debt negotiation.
- Cartão Magalu — Itaú Unibanco's Cartão Magalu app manages Magalu and Luiza store credit cards with Magalu cashback, fatura pay and renegotiation, and temporary or recurring virtual cards for online shopping.
- Credz — Credz (DMCARD SA) is a Brazilian store-card issuer whose app looks up limit, PIN and invoices, activates a virtual card and opens Club Credz merchant discounts and loyalty points.
- Nubank — Nubank's Brazilian Android app combines a free NuConta, a credit card, Pix, loans, investments, insurance and cashback in one login.
- Inter — Inter is Banco Inter's Super App for a fee-free Brazilian digital account with unlimited Pix, TED and DOC, an international credit card with a points program and virtual card, plus Home Broker and Tesouro Direto investing.
- C6 Bank — C6 Bank's app opens a digital account in reais, dollars or euros, issues credit cards subject to analysis, and includes an international debit card plus brokerage for Brazilian and overseas assets.
- PicPay — Banco PicPay's app combines a digital account, Pix, several PicPay credit cards, personal and payroll credit, a Cofrinho pot and in-app investments.
- Bradesco Cartões — Bradesco Cartões is Banco Bradesco's app for Bradesco and Bradescard credit cards, covering live limits and purchases, digital fatura paid via Pix, instant block or contactless toggle, and a virtual card for online shopping.
Topics
- Cartão Carrefour API
- Banco CSF fatura
- Carrefour Pix DICT
- Open Finance CSF
- Conta Digital yield
- Carrefour cashback
Need this app's data API integrated?
We deliver scoped integrations for any named app — from USD 500 with source-code handoff, or hosted access billed per call. Tell us the data you need.
- NDA + SOW on every engagement
- Delivery in 3–7 days
- Payment only after acceptance
- Work scoped to authorized use