Cashflows website screenshot

Cashflows

Cashflows is a United Kingdom payment gateway and card acquirer, headquartered in London and a principal member of Visa and Mastercard, that helps businesses accept, process, and manage card payments across online, in-app, and in-person channels. Its product family spans a REST Cashflows Gateway (payment jobs, captures, refunds, tokenisation, recurring payments, and webhooks), hosted and embedded checkout, a cardholder-not-present Payments API with 3-D Secure, a Remote Authentication API for connecting to the acquiring network, and an In-Person Payments API served locally from Kinetic PCI-PTS terminals. Cashflows ships a genuine self-serve developer portal at developer.cashflows.com with reference documentation, a dedicated integration/sandbox environment, and webhook-based payment notifications, but it does not publish a downloadable OpenAPI/Swagger definition or a public Postman collection; its API reference is hand-authored HTML. Authentication is header-based (ConfigurationId plus a SHA-512 request hash for the Gateway, and auth_id/auth_pass for Remote Authentication) rather than OAuth.

Cashflows publishes 4 APIs on the APIs.io network. Tagged areas include Payments, United Kingdom, Payment Gateway, Payment Processing, and Acquiring.

The Cashflows catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Cashflows’ developer surface includes documentation, API reference, getting-started guide, pricing, engineering blog, support, authentication, and 22 more developer resources.

43.7/100 thin ▬ flat Agent 39/100 agent aware Full breakdown ↓
scored 2026-07-27 · rubric v0.5
4 APIs 1 MCP Servers
PaymentsUnited KingdomPayment GatewayPayment ProcessingAcquiringCard PaymentsIn-Person Payments3-D SecureRecurring PaymentsWebhooks

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 43.7/100 · thin
Contract Quality 5.7 / 25
Developer Ergonomics 14.8 / 20
Commercial Clarity 8.9 / 20
Operational Transparency 3.8 / 13
Governance 0.0 / 12
Discoverability 8.8 / 10
Agent readiness — 39/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/cashflows: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

Cashflows Gateway API

REST API for creating and managing payment jobs and payments — create, retrieve, and cancel payment jobs; capture, refund, and cancel individual payments; card tokenisation; and...

Cashflows Payments API

REST/JSON API for cardholder-not-present card payments with 3-D Secure support — authorisation, capture, void, refund, credit, IIN lookup, and 3-D Secure version 2 authenticatio...

Cashflows Remote Authentication API

API for connecting directly to the Cashflows acquiring network to authorise card transactions, authenticated with auth_id (Profile/Merchant ID) and auth_pass credential headers.

Cashflows In-Person Payments API

Standalone REST API for PCI-PTS secure Kinetic payment devices, served locally from the terminal (default http://127.0.0.1:8080) under /api/v2 — device info, ping/status, settin...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

cashflows-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Cashflows Authentication

