{
  "name": "Thredd",
  "slug": "thredd",
  "website_url": "https://www.thredd.ai/",
  "vendor_description": "\"The AI-first issuer processor supporting debit, credit, prepaid and virtual card programmes globally with real-time authorisation, digital wallets and AI-enabled fraud management.\"",
  "categories": [
    "card-issuing"
  ],
  "summary": "Thredd is an issuer-processor API supporting debit, credit, prepaid, and virtual card programs across 47+ countries, aimed at fintechs, neobanks, and embedded finance builders. It handles card lifecycle management, real-time authorization, spend controls, 3DS, tokenization, push provisioning, and AI-enabled fraud monitoring via a REST API with OAuth2 and mTLS authentication. Pricing is negotiated through sales with no published rates. The platform holds SOC 2 Type 2, ISO 27001, and PCI DSS certifications, and customers include Zilch, Bigpay, and Pliant; notably, Thredd is an issuer-processor and not a BIN sponsor, so clients must arrange their own sponsoring bank.",
  "capabilities": {
    "supported_actions": [
      "issue_virtual_card",
      "issue_physical_card",
      "card_lifecycle_management",
      "spend_controls",
      "authorization_stream",
      "3ds",
      "tokenization",
      "push_provisioning",
      "dispute_management",
      "program_management",
      "real_time_webhooks",
      "fraud_monitoring",
      "merchant_allow_disallow_lists",
      "balance_inquiry",
      "card_load_unload",
      "pin_management",
      "chargeback_management",
      "cardholder_fee_management",
      "open_banking_registration",
      "bulk_card_creation"
    ],
    "supported_regions": [
      "Europe",
      "UK",
      "APAC",
      "Americas",
      "Middle East",
      "47+ countries"
    ],
    "supported_languages": [],
    "input_types": [
      "Visa",
      "Mastercard",
      "Discover",
      "virtual",
      "physical",
      "debit",
      "credit",
      "prepaid"
    ],
    "output_types": [
      "JSON",
      "webhook events",
      "card tokens",
      "authorization events",
      "transaction data",
      "XML (SOAP)"
    ],
    "webhooks_supported": true,
    "sandbox_available": true,
    "sdk_languages": [],
    "mcp_server_available": false
  },
  "integration": {
    "api_style": "rest",
    "base_url": "https://api.threddpay.com/",
    "api_version": "v1",
    "versioning_scheme": "url",
    "stability": "ga",
    "deprecation_policy_url": null,
    "auth_methods": [
      "oauth2",
      "mtls"
    ],
    "auth_docs_url": "https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub",
    "idempotency_supported": true,
    "error_format": "vendor-specific",
    "webhook_signing": null,
    "webhook_events_url": "https://cardsapidocs.thredd.com/v2/docs/introduction-to-webhooks",
    "rate_limit_requests": null,
    "rate_limit_window": null,
    "sdk_packages": [],
    "mcp_url": null,
    "quickstart_url": "https://cardsapidocs.thredd.com/docs/getting-started-1"
  },
  "pricing": {
    "pricing_model": "contact_sales",
    "has_published_pricing": false,
    "starting_price_usd": null,
    "price_basis": null,
    "free_tier_available": false,
    "free_tier_limit": null,
    "free_tier_details": null,
    "minimum_commitment": null,
    "self_serve_signup": true,
    "requires_sales_call": true,
    "requires_verification": true,
    "enterprise_plan_available": true,
    "price_points": []
  },
  "compliance": {
    "soc2": "type_2",
    "hipaa": null,
    "gdpr": true,
    "iso_27001": true,
    "pci_dss": true,
    "sla_published": false,
    "sla_url": null,
    "data_retention_policy_url": "https://www.thredd.ai/privacy-policy",
    "documented_rate_limits": null,
    "known_restrictions": [
      "Thredd is an issuer-processor, NOT a turnkey BIN sponsor - clients must arrange their own sponsor bank or connect to an issuer via Thredd's partner network (e.g. Sutton Bank for US programs, announced June 2026)",
      "Clients handling cardholder data must be PCI DSS Level 1 compliant to retrieve full PANs; non-compliant clients must use Thredd's Public Token system instead",
      "Sandbox provides restricted functionality only - no live card scheme processing, physical card printing, or payment transaction emulation",
      "Production access requires sales engagement and signed programme agreement; self-serve sandbox is available but going live requires Thredd pavement testing approval plus issuer sign-off",
      "No SDK available for the Cards API"
    ]
  },
  "developer": {
    "docs_url": "https://docs.thredd.ai/",
    "api_reference_url": "https://cardsapidocs.thredd.com/v2.0/",
    "openapi_spec_url": null,
    "postman_collection_url": null,
    "changelog_url": null,
    "status_page_url": null,
    "llms_txt_url": null,
    "markdown_docs_url": null,
    "rendering": "static"
  },
  "adoption": {
    "launched_at": "2007-01-01",
    "ga_date": null,
    "github_stars": null,
    "github_stars_at": null,
    "notable_customers": [
      "Zilch",
      "Transcard",
      "Treezor",
      "REAP",
      "Pliant",
      "Bigpay",
      "B4B Payments",
      "Caxton"
    ]
  },
  "scores": {
    "agent_friendliness": 40,
    "pricing_transparency": 0,
    "setup_speed": 60,
    "docs_quality": 35,
    "procurement_friction": 25,
