Cardlytics

Cardlytics is a commerce media platform that uses first-party purchase data from its financial-institution partners to help advertisers reach consumers inside banking apps with card-linked offers and measurable, closed-loop attribution. Advertisers plan, launch, and measure card-linked campaigns through Ads Manager and advertiser APIs, while banks and neobanks (publishers) embed Merchant Offers and the Cardlytics Rewards Platform into their digital channels via publisher APIs and SDKs. The company also operates the Dosh card-linked network and the Bridg offline purchase-intelligence business, giving advertisers person-level measurement across online and in-store spend. Cardlytics publishes three OpenAPI 3.0.1 definitions through its ReadMe developer hub — a Partner API for advertiser merchant and offer ingestion, reporting and a daily redemption feed; a Campaign Build API covering the Ads Manager campaign object model; and a Publisher API v2 for the bank-side rewards experience — alongside iOS, Android and web SDKs. Nothing is self-service: every credential is issued by an account manager under a partner agreement, and the API hosts answer 403 to anonymous callers. Cardlytics is a public company (NASDAQ: CDLX) and its platform is an enterprise, partnership-based product rather than a self-service developer API.

Cardlytics publishes 3 APIs on the APIs.io network: Partner API, Campaign Build API, and Publisher API v2. Tagged areas include Company, Advertising, Commerce Media, Card-Linked Offers, and Purchase Intelligence.

The Cardlytics catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Cardlytics’ developer surface includes authentication, changelog, sandbox, documentation, API reference, getting-started guide, engineering blog, and 27 more developer resources.

🌐 Visit website 📡 Source on GitHub

57.9/100 strong ▬ flat Agent 61/100 agent ready Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0

AccessEnterprise

3 APIs

CompanyAdvertisingCommerce MediaCard-Linked OffersPurchase IntelligenceFinancial ServicesLoyalty and RewardsMarketingBankingRetail MediaAttributionOffers

Kin Score

Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0

Composite quality — 57.9/100 · strong

Contract Quality 11.3 / 21

Developer Ergonomics 12.2 / 17

Commercial Clarity 8.5 / 17

Operational Transparency 7.0 / 11

Governance 2.1 / 10

Discoverability 7.9 / 9

Regulatory Posture 8.9 / 15

Agent readiness — 61/100 · agent ready

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 7 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 6 / 6

Agent Skills 5 / 5

Well-Known Catalog 4 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Regulatory Posture applies to this provider. Its tags matched the Banking & Open Finance regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/cardlytics: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 1

Documented rate limits and quota policies.

Scopes 1

OAuth scopes governing access to this provider's APIs.

Cardlytics Scopes

4 scopes · clientCredentials/authorizationCode/custom

4 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Cardlytics Agentic Access

86 operations · 36 acting · 2 human-in-the-loop

86 operations · 36 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

Sandbox

Sandbox

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgentSkill

LLMsTxt

WellKnown

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Conventions

ErrorCatalog

Lifecycle

Components

DataModel

Conformance

Webhooks

Scroll for all 7

Build 2

SDKs, sample code, and the tooling you integrate with

Packages

Packages

SDKs

SDKs

Access & Security 5

Authentication, authorization, and security posture

OAuthScopes

Authentication

DomainSecurity

TrustCenter

Compliance

Operate 4

Status, limits, changes, and where to get help

Deprecation

ChangeLog

RateLimits

Support

Commercial 3

Pricing, plans, and the legal terms of use

Plans

Plans

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 1

Properties that don't map to a standard resource type

APICatalog

APICatalog

Source (apis.yml)