apiKey/http-hash-signature/credential-pair · 3 schemes

SECURITY

Cashflows Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Scroll for all 7

Build 4

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 2

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: cashflows
url: https://raw.githubusercontent.com/api-evangelist/cashflows/refs/heads/main/apis.yml
name: Cashflows
kind: company
description: Cashflows is a United Kingdom payment gateway and card acquirer, headquartered in London and a principal member
  of Visa and Mastercard, that helps businesses accept, process, and manage card payments across online, in-app, and in-person
  channels. Its product family spans a REST Cashflows Gateway (payment jobs, captures, refunds, tokenisation, recurring payments,
  and webhooks), hosted and embedded checkout, a cardholder-not-present Payments API with 3-D Secure, a Remote Authentication
  API for connecting to the acquiring network, and an In-Person Payments API served locally from Kinetic PCI-PTS terminals.
  Cashflows ships a genuine self-serve developer portal at developer.cashflows.com with reference documentation, a dedicated
  integration/sandbox environment, and webhook-based payment notifications, but it does not publish a downloadable OpenAPI/Swagger
  definition or a public Postman collection; its API reference is hand-authored HTML. Authentication is header-based (ConfigurationId
  plus a SHA-512 request hash for the Gateway, and auth_id/auth_pass for Remote Authentication) rather than OAuth.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Payments
- United Kingdom
- Payment Gateway
- Payment Processing
- Acquiring
- Card Payments
- In-Person Payments
- 3-D Secure
- Recurring Payments
- Webhooks
created: '2026-07-24'
modified: '2026-07-24T12:00:00Z'
specificationVersion: '0.19'
apis:
- aid: cashflows:cashflows-gateway-api
  name: Cashflows Gateway API
  description: REST API for creating and managing payment jobs and payments — create, retrieve, and cancel payment jobs; capture,
    refund, and cancel individual payments; card tokenisation; and recurring payments. Payment status changes are delivered
    asynchronously via webhook notifications (retried for up to a month) sent from Cashflows notification IPs.
  humanURL: https://developer.cashflows.com/api_reference/cashflows_gateway.html
  baseURL: https://gateway.cashflows.com/api/gateway
  tags:
  - Payments
  - Gateway
  - Webhooks
  - Recurring Payments
  properties:
  - type: Documentation
    url: https://developer.cashflows.com/gateway/cashflows_gateway.html
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/cashflows_gateway.html
- aid: cashflows:cashflows-payments-api
  name: Cashflows Payments API
  description: REST/JSON API for cardholder-not-present card payments with 3-D Secure support — authorisation, capture, void,
    refund, credit, IIN lookup, and 3-D Secure version 2 authentication and verification flows.
  humanURL: https://developer.cashflows.com/api_reference/payments.html
  tags:
  - Payments
  - 3-D Secure
  - Card Payments
  properties:
  - type: Documentation
    url: https://developer.cashflows.com/onlinepayments
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/payments.html
- aid: cashflows:cashflows-remote-authentication-api
  name: Cashflows Remote Authentication API
  description: API for connecting directly to the Cashflows acquiring network to authorise card transactions, authenticated
    with auth_id (Profile/Merchant ID) and auth_pass credential headers.
  humanURL: https://developer.cashflows.com/api_reference/remote_auth_api.html
  baseURL: https://secure.cashflows.com/gateway/remote_auth
  tags:
  - Payments
  - Acquiring
  - Authorization
  properties:
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/remote_auth_api.html
- aid: cashflows:cashflows-in-person-payments-api
  name: Cashflows In-Person Payments API
  description: Standalone REST API for PCI-PTS secure Kinetic payment devices, served locally from the terminal (default http://127.0.0.1:8080)
    under /api/v2 — device info, ping/status, settings, transactions, screens, receipts, and printing.
  humanURL: https://developer.cashflows.com/api_reference/ipp.html
  baseURL: http://127.0.0.1:8080/api/v2
  tags:
  - Payments
  - In-Person Payments
  - Terminal
  properties:
  - type: APIReference
    url: https://developer.cashflows.com/api_reference/ipp.html
common:
- type: DomainSecurity
  url: security/cashflows-domain-security.yml
- type: Website
  url: https://www.cashflows.com/
- type: DeveloperPortal
  url: https://developer.cashflows.com/
- type: Documentation
  url: https://developer.cashflows.com/
- type: APIReference
  url: https://developer.cashflows.com/api_reference/api_reference_overview.html
- type: GettingStarted
  url: https://developer.cashflows.com/getting_started/getting_started.html
- type: StatusPage
  url: https://status.cashflows.com/
- type: Pricing
  url: https://www.cashflows.com/pricing
- type: Blog
  url: https://www.cashflows.com/blog
- type: Support
  url: https://www.cashflows.com/contact/support
- type: TermsOfService
  url: https://www.cashflows.com/legal/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.cashflows.com/legal/privacy-policy
- type: Login
  url: https://portal.cashflows.com/
- type: GitHubOrganization
  url: https://github.com/cashflows
- type: Authentication
  url: authentication/cashflows-authentication.yml
- type: Conventions
  url: conventions/cashflows-conventions.yml
- type: ErrorCatalog
  url: errors/cashflows-problem-types.yml
- type: DeclineCodes
  url: errors/cashflows-decline-codes.yml
- type: Webhooks
  url: asyncapi/cashflows-gateway-webhooks.yml
- type: Packages
  url: packages/cashflows-packages.yml
- type: SDKs
  url: packages/cashflows-packages.yml
- type: Lifecycle
  url: lifecycle/cashflows-lifecycle.yml
- type: Sandbox
  url: sandbox/cashflows-sandbox.yml
- type: Components
  url: components/cashflows-components.yml
- type: Conformance
  url: conformance/cashflows-conformance.yml
- type: DataModel
  url: data-model/cashflows-data-model.yml
- type: WellKnown
  url: well-known/cashflows-well-known.yml
- type: MCPServer
  url: mcp/cashflows-mcp.yml
- type: LLMsTxt
  url: llms/cashflows-llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com