    "trust_readiness": 65,
    "best_for": [
      "Regulated or enterprise workloads - compliance attestations and an enterprise plan",
      "Teams needing broad API coverage out of the box"
    ],
    "avoid_if": [
      "You need transparent pricing up front",
      "You want to try it free before paying"
    ]
  },
  "sources": [
    {
      "field": "vendor_description",
      "url": "https://www.thredd.ai/company",
      "excerpt": "The AI-first issuer processor supporting debit, credit, prepaid and virtual card programmes globally with real-time authorisation, digital wallets and AI-enabled fraud management.",
      "confidence": "high"
    },
    {
      "field": "input_types",
      "url": "https://www.thredd.ai/platform/debit-and-prepaid",
      "excerpt": "Visa, Mastercard, and Discover. Scheme certification, compliance, and connectivity are managed within the platform.",
      "confidence": "high"
    },
    {
      "field": "supported_regions",
      "url": "https://finance.yahoo.com/news/thredd-accelerates-2026-global-platform-130000390.html",
      "excerpt": "Thredd delivers debit, credit, digital wallet and ledger capabilities to over 100 fintech, digital banks and embedded finance providers, across 47 countries, processing billions of transactions annually.",
      "confidence": "high"
    },
    {
      "field": "supported_actions",
      "url": "https://cardsapidocs.thredd.com/v2.0/",
      "excerpt": "Webhook registration and management; Tokenization event notifications; Transaction confirmation events; Fraud alert notifications; 3D Secure enrollment and credential management; Card tokenization with payment token generation; Merchant allow/disallow lists",
      "confidence": "high"
    },
    {
      "field": "soc2",
      "url": "https://finance.yahoo.com/news/thredd-accelerates-2026-global-platform-130000390.html",
      "excerpt": "Thredd holds PCI DSS certification, a comprehensive suite of ISO accreditations, and has completed SOC 1 and SOC 2 Type II audits providing the governance foundation that regulated issuers and banking partners require.",
      "confidence": "high"
    },
    {
      "field": "pci_dss",
      "url": "https://docs.thredd.ai/More_Information/PCI_Compliance.htm",
      "excerpt": "If you are not PCI DSS Level 1 compliant, you are not able to retrieve the full PAN from the Thredd platform.",
      "confidence": "high"
    },
    {
      "field": "gdpr",
      "url": "https://docs.thredd.ai/introduction/Content/Networks/Regulation_of_Card_Network.htm",
      "excerpt": "GDPR: EU regulation covering data privacy and security of user data",
      "confidence": "high"
    },
    {
      "field": "has_published_pricing",
      "url": "https://cardsapidocs.thredd.com/docs/general-faqs",
      "excerpt": "For information on pricing, contact your Account Manager.",
      "confidence": "high"
    },
    {
      "field": "sandbox_available",
      "url": "https://docs.thredd.ai/More_Information/Sandbox.htm",
      "excerpt": "You can sign up for a Sandbox account on the Developer Portal at devportal.thredd.com",
      "confidence": "high"
    },
    {
      "field": "self_serve_signup",
      "url": "https://cardsapidocs.thredd.com/docs/gaining-access-to-the-developer-portal",
      "excerpt": "The Developer Portal enables users to sign up and gain access to the Thredd Sandbox, where developers can trial our REST API using the API Explorer or a Postman Collection.",
      "confidence": "high"
    },
    {
      "field": "enterprise_plan_available",
      "url": "https://finance.yahoo.com/news/thredd-accelerates-2026-global-platform-130000390.html",
      "excerpt": "Thredd is the trusted, AI-first, cloud-native issuer processing platform powering the next generation of global payments. Through a single API, unified platform, Thredd delivers debit, credit, digital wallet and ledger capabilities to over 100 fintech, digital banks and embedded finance providers, across 47 countries, processing billions of transactions annually.",
      "confidence": "high"
    },
    {
      "field": "known_restrictions",
      "url": "https://docs.thredd.ai/More_Information/PCI_Compliance.htm",
      "excerpt": "If you are not PCI DSS Level 1 compliant, you are not able to retrieve the full PAN from the Thredd platform.",
      "confidence": "high"
    },
    {
      "field": "website_url",
      "url": "https://www.thredd.com",
      "excerpt": "thredd.com performs a 301 redirect to https://www.thredd.ai/",
      "confidence": "high"
    },
    {
      "field": "input_types",
      "url": "https://docs.thredd.ai/More_Information/Thredd_System.htm",
      "excerpt": "Networks: Visa and Mastercard; Card Types: Physical cards and virtual cards",
      "confidence": "high"
    },
    {
      "field": "supported_regions",
      "url": "https://www.thredd.ai/company",
      "excerpt": "Operates across 50+ countries with 130+ clients globally. Physical presence in London, Newcastle, Singapore, Sydney, and Austin.",
      "confidence": "high"
    },
    {
      "field": "supported_actions",
      "url": "https://docs.thredd.ai/More_Information/Card_Management_APIs.htm",
