GCash website screenshot

GCash

GCash (operated by Mynt / G-Xchange, Inc.) is the Philippines' largest mobile wallet and e-money platform, offering payments, transfers, QR checkout, bills payment, savings, lending and insurance to tens of millions of users. For developers and businesses it exposes a partner-gated API surface: the GCash API Portal (discover and subscribe to API products such as In-Store QR, Webpay, GLife and Funds Disbursement) and the GCash Mini Program Open API, which lets merchants build in-app mini programs with cashier payments, refunds and user authorization. API requests are secured with per-request RSA256/ECC224 signatures plus an OAuth2 authorization-code user flow, with idempotent payment operations and asynchronous webhook notifications. This profile was seeded as a portfolio lead and enriched from GCash's public developer documentation.

GCash publishes 1 API on the APIs.io network. Tagged areas include Company, Payments, Mobile Wallet, E-Money, and Fintech.

The GCash catalog on APIs.io includes 1 event-driven AsyncAPI specification.

GCash’s developer surface includes documentation, API reference, getting-started guide, support, authentication, sandbox, and 16 more developer resources.

39.3/100 developing ▬ flat Agent 39/100 agent ready Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
AccessSelf serve
1 APIs 1 MCP Servers
CompanyPaymentsMobile WalletE-MoneyFintechDigital PaymentsPhilippinesQR Payments

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 39.3/100 · developing
Contract Quality 9.6 / 21
Developer Ergonomics 8.9 / 17
Access Clarity 3.6 / 17
Operational Transparency 2.0 / 11
Contract Governance 0.5 / 10
Discoverability 6.8 / 9
Regulatory Posture 7.3 / 15
Agent readiness — 39/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Payments regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/gcash: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

GCash Mini Program Open API

Merchant-facing payment API for GCash mini programs — cashier payment, payment inquiry, refund and refund inquiry, plus OAuth2 user authorization (authCode -> applyToken). Signe...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

GCash MCP Server

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Gcash Authentication

signature/oauth2 · 3 schemes

SECURITY

Gcash Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Gcash Vulnerability Disclosure

security.txt · contact published

SECURITY

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Access & Security 5

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: gcash
name: GCash
description: 'GCash (operated by Mynt / G-Xchange, Inc.) is the Philippines'' largest mobile wallet and e-money platform,
  offering payments, transfers, QR checkout, bills payment, savings, lending and insurance to tens of millions of users. For
  developers and businesses it exposes a partner-gated API surface: the GCash API Portal (discover and subscribe to API products
  such as In-Store QR, Webpay, GLife and Funds Disbursement) and the GCash Mini Program Open API, which lets merchants build
  in-app mini programs with cashier payments, refunds and user authorization. API requests are secured with per-request RSA256/ECC224
  signatures plus an OAuth2 authorization-code user flow, with idempotent payment operations and asynchronous webhook notifications.
  This profile was seeded as a portfolio lead and enriched from GCash''s public developer documentation.'
url: https://raw.githubusercontent.com/api-evangelist/gcash/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- insight-partners
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://logo.clearbit.com/gcash.com
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Payments
- Mobile Wallet
- E-Money
- Fintech
- Digital Payments
- Philippines
- QR Payments
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- name: GCash Mini Program Open API
  description: Merchant-facing payment API for GCash mini programs — cashier payment, payment inquiry, refund and refund inquiry,
    plus OAuth2 user authorization (authCode -> applyToken). Signed requests (Client-Id + Request-Time + Signature), idempotent
    on paymentRequestId/refundRequestId, with async notification callbacks.
  humanURL: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/openapi_overview
  baseURL: https://apiportal.gcash.com
  x-baseURL-note: Production access is provisioned through the GCash API Portal (apiportal.gcash.com); the mini-program Open
    API gateway host is issued to approved partners and not published publicly.
  tags:
  - Payments
  - Mini Program
  - Refunds
  properties:
  - type: Documentation
    url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/openapi_overview
  - type: APIReference
    url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/api_api-reference
  - type: GettingStarted
    url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/developer-guide
common:
- type: Website
  url: https://new.gcash.com/
- type: DeveloperPortal
  url: https://apiportal.gcash.com
- type: Documentation
  url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/openapi_overview
- type: APIReference
  url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/api_api-reference
- type: GettingStarted
  url: https://miniprogram.gcash.com/docs/miniprogram_gcash/mpdev/developer-guide
- type: Support
  url: https://gcash.com/business/api-portal-faqs
- type: TermsOfService
  url: https://gcash.com/terms-and-conditions
- type: PrivacyPolicy
  url: https://gcash.com/privacy-notice
- type: Authentication
  url: authentication/gcash-authentication.yml
- type: Conventions
  url: conventions/gcash-conventions.yml
- type: Idempotency
  url: conventions/gcash-conventions.yml
- type: ErrorCatalog
  url: errors/gcash-problem-types.yml
- type: Webhooks
  url: asyncapi/gcash-payments-webhooks.yml
- type: Sandbox
  url: sandbox/gcash-sandbox.yml
- type: MCPServer
  url: mcp/gcash-mcp.yml
- type: Lifecycle
  url: lifecycle/gcash-lifecycle.yml
- type: Conformance
  url: conformance/gcash-conformance.yml
- type: WellKnown
  url: well-known/gcash-well-known.yml
- type: SecurityTxt
  url: well-known/gcash-security.txt
- type: Security
  url: https://gcash.com/vulnerability-disclosure-program/policy
- type: VulnerabilityDisclosure
  url: security/gcash-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/gcash-domain-security.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence