Zepto

Zepto is a Gold Coast, Australia based account-to-account (A2A) payments company that gives merchants and platforms programmable, real-time access to Australia's core money-movement rails. Its unified REST API moves money over the New Payments Platform (NPP) for instant account-to-account payments, PayTo for mandated real-time debits, PayID addressing, BECS Direct Entry (direct debit and direct credit), and stored-value float accounts, with real-time messaging, settlement and reconciliation. Zepto is the first non-authorised-deposit-taking institution (non-ADI) approved to connect directly to the NPP as a "Connected Institution" for PayTo, positioning it as an infrastructure-grade money-movement provider rather than a card acquirer. Its API posture is genuinely developer-first and API-native: a public ReadMe developer portal, a full sandbox, idempotent asynchronous payment flows, webhook notifications, and seven downloadable OpenAPI specifications covering the core payments API, PayTo, Confirmation of Payee (Validate), disputes, clients, merchant reports and notifications.

Zepto publishes 7 APIs on the APIs.io network, including PayTo API, Validate API (Confirmation of Payee), and 5 more. Tagged areas include Payments, Australia, Real-Time Payments, Account-to-Account, and New Payments Platform.

The Zepto catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Zepto’s developer surface includes authentication, documentation, API reference, getting-started guide, changelog, engineering blog, sandbox, and 32 more developer resources.

62.4/100 strong ▬ flat Agent 87/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
7 APIs 1 MCP Servers
PaymentsAustraliaReal-Time PaymentsAccount-to-AccountNew Payments PlatformPayToPayIDDirect EntryOpen BankingMoney Movement

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 62.4/100 · strong
Contract Quality 13.8 / 25
Developer Ergonomics 14.8 / 20
Commercial Clarity 10.0 / 20
Operational Transparency 7.2 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 87/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/zepto-payments: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Zepto API

Zepto's core account-to-account payments API — move money over the New Payments Platform (NPP), BECS Direct Entry and PayID with payments, payouts, payment requests, transfers, ...

Zepto PayTo API

Programmatic PayTo mandate management and real-time collection — create, amend, suspend, reactivate and cancel PayTo agreements, then collect authorised real-time payments and i...

Zepto Validate API (Confirmation of Payee)

Confirmation of Payee (CoP) account validation — verify that a payee's account name matches the account details in real time before initiating a payment, reducing misdirected pa...

Zepto Investigations API

Disputes and investigations (Beta) — raise and manage payment disputes, respond to action requests (accept, reject, upload evidence) and simulate incoming investigation messages...

Zepto Clients API

Client management (Alpha) — create and manage sub-clients and their Merchant Category Codes (MCC) for platform and marketplace models operating on top of Zepto's rails.

Zepto Merchant Reports API

Merchant reporting — download PayTo settlement reports by report date for reconciliation of collected and settled funds.

Zepto Notifications API (Webhooks)

Webhook event notifications — subscribe to asynchronous payment and account events (for example float_accounts.unmatched_credit.received) to drive real-time reconciliation and p...

Scroll for all 7

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Zepto Payments Authentication

http/oauth2 · 2 schemes

SECURITY

Zepto Payments Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Zepto Payments Vulnerability Disclosure

security.txt · contact published

SECURITY

Zepto Payments Trust Center

PCI DSS Level 1 (v4.0), ISO/IEC 27001, ASAE 3150 (independently certified by RSM Australia), CIS Benchmark Level 2, ISO 9362 (registered SWIFT BIC SPPYAU22)

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Zepto Payments Scopes

9 scopes · authorizationCode

9 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Zepto Payments Agentic Access

