Spreedly

Spreedly is a United States payments orchestration platform and PCI-compliant card vault that lets merchants and platforms securely tokenize payment methods once and then transact against hundreds of payment gateways, processors, and third-party APIs through a single integration. Founded in 2008 and headquartered in Durham, North Carolina, Spreedly sits in the gateway/PSP layer of the deep, fragmented US payments market as an independent, network-agnostic intermediary rather than a card network or acquirer. Its Payments Orchestration offering combines a universal token vault, a normalized transaction API across many gateways, workflow-based routing (Composer), network tokenization, account updater (Card Refresher), 3-D Secure / SCA authentication, and Receivers for forwarding stored payment data to arbitrary third-party endpoints. Spreedly is strongly API-native: it publishes a public developer portal with complete reference documentation and a downloadable OpenAPI 3.1 specification for its Core Transactional API (https://core.spreedly.com/v1), authenticated with HTTP Basic auth using per-environment key/secret credentials.

Spreedly publishes 7 APIs on the APIs.io network, including Core Transactional API, Payment Methods & Vault API, Composer (Workflows) API, and 4 more. Tagged areas include Payments, United States, Payment Gateway, Payment Orchestration, and Payment Processing.

The Spreedly catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Spreedly’s developer surface includes authentication, sandbox, changelog, support, documentation, API reference, getting-started guide, and 35 more developer resources.

62.8/100 strong ▬ flat Agent 84/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
7 APIs 1 MCP Servers
PaymentsUnited StatesPayment GatewayPayment OrchestrationPayment ProcessingCard VaultTokenizationNetwork TokenizationPCI ComplianceSubscriptions

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 62.8/100 · strong
Contract Quality 15.1 / 25
Developer Ergonomics 17.0 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 8.2 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 84/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/spreedly: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Spreedly Core Transactional API

The Spreedly Core Transactional API — the primary REST surface for the Payments Orchestration platform. Covers payment method tokenization/vaulting, gateway creation and managem...

Spreedly Payment Methods & Vault API

Create, retain, redact, recache, update, and inspect tokenized payment methods held in Spreedly's PCI-compliant universal vault, including field-level encryption and payment met...

Spreedly Composer (Workflows) API

Workflow-driven orchestration endpoints (Composer) that execute an authorization, purchase, or verification against a configured routing workflow rather than a single named gate...

Spreedly Network Tokenization API

Retrieve card metadata and lifecycle status for network tokens (Visa, Mastercard, Amex network-provisioned tokens) managed through Spreedly, supporting network tokenization for ...

Spreedly Account Updater (Card Refresher) API

Card Refresher / account updater inquiries that refresh stored card credentials (expiration dates and PANs) against the card networks' account updater services to reduce decline...

Spreedly Receivers API

Receivers let merchants forward securely vaulted payment data from the Spreedly vault to arbitrary third-party HTTP endpoints, extending tokenization beyond payment gateways to ...

Spreedly 3-D Secure / SCA Authentication API

Strong Customer Authentication endpoints to authenticate a given payment method and manage SCA providers on a merchant profile, supporting 3-D Secure 2.x authentication flows fo...

Scroll for all 7

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

spreedly-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Spreedly Authentication

http · 1 scheme

SECURITY

Spreedly Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Spreedly Trust Center

