# Add a card

`POST https://evohub.io/api/v1/retro/boards/{boardID}/columns/{columnID}/cards`

Part of the [Retro API](https://docs.evohub.io/retro.md) reference · operationId `createRetroCard`.

Adds a card to a column of an active board. The card does not say who
wrote it; the caller can later edit and delete it as its author.

Requires the `retro:card:write` scope.

## Authorization

Any one of:

- `bearerKey`
- `headerKey`

Where:

- `bearerKey`: HTTP Bearer — An EvoHub API key (`evohub_…`) as a bearer token.
- `headerKey`: API key in the header `X-API-Key` — An EvoHub API key (`evohub_…`).

## Path parameters

- `boardID` (string, required, example `brd_3f9a1c7e2b8d4a60`): The board's ID.
- `columnID` (string, required, example `col_1a2b3c4d5e6f7a80`): The column's ID.

## Request body (required)

Content type: `application/json`

Type: `CardContentRequest`

- `content` (string, required)

## Responses

### 201 — The card was added.

Content type: `application/json`

Type: `CardEnvelope`

- `success` (boolean)
- `data` (Card)
  - `id` (string, example `crd_8d0c4b6e1a9f2357`)
  - `board_id` (string)
  - `column_id` (string)
  - `content` (string)
  - `created_at` (string (date-time))
  - `reactions` (array of Reaction): Only when a whole board is read; left out when there are none.
    - `emoji` (string)
    - `count` (integer)
    - `reacted` (boolean): Whether the caller reacted with this emoji.
  - `comments` (array of Comment): Only when a whole board is read; left out when there are none.
    - `id` (string, example `cmt_4e6a8c0b2d1f3957`)
    - `card_id` (string)
    - `board_id` (string)
    - `content` (string)
    - `created_at` (string (date-time))
  - `vote_score` (integer): The net of agree (+1) and disagree (-1) votes.
  - `my_vote` (integer, one of `-1`, `0`, `1`): The caller's own vote on the card.

### 400 — The body is not JSON (`INVALID_BODY`), or `content` is missing or blank (`MISSING_CONTENT`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 401 — No API key was sent, or it is unknown, revoked or expired (`UNAUTHORIZED`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 403 — The key lacks the scope this endpoint needs (`FORBIDDEN`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 404 — The board is not one the caller can see (`NOT_FOUND`), or the column is not on it (`COLUMN_NOT_FOUND`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 409 — The board is closed and its content cannot change (`BOARD_CLOSED`). Reopen it first.

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 429 — Too many requests (`RATE_LIMITED`). Wait for `Retry-After` seconds.

Headers:

- `Retry-After` (integer): Seconds to wait before retrying.

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

### 500 — Something went wrong on EvoHub's side (`INTERNAL_ERROR`). Retry later.

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Retro itself; refusals before the request reaches Retro (401, 429) carry only `error`.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `board not found`)
  - `request_id` (string)

## Example request

```bash
curl -X POST 'https://evohub.io/api/v1/retro/boards/brd_3f9a1c7e2b8d4a60/columns/col_1a2b3c4d5e6f7a80/cards' \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer <TOKEN>' \
  -d '{
  "content": "The new deploy pipeline saved hours"
}'
```