Iyzico website screenshot

Iyzico

iyzico is a Turkish payment service provider (part of PayU / Prosus) that gives online businesses a single API and hosted payment surface to accept cards and alternative payment methods across Turkey and cross-border. Its developer platform (docs.iyzico.com, api.iyzipay.com) covers NON-3DS and 3D Secure card payments, the hosted CheckoutForm and Pay with iyzico flows, iyzico Link, subscriptions/recurring billing, a marketplace/submerchant model with payouts, card storage/tokenization, installment and BIN services, reporting, and server-to-server webhooks. Authentication uses an HMACSHA256-signed IYZWSv2 scheme with an apiKey/secretKey pair, and a full sandbox (sandbox-api.iyzipay.com) with published test cards mirrors production. First party SDKs are published for PHP, Python, Node.js, Java, Ruby and .NET plus e-commerce plugins (WooCommerce, Magento 2, PrestaShop, OpenCart).

Iyzico publishes 1 API on the APIs.io network. Tagged areas include Company, Payments, Fintech, Payment Gateway, and Card Payments.

The Iyzico catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Iyzico’s developer surface includes documentation, API reference, getting-started guide, engineering blog, support, signup flow, authentication, and 24 more developer resources.

51.2/100 developing ▬ flat Agent 36/100 agent ready Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
1 APIs 1 MCP Servers
CompanyPaymentsFintechPayment GatewayCard PaymentsCheckoutSubscriptionMarketplaceTurkey3D Secure

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 51.2/100 · developing
Contract Quality 9.6 / 21
Developer Ergonomics 11.9 / 17
Access Clarity 5.8 / 17
Operational Transparency 7.3 / 11
Contract Governance 0.5 / 10
Discoverability 6.5 / 9
Regulatory Posture 7.3 / 15
Agent readiness — 36/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Payments regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/iyzico: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

iyzico Payment API

REST API for accepting card payments (NON-3DS and 3D Secure), hosted CheckoutForm and Pay with iyzico flows, iyzico Link, subscriptions, marketplace submerchant payments and pay...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Iyzico MCP Server

MCP SERVER

Rate Limits 1

Documented rate limits and quota policies.