aid: cardlytics
name: Cardlytics
description: 'Cardlytics is a commerce media platform that uses first-party purchase data from its financial-institution partners
  to help advertisers reach consumers inside banking apps with card-linked offers and measurable, closed-loop attribution.
  Advertisers plan, launch, and measure card-linked campaigns through Ads Manager and advertiser APIs, while banks and neobanks
  (publishers) embed Merchant Offers and the Cardlytics Rewards Platform into their digital channels via publisher APIs and
  SDKs. The company also operates the Dosh card-linked network and the Bridg offline purchase-intelligence business, giving
  advertisers person-level measurement across online and in-store spend. Cardlytics publishes three OpenAPI 3.0.1 definitions
  through its ReadMe developer hub — a Partner API for advertiser merchant and offer ingestion, reporting and a daily redemption
  feed; a Campaign Build API covering the Ads Manager campaign object model; and a Publisher API v2 for the bank-side rewards
  experience — alongside iOS, Android and web SDKs. Nothing is self-service: every credential is issued by an account manager
  under a partner agreement, and the API hosts answer 403 to anonymous callers. Cardlytics is a public company (NASDAQ: CDLX)
  and its platform is an enterprise, partnership-based product rather than a self-service developer API.'
accessModel:
  pricing: enterprise
  onboarding: contact-sales
  trial: false
  try_now: false
  public: false
  label: Enterprise, partner-gated
  confidence: high
  source:
  - https://platform.cardlytics.com/advertisers/docs/api-get-started
  - https://docs.cardlytics.com/ads/v2/integrations/sandbox-quickstart-guide.html
  generated: '2026-08-12'
  method: searched
image: https://cdn.prod.website-files.com/647efc90c29ecb765fcd4f1a/6481aadd2b75cd4512df022a_cardlytics_open_graph_01.png
url: https://raw.githubusercontent.com/api-evangelist/cardlytics/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- canaan-partners
x-tier: enriched
x-tier-reason: three published OpenAPI definitions harvested from the ReadMe developer hub
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-08-12'
tags:
- Company
- Advertising
- Commerce Media
- Card-Linked Offers
- Purchase Intelligence
- Financial Services
- Loyalty and Rewards
- Marketing
- Banking
- Retail Media
- Attribution
- Offers
apis:
- name: Cardlytics Partner API
  description: The advertiser-partner integration surface. Partners upsert and delete merchants and offers keyed on their
    own external identifiers, pull aggregate merchant/offer performance metrics (impressions, purchases, revenue, reach, activations),
    and fetch a pre-signed URL for the daily redemption feed. OAuth 2.0 client credentials; 7 operations across 5 paths.
  humanURL: https://platform.cardlytics.com/advertisers/reference
  baseURL: https://api.cardlytics.com
  tags:
  - Advertising
  - Offers
  - Merchants
  - Reporting
  properties:
  - type: OpenAPI
    url: openapi/cardlytics-partner-api-openapi.yml
  - type: OpenAPI
    url: openapi/_original/cardlytics-partner-api-openapi.json
  - type: Overlay
    url: overlays/cardlytics-partner-api-overlay.yaml
  - type: Documentation
    url: https://platform.cardlytics.com/advertisers/docs/api-get-started
  - type: APIReference
    url: https://platform.cardlytics.com/advertisers/reference
  - type: GettingStarted
    url: https://platform.cardlytics.com/advertisers/docs/api-get-started
  - type: Sandbox
    url: https://api-sandbox.cardlytics.com
  - type: ChangeLog
    url: https://platform.cardlytics.com/advertisers/changelog
- name: Cardlytics Campaign Build API
  description: The Ads Manager campaign object model — Campaigns, AdGroups, Ads, Audiences, AudienceReach, Rewards, PricingModels,
    RedeemingMerchants, Geo, PurchaseCategories, AuditLogs and per-entity validation rule sets. 74 operations across 57 paths,
    versioned per resource from v5 to v8, secured with an OAuth 2.0 authorization code flow against an Amazon Cognito user
    pool.
  humanURL: https://platform.cardlytics.com/advertisers
  baseURL: https://api.cardlytics.com
  tags:
  - Advertising
  - Campaigns
  - Audiences
  - Ads
  properties:
  - type: OpenAPI
    url: openapi/cardlytics-campaign-build-api-openapi.yml
  - type: OpenAPI
    url: openapi/_original/cardlytics-campaign-build-api-openapi.json
  - type: Overlay
    url: overlays/cardlytics-campaign-build-api-overlay.yaml
  - type: Documentation
    url: https://platform.cardlytics.com/advertisers
  - type: APIReference
    url: https://platform.cardlytics.com/advertisers/reference
  x-note: The published specification declares no servers[] block, so the host is not named in the contract. baseURL records