SOC 2, PCI DSS

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Spreedly Agentic Access

84 operations · 48 acting

84 operations · 48 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 8

Pagination, idempotency, versioning, errors, and events

Scroll for all 8

Build 6

SDKs, sample code, and the tooling you integrate with

Access & Security 5

Authentication, authorization, and security posture

Operate 5

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: spreedly
url: https://raw.githubusercontent.com/api-evangelist/spreedly/refs/heads/main/apis.yml
name: Spreedly
kind: company
description: 'Spreedly is a United States payments orchestration platform and PCI-compliant card vault that lets merchants
  and platforms securely tokenize payment methods once and then transact against hundreds of payment gateways, processors,
  and third-party APIs through a single integration. Founded in 2008 and headquartered in Durham, North Carolina, Spreedly
  sits in the gateway/PSP layer of the deep, fragmented US payments market as an independent, network-agnostic intermediary
  rather than a card network or acquirer. Its Payments Orchestration offering combines a universal token vault, a normalized
  transaction API across many gateways, workflow-based routing (Composer), network tokenization, account updater (Card Refresher),
  3-D Secure / SCA authentication, and Receivers for forwarding stored payment data to arbitrary third-party endpoints. Spreedly
  is strongly API-native: it publishes a public developer portal with complete reference documentation and a downloadable
  OpenAPI 3.1 specification for its Core Transactional API (https://core.spreedly.com/v1), authenticated with HTTP Basic auth
  using per-environment key/secret credentials.'
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Payments
- United States
- Payment Gateway
- Payment Orchestration
- Payment Processing
- Card Vault
- Tokenization
- Network Tokenization
- PCI Compliance
- Subscriptions
created: '2026-07-24'
modified: '2026-07-24'
specificationVersion: '0.19'
apis:
- aid: spreedly:spreedly-core-api
  name: Spreedly Core Transactional API
  description: The Spreedly Core Transactional API — the primary REST surface for the Payments Orchestration platform. Covers
    payment method tokenization/vaulting, gateway creation and management, and the full transaction lifecycle (authorize,
    capture, purchase, verify, void, credit/refund) across many downstream gateways from a single normalized integration.
    Documented as OpenAPI 3.1 with 68 paths; base URL https://core.spreedly.com/v1; HTTP Basic authentication using an environment
    key and secret.
  humanURL: https://developer.spreedly.com/reference/api-introduction
  baseURL: https://core.spreedly.com/v1
  tags:
  - Payments
  - Transactions
  - Vault
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: Documentation
    url: https://developer.spreedly.com/docs/overview
  - type: APIReference
    url: https://developer.spreedly.com/reference/api-introduction
- aid: spreedly:spreedly-payment-methods-api
  name: Spreedly Payment Methods & Vault API
  description: Create, retain, redact, recache, update, and inspect tokenized payment methods held in Spreedly's PCI-compliant
    universal vault, including field-level encryption and payment method event history. Part of the Core Transactional API
    surface.
  humanURL: https://developer.spreedly.com/reference/create-payment-method
  baseURL: https://core.spreedly.com/v1
  tags:
  - Vault
  - Tokenization
  - Payment Methods
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/list-payment-method
  - type: Documentation
    url: https://developer.spreedly.com/docs/advanced-vault
- aid: spreedly:spreedly-composer-api
  name: Spreedly Composer (Workflows) API
  description: Workflow-driven orchestration endpoints (Composer) that execute an authorization, purchase, or verification
    against a configured routing workflow rather than a single named gateway, enabling failover, cascading, and rules-based
    routing across Spreedly's connected gateways.
  humanURL: https://developer.spreedly.com/reference/composerpurchase
  baseURL: https://core.spreedly.com/v1
  tags:
  - Payment Orchestration
  - Workflows
  - Routing
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/composerauthorize
- aid: spreedly:spreedly-network-tokenization-api
  name: Spreedly Network Tokenization API
  description: Retrieve card metadata and lifecycle status for network tokens (Visa, Mastercard, Amex network-provisioned
    tokens) managed through Spreedly, supporting network tokenization for improved authorization rates and credential-on-file
