iyzico Payment API

REST API for accepting card payments (NON-3DS and 3D Secure), hosted CheckoutForm and Pay with iyzico flows, iyzico Link, subscriptions, marketplace submerchant payments and payouts, card storage/tokenization, installment and BIN lookup, refunds/cancels, reporting and webhooks. Authentication is an HMACSHA256-signed IYZWSv2 header using an apiKey + secretKey pair.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/iyzico:iyzico-payment-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑
name: iyzico Payment API
description: REST API for accepting card payments (NON-3DS and 3D Secure), hosted CheckoutForm and Pay
  with iyzico flows, iyzico Link, subscriptions, marketplace submerchant payments and payouts, card storage/tokenization,
  installment and BIN lookup, refunds/cancels, reporting and webhooks. Authentication is an HMACSHA256-signed
  IYZWSv2 header using an apiKey + secretKey pair.
humanURL: https://docs.iyzico.com/en/
baseURL: https://api.iyzipay.com
tags:
- Payments
- Card Payments
- 3D Secure
- Subscription
- Marketplace
tags_raw:
- Payments
- Card Payments
- 3D Secure
- Subscriptions
- Marketplace
properties:
- type: Documentation
  url: https://docs.iyzico.com/en/
- type: APIReference
  url: https://docs.iyzico.com/en/getting-started/preliminaries/api-reference-beta
- type: GettingStarted
  url: https://docs.iyzico.com/en/getting-started/welcome
- type: Authentication
  url: authentication/iyzico-authentication.yml
- type: Sandbox
  url: sandbox/iyzico-sandbox.yml
- type: RateLimits
  url: rate-limits/iyzico-rate-limits.yml
- type: ErrorCatalog
  url: errors/iyzico-error-codes.yml
- type: DeclineCodes
  url: errors/iyzico-decline-codes.yml
- type: Webhooks
  url: asyncapi/iyzico-webhooks.yml
- type: Conventions
  url: conventions/iyzico-conventions.yml
- type: Components
  url: components/iyzico-components.yml
- type: X-MCPServerCandidate
  url: mcp/iyzico-mcp.yml
  note: 'Renamed from MCPServer 2026-09-03 (roadmap#247): the manifest self-describes as status: candidate
    — a tool list derived from the published API contracts, not an existing server. The scorer already
    read the manifest and reported mcp_server correctly; the MCPServer type was crediting the artifact-type
    surfaces with a server that does not exist.'