    the production Cardlytics API host named in the sibling Partner API specification and the advertiser docs; the Campaign
    Build spec's only host reference is a PRE-PRODUCTION Amazon Cognito authorization server (advertiser-auth-preprod), which
    Cardlytics should replace with the production authorization server and a real servers[] block.
- name: Cardlytics Publisher API v2
  description: The bank-side rewards platform API. A publisher opens an institution- or customer-scoped session, retrieves
    ranked targeted card-linked offers for a customer, and reads that customer's profile, reward summary and redemption history.
    Requires mutual TLS with a Cardlytics-signed client certificate plus an IP allow list, then an X-CDLX-Session-Token header.
  humanURL: https://platform.cardlytics.com/publisher-integrations
  baseURL: https://pub-api-us.prod.cardlytics.com
  tags:
  - Banking
  - Rewards
  - Offers
  - Financial Services
  properties:
  - type: OpenAPI
    url: openapi/cardlytics-publisher-api-openapi.yml
  - type: OpenAPI
    url: openapi/_original/cardlytics-publisher-api-openapi.json
  - type: Overlay
    url: overlays/cardlytics-publisher-api-overlay.yaml
  - type: Documentation
    url: https://platform.cardlytics.com/publisher-integrations
  - type: APIReference
    url: https://platform.cardlytics.com/publisher-integrations/reference
  - type: GettingStarted
    url: https://docs.cardlytics.com/ads/v2/getting-started/get-started.html
  - type: Sandbox
    url: https://pub-api-us.sandbox.cardlytics.com
  - type: Webhooks
    url: asyncapi/cardlytics-publisher-webhooks.yml
  x-note: The published specification's servers[] block names the UK PRE-PRODUCTION host https://publisher-uk-fiuat.cardlytics.com.
    baseURL records the US production host documented in the mTLS connectivity guide (https://pub-api-us.prod.cardlytics.com/healthcheck);
    the EU production host is https://pub-api-eu.prod.cardlytics.com.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: AgenticAccess
  url: agentic-access/cardlytics-agentic-access.yml
- type: OAuthScopes
  url: scopes/cardlytics-scopes.yml
- type: Authentication
  url: authentication/cardlytics-authentication.yml
- type: DomainSecurity
  url: security/cardlytics-domain-security.yml
- type: Conventions
  url: conventions/cardlytics-conventions.yml
- type: ErrorCatalog
  url: errors/cardlytics-problem-types.yml
- type: Lifecycle
  url: lifecycle/cardlytics-lifecycle.yml
- type: Deprecation
  url: https://docs.cardlytics.com/sdk/unified-sdk-releases.html
- type: ChangeLog
  url: changelog/cardlytics-changelog.yml
- type: RateLimits
  url: rate-limits/cardlytics-rate-limits.yml
- type: Plans
  url: plans/cardlytics-plans-pricing.yml
- type: Sandbox
  url: sandbox/cardlytics-sandbox.yml
- type: Packages
  url: packages/cardlytics-packages.yml
- type: SDKs
  url: packages/cardlytics-packages.yml
- type: Components
  url: components/cardlytics-components.yml
- type: DataModel
  url: data-model/cardlytics-data-model.yml
- type: Conformance
  url: conformance/cardlytics-conformance.yml
- type: Webhooks
  url: asyncapi/cardlytics-publisher-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: LLMsTxt
  url: llms/cardlytics-llms.txt
- type: WellKnown
  url: well-known/cardlytics-well-known.yml
- type: APICatalog
  url: https://platform.cardlytics.com/.well-known/api-catalog
- type: Website
  url: https://www.cardlytics.com/
- type: DeveloperPortal
  url: https://platform.cardlytics.com/
- type: Documentation
  url: https://platform.cardlytics.com/
- type: APIReference
  url: https://platform.cardlytics.com/advertisers/reference
- type: GettingStarted
  url: https://platform.cardlytics.com/advertisers/docs/api-get-started
- type: Login
  url: https://platform.cardlytics.com/
- type: Blog
  url: https://www.cardlytics.com/research-and-insights/browse-all-articles
- type: Support
  url: https://www.cardlytics.com/contact
- type: TermsOfService
  url: https://www.cardlytics.com/master-advertiser-terms-and-conditions
- type: PrivacyPolicy
  url: https://www.cardlytics.com/privacy-policy
- type: TrustCenter
  url: https://www.cardlytics.com/trust-center
- type: Compliance
  url: https://www.cardlytics.com/trust-center
x-enrichment:
  date: '2026-08-12'
  status: enriched
  artifacts_added: 30
  pass: local-v1
  note: Contract discovery beat the JS-rendered docs host — three real OpenAPI 3.0.1 definitions were live in the ReadMe api-registry
    behind platform.cardlytics.com, plus a full legacy documentation snapshot at docs.cardlytics.com. Prior rounds recorded
    no API surface.

Cardlytics

Kin Score

APIs 3

Cardlytics Partner API

Cardlytics Campaign Build API

Cardlytics Publisher API v2

Open Collections 3

Campaign Build API

partner-api

OpenAPI definition

Pricing Plans 1

Cardlytics Plans Pricing