    security.
  humanURL: https://developer.spreedly.com/reference/network-tokenization-status
  baseURL: https://core.spreedly.com/v1
  tags:
  - Network Tokenization
  - Card Metadata
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/network-tokenization-card-metadata
- aid: spreedly:spreedly-account-updater-api
  name: Spreedly Account Updater (Card Refresher) API
  description: Card Refresher / account updater inquiries that refresh stored card credentials (expiration dates and PANs)
    against the card networks' account updater services to reduce declines on stored payment methods.
  humanURL: https://developer.spreedly.com/reference/card_refresher_inquiry
  baseURL: https://core.spreedly.com/v1
  tags:
  - Account Updater
  - Card Refresher
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/list-inquiries
- aid: spreedly:spreedly-receivers-api
  name: Spreedly Receivers API
  description: Receivers let merchants forward securely vaulted payment data from the Spreedly vault to arbitrary third-party
    HTTP endpoints, extending tokenization beyond payment gateways to any API that needs card data.
  humanURL: https://developer.spreedly.com/reference/list-supported-receivers
  baseURL: https://core.spreedly.com/v1
  tags:
  - Receivers
  - Data Forwarding
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/create-receiver
- aid: spreedly:spreedly-sca-api
  name: Spreedly 3-D Secure / SCA Authentication API
  description: Strong Customer Authentication endpoints to authenticate a given payment method and manage SCA providers on
    a merchant profile, supporting 3-D Secure 2.x authentication flows for cardholder verification.
  humanURL: https://developer.spreedly.com/reference/authenticate
  baseURL: https://core.spreedly.com/v1
  tags:
  - 3DS
  - SCA
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/spreedly-api-v1.json
  - type: APIReference
    url: https://developer.spreedly.com/reference/create-sca-provider
common:
- type: TrustCenter
  url: security/spreedly-trust-center.yml
- type: Compliance
  url: https://www.spreedly.com/security-compliance
- type: DomainSecurity
  url: security/spreedly-domain-security.yml
- type: AgenticAccess
  url: agentic-access/spreedly-agentic-access.yml
- type: Authentication
  url: authentication/spreedly-authentication.yml
- type: Packages
  url: packages/spreedly-packages.yml
- type: SDKs
  url: packages/spreedly-packages.yml
- type: MCPServer
  url: mcp/spreedly-mcp.yml
- type: ToolCrosswalk
  url: mcp/spreedly-tool-crosswalk.yml
- type: LLMsTxt
  url: llms/spreedly-llms.txt
- type: WellKnown
  url: well-known/spreedly-well-known.yml
- type: Overlay
  url: overlays/spreedly-api-v1-overlay.yaml
- type: Conformance
  url: conformance/spreedly-conformance.yml
- type: ErrorCatalog
  url: errors/spreedly-problem-types.yml
- type: DeclineCodes
  url: errors/spreedly-decline-codes.yml
- type: Lifecycle
  url: lifecycle/spreedly-lifecycle.yml
- type: Deprecation
  url: https://developer.spreedly.com/docs/major-changes
- type: Sandbox
  url: sandbox/spreedly-sandbox.yml
- type: Conventions
  url: conventions/spreedly-conventions.yml
- type: Idempotency
  url: conventions/spreedly-conventions.yml
- type: DataModel
  url: data-model/spreedly-data-model.yml
- type: Webhooks
  url: asyncapi/spreedly-webhooks.yml
- type: Components
  url: components/spreedly-components.yml
- type: AgentSkill
  url: skills/_index.yml
- type: ChangeLog
  url: changelog/spreedly-changelog.yml
- type: Postman
  url: https://docs.spreedlypostman.com/
- type: Support
  url: https://support.spreedly.com/
- type: Website
  url: https://www.spreedly.com/
- type: DeveloperPortal
  url: https://developer.spreedly.com/
- type: Documentation
  url: https://developer.spreedly.com/docs/overview
- type: APIReference
  url: https://developer.spreedly.com/reference/api-introduction
- type: GettingStarted
  url: https://developer.spreedly.com/docs/overview
- type: ChangeLog
  url: https://developer.spreedly.com/changelog
- type: GitHubOrganization
  url: https://github.com/spreedly
- type: StatusPage
  url: https://status.spreedly.com/
- type: Pricing
  url: https://www.spreedly.com/pricing
- type: Blog
  url: https://www.spreedly.com/blog
- type: Security
  url: https://www.spreedly.com/security
- type: SignUp
  url: https://id.spreedly.com/readme/auth
- type: TermsOfService
  url: https://www.spreedly.com/terms-of-service
- type: PrivacyPolicy
  url: https://legal.spreedly.com/#privacy-policy
- type: LinkedIn
  url: https://www.linkedin.com/company/spreedly
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com