72 operations · 37 acting · 1 human-in-the-loop

72 operations · 37 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 7

Pagination, idempotency, versioning, errors, and events

Scroll for all 7

Build 3

SDKs, sample code, and the tooling you integrate with

Access & Security 8

Authentication, authorization, and security posture

Scroll for all 8

Operate 4

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: zepto-payments
url: https://raw.githubusercontent.com/api-evangelist/zepto-payments/refs/heads/main/apis.yml
name: Zepto
kind: company
description: 'Zepto is a Gold Coast, Australia based account-to-account (A2A) payments company that gives merchants and platforms
  programmable, real-time access to Australia''s core money-movement rails. Its unified REST API moves money over the New
  Payments Platform (NPP) for instant account-to-account payments, PayTo for mandated real-time debits, PayID addressing,
  BECS Direct Entry (direct debit and direct credit), and stored-value float accounts, with real-time messaging, settlement
  and reconciliation. Zepto is the first non-authorised-deposit-taking institution (non-ADI) approved to connect directly
  to the NPP as a "Connected Institution" for PayTo, positioning it as an infrastructure-grade money-movement provider rather
  than a card acquirer. Its API posture is genuinely developer-first and API-native: a public ReadMe developer portal, a full
  sandbox, idempotent asynchronous payment flows, webhook notifications, and seven downloadable OpenAPI specifications covering
  the core payments API, PayTo, Confirmation of Payee (Validate), disputes, clients, merchant reports and notifications.'
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Payments
- Australia
- Real-Time Payments
- Account-to-Account
- New Payments Platform
- PayTo
- PayID
- Direct Entry
- Open Banking
- Money Movement
created: '2026-07-24'
modified: '2026-07-24'
specificationVersion: '0.19'
apis:
- aid: zepto-payments:zepto-api
  name: Zepto API
  description: Zepto's core account-to-account payments API — move money over the New Payments Platform (NPP), BECS Direct
    Entry and PayID with payments, payouts, payment requests, transfers, refunds, agreements, contacts, bank accounts and
    transaction history. Authenticated with OAuth2 (authorization code) using scoped access tokens.
  humanURL: https://docs.zeptopayments.com/reference/zepto-api
  baseURL: https://api.zeptopayments.com
  tags:
  - Payments
  - Payouts
  - Account-to-Account
  - NPP
  - Direct Entry
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-zepto.yml
  - type: Documentation
    url: https://docs.zeptopayments.com/docs/zepto-api
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/makeapayment
- aid: zepto-payments:payto-api
  name: Zepto PayTo API
  description: Programmatic PayTo mandate management and real-time collection — create, amend, suspend, reactivate and cancel
    PayTo agreements, then collect authorised real-time payments and issue refunds against them. Zepto is a Connected Institution
    to the NPP for PayTo.
  humanURL: https://docs.zeptopayments.com/reference/agreements
  baseURL: https://api.zeptopayments.com
  tags:
  - PayTo
  - Agreements
  - Mandates
  - Real-Time Payments
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-pay-to.yml
  - type: Documentation
    url: https://zepto.com.au/solutions/payto
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/agreements
- aid: zepto-payments:validate-cop-api
  name: Zepto Validate API (Confirmation of Payee)
  description: Confirmation of Payee (CoP) account validation — verify that a payee's account name matches the account details
    in real time before initiating a payment, reducing misdirected payments and payment fraud.
  humanURL: https://docs.zeptopayments.com/reference/cop-account-validations
  baseURL: https://api.zeptopayments.com
  tags:
  - Confirmation of Payee
  - Validation
  - Fraud
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-validate-cop.yml
  - type: Documentation
    url: https://docs.zeptopayments.com/docs/zepto-validate
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/cop-account-validations
- aid: zepto-payments:investigations-api
  name: Zepto Investigations API
  description: Disputes and investigations (Beta) — raise and manage payment disputes, respond to action requests (accept,
    reject, upload evidence) and simulate incoming investigation messages in sandbox.
  humanURL: https://docs.zeptopayments.com/reference/disputes-beta
  baseURL: https://api.zeptopayments.com
  tags:
  - Disputes
  - Investigations
