update docs

docs/mibapi/05-cards.md

@@ -0,0 +1,86 @@
+# Cards
+
+Fetch debit card information for the authenticated session.
+
+---
+
+## Endpoint
+
+```
+POST https://faisamobilex-wv.mib.com.mv/ajaxDebitCard/fetchCardInfos
+```
+
+---
+
+## Authentication
+
+See [README](README.md) for cookie and AJAX header format.
+
+```
+Referer: https://faisamobilex-wv.mib.com.mv//debitCards?dashurl=1
+```
+
+---
+
+## Request Body (form-urlencoded)
+
+| Field | Value | Description |
+|---|---|---|
+| `name` | `` | Card name filter (empty = all) |
+| `start` | `1` | Start index (1-based) |
+| `end` | `50` | End index |
+| `includeCount` | `1` | Include total count |
+
+---
+
+## Response
+
+```json
+{
+  "success": true,
+  "data": [
+    {
+      "cardId": "CARD001",
+      "maskedCardNumber": "4111 **** **** 1234",
+      "cardStatus": "A",
+      "cardType": "D",
+      "cardTypeDesc": "Debit Card",
+      "customerId": "C000001",
+      "phoneNumber": "9600000001",
+      "cardHolderName": "MOHAMED ALI"
+    }
+  ]
+}
+```
+
+| Field | Type | Description |
+|---|---|---|
+| `success` | `bool` | `true` on success |
+| `data` | `array` | List of card objects |
+
+### Card Object
+
+| Field | Type | Description |
+|---|---|---|
+| `cardId` | `string` | Internal card identifier |
+| `maskedCardNumber` | `string` | Partially masked card number for display |
+| `cardStatus` | `string` | Card status (`A` = Active) |
+| `cardType` | `string` | Card type code (e.g. `D` = Debit) |
+| `cardTypeDesc` | `string` | Human-readable card type (e.g. `"Debit Card"`) |
+| `customerId` | `string` | Customer ID |
+| `phoneNumber` | `string` | Registered phone number |
+| `cardHolderName` | `string` | Name on card |
+
+### Failure
+
+```json
+{ "success": false }
+```
+
+---
+
+ 
+
+---
+
+[← Transaction History](04-history.md)     **Next →** [Financing](06-financing.md)