Iyzico Rate Limits

6 limits

RATE LIMITS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Iyzico Webhooks

ASYNCAPI

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Iyzico Authentication

custom-hmac · 1 scheme

SECURITY

Iyzico Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Resources

Get Started 5

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Build 5

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Operate 5

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: iyzico
name: Iyzico
description: iyzico is a Turkish payment service provider (part of PayU / Prosus) that gives online businesses a single API
  and hosted payment surface to accept cards and alternative payment methods across Turkey and cross-border. Its developer
  platform (docs.iyzico.com, api.iyzipay.com) covers NON-3DS and 3D Secure card payments, the hosted CheckoutForm and Pay
  with iyzico flows, iyzico Link, subscriptions/recurring billing, a marketplace/submerchant model with payouts, card storage/tokenization,
  installment and BIN services, reporting, and server-to-server webhooks. Authentication uses an HMACSHA256-signed IYZWSv2
  scheme with an apiKey/secretKey pair, and a full sandbox (sandbox-api.iyzipay.com) with published test cards mirrors production.
  First party SDKs are published for PHP, Python, Node.js, Java, Ruby and .NET plus e-commerce plugins (WooCommerce, Magento
  2, PrestaShop, OpenCart).
url: https://raw.githubusercontent.com/api-evangelist/iyzico/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://www.iyzico.com/en/
x-type: company
x-source: vc-portfolio
x-backed-by:
- speedinvest
x-tier: profiled
x-tier-reason: enrichment-pipeline
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Payments
- Fintech
- Payment Gateway
- Card Payments
- Checkout
- Subscription
- Marketplace
- Turkey
- 3D Secure
tags_raw:
- Company
- Payments
- FinTech
- Payment Gateway
- Card Payments
- Checkout
- Subscriptions
- Marketplace
- Turkey
- 3D Secure
apis:
- name: iyzico Payment API
  description: REST API for accepting card payments (NON-3DS and 3D Secure), hosted CheckoutForm and Pay with iyzico flows,
    iyzico Link, subscriptions, marketplace submerchant payments and payouts, card storage/tokenization, installment and BIN
    lookup, refunds/cancels, reporting and webhooks. Authentication is an HMACSHA256-signed IYZWSv2 header using an apiKey
    + secretKey pair.
  humanURL: https://docs.iyzico.com/en/
  baseURL: https://api.iyzipay.com
  tags:
  - Payments
  - Card Payments
  - 3D Secure
  - Subscription
  - Marketplace
  tags_raw:
  - Payments
  - Card Payments
  - 3D Secure
  - Subscriptions
  - Marketplace
  properties:
  - type: Documentation
    url: https://docs.iyzico.com/en/
  - type: APIReference
    url: https://docs.iyzico.com/en/getting-started/preliminaries/api-reference-beta
  - type: GettingStarted
    url: https://docs.iyzico.com/en/getting-started/welcome
  - type: Authentication
    url: authentication/iyzico-authentication.yml
  - type: Sandbox
    url: sandbox/iyzico-sandbox.yml
  - type: RateLimits
    url: rate-limits/iyzico-rate-limits.yml
  - type: ErrorCatalog
    url: errors/iyzico-error-codes.yml
  - type: DeclineCodes
    url: errors/iyzico-decline-codes.yml
  - type: Webhooks
    url: asyncapi/iyzico-webhooks.yml
  - type: Conventions
    url: conventions/iyzico-conventions.yml
  - type: Components
    url: components/iyzico-components.yml
  - type: MCPServer
    url: mcp/iyzico-mcp.yml
common:
- type: DeveloperPortal
  url: https://docs.iyzico.com/
- type: Documentation
  url: https://docs.iyzico.com/en/
- type: APIReference
  url: https://docs.iyzico.com/en/getting-started/preliminaries/api-reference-beta
- type: GettingStarted
  url: https://docs.iyzico.com/en/getting-started/welcome
- type: Website
  url: https://www.iyzico.com/en/
- type: Blog
  url: https://www.iyzico.com/en/blog
- type: Support
  url: https://www.iyzico.com/en/support/help-center
- type: HelpCenter
  url: https://www.iyzico.com/en/support/contact-us
- type: GitHubOrganization
  url: https://github.com/iyzico
- type: SignUp
  url: https://merchant.iyzipay.com/auth/register
- type: Login
  url: https://merchant.iyzipay.com/auth/login
- type: TermsOfService
  url: https://www.iyzico.com/en/general-conditions
- type: PrivacyPolicy
  url: https://www.iyzico.com/en/privacy-policy
- type: Postman
  url: https://www.postman.com/iyzico/iyzico/overview
- type: StatusPage
  url: https://iyzico.statuspage.io
- type: LLMsTxt
  url: llms/iyzico-llms.txt
- type: Packages
  url: packages/iyzico-packages.yml
- type: SDKs
  url: packages/iyzico-packages.yml
- type: Authentication
  url: authentication/iyzico-authentication.yml
- type: Sandbox
  url: sandbox/iyzico-sandbox.yml
- type: RateLimits
  url: rate-limits/iyzico-rate-limits.yml
- type: ErrorCatalog
  url: errors/iyzico-error-codes.yml
- type: DeclineCodes
  url: errors/iyzico-decline-codes.yml
- type: Webhooks
  url: asyncapi/iyzico-webhooks.yml
- type: Conventions
  url: conventions/iyzico-conventions.yml
- type: Components
  url: components/iyzico-components.yml
- type: Conformance
  url: conformance/iyzico-conformance.yml
- type: Lifecycle
  url: lifecycle/iyzico-lifecycle.yml
- type: Deprecation
  url: lifecycle/iyzico-lifecycle.yml
- type: MCPServer
  url: mcp/iyzico-mcp.yml
- type: DomainSecurity
  url: security/iyzico-domain-security.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence