Cashflows website screenshot

Cashflows

Cashflows is a United Kingdom payment gateway and card acquirer, headquartered in London and a principal member of Visa and Mastercard, that helps businesses accept, process, and manage card payments across online, in-app, and in-person channels. Its product family spans a REST Cashflows Gateway (payment jobs, captures, refunds, tokenisation, recurring payments, and webhooks), hosted and embedded checkout, a cardholder-not-present Payments API with 3-D Secure, a Remote Authentication API for connecting to the acquiring network, and an In-Person Payments API served locally from Kinetic PCI-PTS terminals. Cashflows ships a genuine self-serve developer portal at developer.cashflows.com with reference documentation, a dedicated integration/sandbox environment, and webhook-based payment notifications, but it does not publish a downloadable OpenAPI/Swagger definition or a public Postman collection; its API reference is hand-authored HTML. Authentication is header-based (ConfigurationId plus a SHA-512 request hash for the Gateway, and auth_id/auth_pass for Remote Authentication) rather than OAuth.

Cashflows publishes 4 APIs on the APIs.io network. Tagged areas include Payments, United Kingdom, Payment Gateway, Payment Processing, and Acquiring.

The Cashflows catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Cashflows’ developer surface includes documentation, API reference, getting-started guide, pricing, engineering blog, support, authentication, and 22 more developer resources.

🌐 Visit website 📡 Source on GitHub
50.3/100 developing ▬ flat Agent 33/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
4 APIs 1 MCP Servers
PaymentsUnited KingdomPayment GatewayPayment ProcessingAcquiringCard PaymentsIn-Person Payments3D SecureRecurring PaymentsWebhook

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 50.3/100 · developing
Contract Quality 9.6 / 21
Developer Ergonomics 12.1 / 17
Access Clarity 6.5 / 17
Operational Transparency 2.9 / 11
Contract Governance 1.9 / 10
Discoverability 6.1 / 9
Regulatory Posture 9.1 / 15
Agent readiness — 33/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Payments regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/cashflows: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

Cashflows Gateway API

REST API for creating and managing payment jobs and payments — create, retrieve, and cancel payment jobs; capture, refund, and cancel individual payments; card tokenisation; and...

Cashflows Payments API

REST/JSON API for cardholder-not-present card payments with 3-D Secure support — authorisation, capture, void, refund, credit, IIN lookup, and 3-D Secure version 2 authenticatio...

Cashflows Remote Authentication API

API for connecting directly to the Cashflows acquiring network to authorise card transactions, authenticated with auth_id (Profile/Merchant ID) and auth_pass credential headers.

Cashflows In-Person Payments API

Standalone REST API for PCI-PTS secure Kinetic payment devices, served locally from the terminal (default http://127.0.0.1:8080) under /api/v2 — device info, ping/status, settin...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Cashflows MCP Server

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Cashflows Gateway Webhooks

ASYNCAPI

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Cashflows Authentication

apiKey/http-hash-signature/credential-pair · 3 schemes

SECURITY

Cashflows Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Resources

Get Started 4

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 Login
Login
 Sandbox
Sandbox

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 MCPServer
MCPServer
 LLMsTxt
LLMsTxt

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 Webhooks
Webhooks
 Lifecycle
Lifecycle
 Components
Components
 Conformance
Conformance
 DataModel
DataModel

Scroll for all 7

Build 4

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 DeclineCodes
DeclineCodes
 Packages
Packages
 SDKs
SDKs

