Bykea

Bykea is a Karachi-based Pakistani mobility and logistics super-app that offers app-hailed motorbike rides, on-demand parcel and food delivery, cash pickup and drop-off, and digital payments across major Pakistani cities. It connects a large network of motorbike captains with riders and merchants, positioning itself as a low-cost transport, last-mile logistics, and financial services platform for the mass market. Backed by Prosus Ventures (Naspers), Bykea was added to the API Evangelist network as a mobility-sector portfolio lead; this profile has been enriched with the provider's public security surface (a live RFC 9116 security.txt and a HackerOne bug bounty program) and domain-security posture. No public developer portal, OpenAPI, or partner API documentation is exposed - the primary web surface sits behind Cloudflare bot protection.

Bykea is profiled on the APIs.io network. Tagged areas include Company, Mobility, Logistics, Delivery, and Ride Hailing.

🌐 Visit website 📡 Source on GitHub
5.4/100 minimal ▬ flat Agent 3/100 human only Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
0 APIs
CompanyMobilityLogisticsDeliveryRide HailingPaymentsPakistan

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 5.4/100 · minimal
Contract Quality 0.0 / 21
Developer Ergonomics 0.0 / 17
Access Clarity 0.0 / 17
Operational Transparency 1.2 / 11
Contract Governance 0.0 / 10
Discoverability 5.2 / 9
Regulatory Posture 2.8 / 15
Agent readiness — 3/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Payments regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bykea: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bykea Domain Security

TLSv1.3 · DMARC

SECURITY

Bykea Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Resources

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown

Access & Security 4

Authentication, authorization, and security posture

SecurityTxt
SecurityTxt
 VulnerabilityDisclosure
VulnerabilityDisclosure
 Security
Security
 DomainSecurity
DomainSecurity

Company 1

The organization behind the API

Website
Website

Source (apis.yml)

apis.yml Raw ↑ 
aid: bykea
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/bykea.png
name: Bykea
description: Bykea is a Karachi-based Pakistani mobility and logistics super-app that offers app-hailed motorbike rides, on-demand
  parcel and food delivery, cash pickup and drop-off, and digital payments across major Pakistani cities. It connects a large
  network of motorbike captains with riders and merchants, positioning itself as a low-cost transport, last-mile logistics,
  and financial services platform for the mass market. Backed by Prosus Ventures (Naspers), Bykea was added to the API Evangelist
  network as a mobility-sector portfolio lead; this profile has been enriched with the provider's public security surface
  (a live RFC 9116 security.txt and a HackerOne bug bounty program) and domain-security posture. No public developer portal,
  OpenAPI, or partner API documentation is exposed - the primary web surface sits behind Cloudflare bot protection.
url: https://raw.githubusercontent.com/api-evangelist/bykea/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- prosus-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Mobility
- Logistics
- Delivery
- Ride Hailing
- Payments
- Pakistan
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: SecurityTxt
  url: well-known/bykea-security.txt
- type: WellKnown
  url: well-known/bykea-well-known.yml
- type: VulnerabilityDisclosure
  url: security/bykea-vulnerability-disclosure.yml
- type: Security
  url: https://bykea.com/security
- type: DomainSecurity
  url: security/bykea-domain-security.yml
- type: Website
  url: https://bykea.com
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence