Pintu website screenshot

Pintu

Pintu (PT Pintu Kemana Saja) is an Indonesian cryptocurrency exchange and investment app founded in April 2020 and headquartered in Jakarta. Licensed as a Physical Crypto Asset Trader (PFAK) under Bappebti and now supervised by the OJK, Pintu serves more than four million retail users with spot trading, crypto futures, staking/Earn, and a self-custody Web3 wallet connecting to DeFi and NFT dApps. Beyond the consumer app, Pintu operates Pintu Pro, an institutional and partner trading platform whose HMAC-signed WebSocket + HTTP API (docs.pintu.pro) lets market makers and partners place and cancel orders and stream execution reports and trades against production and sandbox environments. Pintu has raised over 150M USD across a Lightspeed-led 35M Series A+ (2021) and a 113M Series B (2022) with Intudo, Pantera Capital, and Northstar.

Pintu publishes 1 API on the APIs.io network. Tagged areas include Company, Cryptocurrency, Crypto Exchange, Trading, and Fintech.

The Pintu catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Pintu’s developer surface includes documentation, engineering blog, support, authentication, sandbox, and 20 more developer resources.

43.1/100 developing ▬ flat Agent 39/100 agent ready Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
AccessSelf serve
1 APIs
CompanyCryptocurrencyCrypto ExchangeTradingFintechDigital AssetsWeb3IndonesiaWebSocketInstitutional Trading

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 43.1/100 · developing
Contract Quality 9.6 / 21
Developer Ergonomics 6.1 / 17
Access Clarity 6.3 / 17
Operational Transparency 2.3 / 11
Contract Governance 1.9 / 10
Discoverability 7.4 / 9
Regulatory Posture 9.0 / 15
Agent readiness — 39/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Securities & Market Data regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/pintu: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Pintu Pro Partner API

Pintu Pro's institutional/partner trading API. A unified message format is used over both an HTTP endpoint and a WebSocket transport, authenticated with an HMAC-SHA256 signature...

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Pintu Authentication

apiKey/hmac · 1 scheme

SECURITY

Pintu Domain Security

TLSv1.3 · DNSSEC · DMARC

SECURITY

Pintu Vulnerability Disclosure

security.txt · contact published

SECURITY

Pintu Trust Center

ISO/IEC 27001:2022

SECURITY

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 7

Authentication, authorization, and security posture

Scroll for all 7

Operate 1

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: pintu
name: Pintu
description: Pintu (PT Pintu Kemana Saja) is an Indonesian cryptocurrency exchange and investment app founded in April 2020
  and headquartered in Jakarta. Licensed as a Physical Crypto Asset Trader (PFAK) under Bappebti and now supervised by the
  OJK, Pintu serves more than four million retail users with spot trading, crypto futures, staking/Earn, and a self-custody
  Web3 wallet connecting to DeFi and NFT dApps. Beyond the consumer app, Pintu operates Pintu Pro, an institutional and partner
  trading platform whose HMAC-signed WebSocket + HTTP API (docs.pintu.pro) lets market makers and partners place and cancel
  orders and stream execution reports and trades against production and sandbox environments. Pintu has raised over 150M USD
  across a Lightspeed-led 35M Series A+ (2021) and a 113M Series B (2022) with Intudo, Pantera Capital, and Northstar.
url: https://raw.githubusercontent.com/api-evangelist/pintu/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://assets.pintu.co.id/frontend/strapi-prod/pintu_thumbnail_card_6a039be9aa.png
x-type: company
x-source: vc-portfolio
x-backed-by:
- lightspeed-venture-partners
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Company
- Cryptocurrency
- Crypto Exchange
- Trading
- Fintech
- Digital Assets
- Web3
- Indonesia
- WebSocket
- Institutional Trading
apis:
- name: Pintu Pro Partner API
  description: Pintu Pro's institutional/partner trading API. A unified message format is used over both an HTTP endpoint
    and a WebSocket transport, authenticated with an HMAC-SHA256 signature computed from an API key and secret. Partners place
    and cancel market/limit orders and subscribe to public and private streaming channels (ExecutionReport / Trade / user.orders)
    for order and trade updates, with a weighted per-second token rate limiter.
  humanURL: https://docs.pintu.pro/
  baseURL: https://partner.pintu.co.id
  tags:
  - Trading
  - WebSocket
  - Order
  - Market Data
  - Cryptocurrency
  tags_raw:
  - Trading
  - WebSocket
  - Orders
  - Market Data
  - Cryptocurrency
  properties:
  - type: Documentation
    url: https://docs.pintu.pro/
  - type: APIReference
    url: https://docs.pintu.pro/
  - type: Authentication
    url: authentication/pintu-authentication.yml
  - type: Conventions
    url: conventions/pintu-conventions.yml
  - type: Idempotency
    url: conventions/pintu-conventions.yml
  - type: ErrorCatalog
    url: errors/pintu-error-codes.yml
  - type: Sandbox
    url: sandbox/pintu-sandbox.yml
  - type: Webhooks
    url: asyncapi/pintu-partner-asyncapi.yml
  - type: SourceCode
    url: https://github.com/pintu-crypto/pintu-api-sample-go
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DeveloperPortal
  url: https://docs.pintu.pro/
- type: Documentation
  url: https://docs.pintu.pro/
- type: Website
  url: https://pintu.co.id
- type: GitHubOrganization
  url: https://github.com/pintu-crypto
- type: Blog
  url: https://pintu.co.id/en/news
- type: Support
  url: https://pintu.co.id/en/contact
- type: TermsOfService
  url: https://pintu.co.id/en/pages/pintu-pro-terms-and-conditions
- type: PrivacyPolicy
  url: https://pintu.co.id/en/pages/privacy-policy
- type: Packages
  url: packages/pintu-packages.yml
- type: Authentication
  url: authentication/pintu-authentication.yml
- type: Conventions
  url: conventions/pintu-conventions.yml
- type: Idempotency
  url: conventions/pintu-conventions.yml
- type: ErrorCatalog
  url: errors/pintu-error-codes.yml
- type: Lifecycle
  url: lifecycle/pintu-lifecycle.yml
- type: Sandbox
  url: sandbox/pintu-sandbox.yml
- type: WellKnown
  url: well-known/pintu-well-known.yml
- type: SecurityTxt
  url: well-known/pintu-security.txt
- type: DomainSecurity
  url: security/pintu-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/pintu-vulnerability-disclosure.yml
- type: Security
  url: https://pintu.co.id/security/bug-bounty
- type: Webhooks
  url: asyncapi/pintu-partner-asyncapi.yml
- type: LLMsTxt
  url: llms/pintu-llms.txt
- type: Conformance
  url: conformance/pintu-conformance.yml
- type: TrustCenter
  url: security/pintu-trust-center.yml
- type: Compliance
  url: https://pintu.co.id/en/faq/safe-to-use-pintu
x-enrichment:
  date: '2026-07-20'
  status: enriched
  artifacts_added: 2
  pass: local-v1