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-investigations.yml
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/disputes-beta
- aid: zepto-payments:clients-api
  name: Zepto Clients API
  description: Client management (Alpha) — create and manage sub-clients and their Merchant Category Codes (MCC) for platform
    and marketplace models operating on top of Zepto's rails.
  humanURL: https://docs.zeptopayments.com/reference/clients
  baseURL: https://api.zeptopayments.com
  tags:
  - Clients
  - Platforms
  - Merchant Category Codes
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-clients.yml
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/clients
- aid: zepto-payments:merchant-reports-api
  name: Zepto Merchant Reports API
  description: Merchant reporting — download PayTo settlement reports by report date for reconciliation of collected and settled
    funds.
  humanURL: https://docs.zeptopayments.com/reference/openapi-specifications
  baseURL: https://api.zeptopayments.com
  tags:
  - Reporting
  - Reconciliation
  - Settlement
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-merchant-reports.yml
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/openapi-specifications
- aid: zepto-payments:notifications-api
  name: Zepto Notifications API (Webhooks)
  description: Webhook event notifications — subscribe to asynchronous payment and account events (for example float_accounts.unmatched_credit.received)
    to drive real-time reconciliation and payment status handling.
  humanURL: https://docs.zeptopayments.com/docs/setting-up-your-webhooks
  baseURL: https://api.zeptopayments.com
  tags:
  - Webhooks
  - Events
  - Notifications
  properties:
  - type: OpenAPI
    url: openapi/zepto-payments-notifications.yml
  - type: Documentation
    url: https://docs.zeptopayments.com/docs/setting-up-your-webhooks
  - type: APIReference
    url: https://docs.zeptopayments.com/reference/getwebhooks
common:
- type: VulnerabilityDisclosure
  url: security/zepto-payments-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/zepto-payments-domain-security.yml
- type: AgenticAccess
  url: agentic-access/zepto-payments-agentic-access.yml
- type: Authentication
  url: authentication/zepto-payments-authentication.yml
- type: OAuthScopes
  url: scopes/zepto-payments-scopes.yml
- type: Website
  url: https://zepto.com.au/
- type: DeveloperPortal
  url: https://zepto.com.au/developers/
- type: Documentation
  url: https://docs.zeptopayments.com/
- type: APIReference
  url: https://docs.zeptopayments.com/reference/openapi-specifications
- type: GettingStarted
  url: https://docs.zeptopayments.com/docs/getting-started-in-sandbox
- type: ChangeLog
  url: https://docs.zeptopayments.com/reference/change-log
- type: StatusPage
  url: https://status.zeptopayments.com/
- type: HelpCenter
  url: https://help.zepto.money/en/
- type: Login
  url: https://go.zeptopayments.com/sign_in
- type: Blog
  url: https://zepto.com.au/blog
- type: LinkedIn
  url: https://www.linkedin.com/company/zepto-payments
- type: TermsOfService
  url: https://zepto.com.au/website-terms
- type: PrivacyPolicy
  url: https://zepto.com.au/legal-and-privacy-policy
- type: GitHubOrganization
  url: https://github.com/zeptofs
- type: Packages
  url: packages/zepto-payments-packages.yml
- type: WellKnown
  url: well-known/zepto-payments-well-known.yml
- type: SecurityTxt
  url: well-known/zepto-payments-security.txt
- type: Security
  url: https://zepto.com.au/uploads/documents/Vulnerability-Disclosure-Policy.pdf
- type: TrustCenter
  url: security/zepto-payments-trust-center.yml
- type: Compliance
  url: https://zepto.com.au/platform-and-accreditations
- type: Conformance
  url: conformance/zepto-payments-conformance.yml
- type: LLMsTxt
  url: llms/zepto-payments-llms.txt
- type: MCPServer
  url: mcp/zepto-payments-mcp.yml
- type: Conventions
  url: conventions/zepto-payments-conventions.yml
- type: Idempotency
  url: conventions/zepto-payments-conventions.yml
- type: ErrorCatalog
  url: errors/zepto-payments-problem-types.yml
- type: DeclineCodes
  url: errors/zepto-payments-decline-codes.yml
- type: Lifecycle
  url: lifecycle/zepto-payments-lifecycle.yml
- type: ChangeLog
  url: changelog/zepto-payments-changelog.yml
- type: Sandbox
  url: sandbox/zepto-payments-sandbox.yml
- type: DataModel
  url: data-model/zepto-payments-data-model.yml
- type: Webhooks
  url: asyncapi/zepto-payments-notifications-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Overlay
  url: overlays/zepto-payments-zepto-overlay.yaml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com