Mesa

Mesa is a Boulder, Colorado fintech that provides embedded electronic-invoicing, payments, and invoice-financing (early-payment) infrastructure for B2B supplier networks. Suppliers get paid early via ACH while Mesa automates repayment once the buyer settles. Mesa ships as drop-in embedded UI — a JavaScript SDK (MesaClient) that renders Mesa's onboarding, dashboard, and instant-payout flows in an origin-pinned iframe inside a partner's web app — backed by a Partner REST API for user authentication and invoice retrieval. Auth is via API keys (clientId/clientSecret) exchanged for a short-lived JWT, with optional OIDC (Okta, Azure AD, Google). Backed by Matrix Partners; SOC 2.

Mesa publishes 2 APIs on the APIs.io network: Authentication API and Invoices API. Tagged areas include Company, Fintech, Payments, Invoice Financing, and Embedded Finance.

Mesa’s developer surface includes documentation, API reference, getting-started guide, authentication, signup flow, support, and 17 more developer resources.

🌐 Visit website 📡 Source on GitHub

27.9/100 thin ▬ flat Agent 25/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0

AccessSelf serve

2 APIs 1 MCP Servers

CompanyFintechPaymentsInvoice FinancingEmbedded FinanceEarly PaymentACHSupplier PaymentsB2B

Kin Score

Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0

Composite quality — 27.9/100 · thin

Contract Quality 12.3 / 21

Developer Ergonomics 3.1 / 17

Access Clarity 0.0 / 17

Operational Transparency 0.0 / 11

Contract Governance 3.1 / 10

Discoverability 6.0 / 9

Regulatory Posture 4.0 / 15

Agent readiness — 25/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 0 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Regulatory Posture applies to this provider. Its tags matched the Payments regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/mesa: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal

DeveloperPortal

GettingStarted

GettingStarted

SignUp

SignUp

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt

LLMsTxt

MCPServer

MCPServer

AgentSkill

AgentSkill

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Conventions

Components

DataModel

Conformance

Lifecycle

Access & Security 5

Authentication, authorization, and security posture

Authentication

TrustCenter

Compliance

TrustCenter

DomainSecurity

Operate 1

Status, limits, changes, and where to get help

Support

Support

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 1

The organization behind the API

Website

Website

Other 1

Properties that don't map to a standard resource type

Overlay

Overlay

Source (apis.yml)

aid: mesa
name: Mesa
description: Mesa is a Boulder, Colorado fintech that provides embedded electronic-invoicing, payments, and invoice-financing
  (early-payment) infrastructure for B2B supplier networks. Suppliers get paid early via ACH while Mesa automates repayment
  once the buyer settles. Mesa ships as drop-in embedded UI — a JavaScript SDK (MesaClient) that renders Mesa's onboarding,
  dashboard, and instant-payout flows in an origin-pinned iframe inside a partner's web app — backed by a Partner REST API
  for user authentication and invoice retrieval. Auth is via API keys (clientId/clientSecret) exchanged for a short-lived
  JWT, with optional OIDC (Okta, Azure AD, Google). Backed by Matrix Partners; SOC 2.
url: https://raw.githubusercontent.com/api-evangelist/mesa/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- matrix-partners
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-20'
image: https://www.joinmesa.com/favicon.ico
tags:
- Company
- Fintech
- Payments
- Invoice Financing
- Embedded Finance
- Early Payment
- ACH
- Supplier Payments
- B2B
apis:
- aid: mesa:mesa-authentication-api
  name: Mesa Authentication API
  description: Exchange API keys for a session token.
  humanURL: https://docs.joinmesa.com/partner-api/endpoints
  baseURL: https://api.joinmesa.com/v1
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/mesa-authentication-api-openapi.yml
  - type: Documentation
    url: https://docs.joinmesa.com/partner-api
  - type: APIReference
    url: https://docs.joinmesa.com/partner-api/endpoints
- aid: mesa:mesa-invoices-api
  name: Mesa Invoices API
  description: Retrieve invoices for the authenticated user.
  humanURL: https://docs.joinmesa.com/partner-api/endpoints
  baseURL: https://api.joinmesa.com/v1
  tags:
  - Invoices
  properties:
  - type: OpenAPI
    url: openapi/mesa-invoices-api-openapi.yml
  - type: Documentation
    url: https://docs.joinmesa.com/partner-api
  - type: APIReference
    url: https://docs.joinmesa.com/partner-api/endpoints
common:
- type: Overlay
  url: overlays/mesa-partner-api-overlay.yaml
- type: Website
  url: https://www.joinmesa.com
- type: DeveloperPortal
  url: https://partners.joinmesa.com
- type: Documentation
  url: https://docs.joinmesa.com
- type: APIReference
  url: https://docs.joinmesa.com/partner-api/endpoints
- type: GettingStarted
  url: https://docs.joinmesa.com/embedded-ui/quickstart
- type: Authentication
  url: authentication/mesa-authentication.yml
- type: SignUp
  url: https://partners.joinmesa.com
- type: Support
  url: mailto:support@joinmesa.com
- type: TermsOfService
  url: https://www.joinmesa.com/terms
- type: PrivacyPolicy
  url: https://www.joinmesa.com/privacy
- type: TrustCenter
  url: https://trust.joinmesa.com
- type: Compliance
  url: https://trust.joinmesa.com
- type: Conventions
  url: conventions/mesa-conventions.yml
- type: Components
  url: components/mesa-components.yml
- type: DataModel
  url: data-model/mesa-data-model.yml
- type: Conformance
  url: conformance/mesa-conformance.yml
- type: Lifecycle
  url: lifecycle/mesa-lifecycle.yml
- type: LLMsTxt
  url: llms/mesa-llms.txt
- type: MCPServer
  url: mcp/mesa-mcp.yml
- type: AgentSkill
  url: skills/_index.yml
- type: TrustCenter
  url: security/mesa-trust-center.yml
- type: DomainSecurity
  url: security/mesa-domain-security.yml
x-enrichment:
  date: '2026-07-20'
  status: enriched
  artifacts_added: 15
  pass: local-v1

Mesa

Kin Score

APIs 2

Mesa Authentication API

Mesa Invoices API

Open Collections 3

API Collection

Mesa Partner Authentication API

Mesa Partner Authentication Invoices API

MCP Servers 1

Mesa MCP Server

Security Posture 3

Mesa Authentication

Mesa Domain Security

Mesa Trust Center

Resources