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 2

Status, limits, changes, and where to get help

StatusPage
StatusPage
 Support
Support

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: cashflows
url: https://raw.githubusercontent.com/api-evangelist/cashflows/refs/heads/main/apis.yml
name: Cashflows
kind: company
description: Cashflows is a United Kingdom payment gateway and card acquirer, headquartered in London and a principal member
  of Visa and Mastercard, that helps businesses accept, process, and manage card payments across online, in-app, and in-person
  channels. Its product family spans a REST Cashflows Gateway (payment jobs, captures, refunds, tokenisation, recurring payments,
  and webhooks), hosted and embedded checkout, a cardholder-not-present Payments API with 3-D Secure, a Remote Authentication
  API for connecting to the acquiring network, and an In-Person Payments API served locally from Kinetic PCI-PTS terminals.
  Cashflows ships a genuine self-serve developer portal at developer.cashflows.com with reference documentation, a dedicated
  integration/sandbox environment, and webhook-based payment notifications, but it does not publish a downloadable OpenAPI/Swagger
  definition or a public Postman collection; its API reference is hand-authored HTML. Authentication is header-based (ConfigurationId
  plus a SHA-512 request hash for the Gateway, and auth_id/auth_pass for Remote Authentication) rather than OAuth.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Payments
- United Kingdom
- Payment Gateway
- Payment Processing
- Acquiring
- Card Payments
- In-Person Payments
- 3D Secure
- Recurring Payments
- Webhook
tags_raw:
- Payments
- United Kingdom
- Payment Gateway
- Payment Processing
- Acquiring
- Card Payments
- In-Person Payments
- 3-D Secure
- Recurring Payments
- Webhooks
created: '2026-07-24'
modified: '2026-07-24T12:00:00Z'
specificationVersion: '0.23'
apis:
- aid: cashflows:cashflows-gateway-api
  name: Cashflows Gateway API
  description: REST API for creating and managing payment jobs and payments — create, retrieve, and cancel payment jobs; capture,
    refund, and cancel individual payments; card tokenisation; and recurring payments. Payment status changes are delivered
    asynchronously via webhook notifications (retried for up to a month) sent from Cashflows notification IPs.
  humanURL: https://developer.cashflows.com/api_reference/cashflows_gateway.html
  baseURL: https://gateway.cashflows.com/api/gateway
  tags:
  - Payments
  - Gateway
  - Webhook
  - Recurring Payments
  tags_raw:
  - Payments
  - Gateway
  - Webhooks
  - Recurring Payments
  properties:
  - type: Documentation
    url: https://developer.cashflows.com/gateway/cashflows_gateway.html
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/cashflows_gateway.html
- aid: cashflows:cashflows-payments-api
  name: Cashflows Payments API
  description: REST/JSON API for cardholder-not-present card payments with 3-D Secure support — authorisation, capture, void,
    refund, credit, IIN lookup, and 3-D Secure version 2 authentication and verification flows.
  humanURL: https://developer.cashflows.com/api_reference/payments.html
  tags:
  - Payments
  - 3D Secure
  - Card Payments
  tags_raw:
  - Payments
  - 3-D Secure
  - Card Payments
  properties:
  - type: Documentation
    url: https://developer.cashflows.com/onlinepayments
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/payments.html
- aid: cashflows:cashflows-remote-authentication-api
  name: Cashflows Remote Authentication API
  description: API for connecting directly to the Cashflows acquiring network to authorise card transactions, authenticated
    with auth_id (Profile/Merchant ID) and auth_pass credential headers.
  humanURL: https://developer.cashflows.com/api_reference/remote_auth_api.html
  baseURL: https://secure.cashflows.com/gateway/remote_auth
  tags:
  - Payments
  - Acquiring
  - Authorization
  properties:
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/remote_auth_api.html
- aid: cashflows:cashflows-in-person-payments-api
  name: Cashflows In-Person Payments API
  description: Standalone REST API for PCI-PTS secure Kinetic payment devices, served locally from the terminal (default http://127.0.0.1:8080)
    under /api/v2 — device info, ping/status, settings, transactions, screens, receipts, and printing.
  humanURL: https://developer.cashflows.com/api_reference/ipp.html
  baseURL: http://127.0.0.1:8080/api/v2
  tags:
  - Payments
  - In-Person Payments
  - Terminal
  properties:
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/ipp.html
common:
- type: DomainSecurity
  url: security/cashflows-domain-security.yml
- type: Website
  url: https://www.cashflows.com/
- type: DeveloperPortal
  url: https://developer.cashflows.com/
- type: Documentation
  url: https://developer.cashflows.com/
- type: APIReference
  url: https://developer.cashflows.com/api_reference/api_reference_overview.html
- type: GettingStarted
  url: https://developer.cashflows.com/getting_started/getting_started.html
- type: StatusPage
  url: https://status.cashflows.com/
- type: Pricing
  url: https://www.cashflows.com/pricing
- type: Blog
  url: https://www.cashflows.com/blog
- type: Support
  url: https://www.cashflows.com/contact/support
- type: TermsOfService
  url: https://www.cashflows.com/legal/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.cashflows.com/legal/privacy-policy
- type: Login
  url: https://portal.cashflows.com/
- type: GitHubOrganization
  url: https://github.com/cashflows
- type: Authentication
  url: authentication/cashflows-authentication.yml
- type: Conventions
  url: conventions/cashflows-conventions.yml
- type: ErrorCatalog
  url: errors/cashflows-problem-types.yml
- type: DeclineCodes
  url: errors/cashflows-decline-codes.yml
- type: Webhooks
  url: asyncapi/cashflows-gateway-webhooks.yml
- type: Packages
  url: packages/cashflows-packages.yml
- type: SDKs
  url: packages/cashflows-packages.yml
- type: Lifecycle
  url: lifecycle/cashflows-lifecycle.yml
- type: Sandbox
  url: sandbox/cashflows-sandbox.yml
- type: Components
  url: components/cashflows-components.yml
- type: Conformance
  url: conformance/cashflows-conformance.yml
- type: DataModel
  url: data-model/cashflows-data-model.yml
- type: WellKnown
  url: well-known/cashflows-well-known.yml
- type: MCPServer
  url: mcp/cashflows-mcp.yml
- type: LLMsTxt
  url: llms/cashflows-llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com