      "excerpt": "Create individual cards; Bulk card creation; Virtual or physical card options; Master Virtual Card (MVC) creation; Convert virtual to physical cards; Activate/deactivate functionality; Load/unload funds; Balance inquiries and adjustments; PIN changes",
      "confidence": "high"
    },
    {
      "field": "pci_dss",
      "url": "https://finance.yahoo.com/news/thredd-accelerates-2026-global-platform-130000390.html",
      "excerpt": "Thredd holds PCI DSS certification, a comprehensive suite of ISO accreditations, and has completed SOC 1 and SOC 2 Type II audits providing the governance foundation that regulated issuers and banking partners require.",
      "confidence": "high"
    },
    {
      "field": "iso_27001",
      "url": "https://finance.yahoo.com/news/thredd-accelerates-2026-global-platform-130000390.html",
      "excerpt": "Thredd holds PCI DSS certification, a comprehensive suite of ISO accreditations, and has completed SOC 1 and SOC 2 Type II audits providing the governance foundation that regulated issuers and banking partners require.",
      "confidence": "medium"
    },
    {
      "field": "gdpr",
      "url": "https://www.thredd.ai/privacy-policy",
      "excerpt": "Thredd UK Limited is the Data Controller for your data. This means they are responsible for how your data is collected, protected, stored and shared.",
      "confidence": "high"
    },
    {
      "field": "has_published_pricing",
      "url": "https://cardsapidocs.thredd.com/docs/general-faqs",
      "excerpt": "Contact your Account Manager for pricing and specific implementation details.",
      "confidence": "high"
    },
    {
      "field": "sandbox_available",
      "url": "https://docs.thredd.ai/More_Information/Sandbox.htm",
      "excerpt": "Thredd Sandbox only provides access to a restricted set of Thredd functionality",
      "confidence": "high"
    },
    {
      "field": "requires_sales_call",
      "url": "https://docs.thredd.ai/gettingstarted/Content/Getting_Started/Stages_in_a_Project.htm",
      "excerpt": "Thredd pavement testing approval is required in addition to any Issuer sign-off before we can switch your products to Active. Signed Thredd contracts, current payment status, completed production readiness activities required.",
      "confidence": "high"
    },
    {
      "field": "known_restrictions",
      "url": "https://newshub.medianet.com.au/2026/06/thredd-and-sutton-bank-partner-to-power-u-s-card-program-expansion-for-global-brands/158158/",
      "excerpt": "Sutton Bank will serve as a BIN sponsor for Thredd clients seeking to launch and scale prepaid and debit card programs in the United States.",
      "confidence": "high"
    },
    {
      "field": "known_restrictions",
      "url": "https://cardsapidocs.thredd.com/docs/general-faqs",
      "excerpt": "Thredd does not currently support an SDK for the Cards API.",
      "confidence": "high"
    },
    {
      "field": "output_types",
      "url": "https://docs.thredd.ai/More_Information/Developer_Integration.htm",
      "excerpt": "Cards API (REST) which accepts JSON-encoded request bodies and returns JSON-encoded responses; Web Services (SOAP) for creating and managing cards",
      "confidence": "high"
    },
    {
      "field": "primary_use_cases",
      "url": "https://www.thredd.ai/resources",
      "excerpt": "Guides: Launching in America; Launching a digital wallet; Exploring travel payments; Stablecoins and the four-party model",
      "confidence": "high"
    },
    {
      "field": "auth_methods",
      "url": "https://cardsapidocs.thredd.com/docs/authenticating-cards-api-with-mtls",
      "excerpt": "Before you can use this Postman Collection, you must access Thredd's Certificate Authority called Raidiam Connect (the CA) to generate transport and signing certificates.",
      "confidence": "high"
    },
    {
      "field": "base_url",
      "url": "https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub",
      "excerpt": "The Create Card endpoint in production: https://api.threddpay.com/api/v1/cards. Core API production: https://api.threddpay.com/. Webhooks, SOAP Converted, Digital Wallet, Open Banking, Aliasing: https://api.thredd.com",
      "confidence": "high"
    },
    {
      "field": "versioning_scheme",
      "url": "https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub",
      "excerpt": "The Create Card endpoint in production: https://api.threddpay.com/api/v1/cards",
      "confidence": "high"
    },
    {
      "field": "webhooks_supported",
      "url": "https://docs.thredd.ai/More_Information/Webhooks.htm",
      "excerpt": "Webhooks enable asynchronous event notification without persistent connections. Rather than continuously polling for updates, your system receives HTTP payloads when events occur.",
      "confidence": "high"
    },
    {
      "field": "primary_use_cases",
      "url": "https://www.thredd.ai/solutions",
      "excerpt": "Debit, credit, prepaid and virtual cards. All in a single platform.",
      "confidence": "high"
    },
    {
      "field": "auth_methods",
      "url": "https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub",
      "excerpt": "When using the endpoints in the API Hub, you must include Access Token in the header. The X-Region header is mandatory to determine the region/environment you're trying to connect to.",
      "confidence": "high"
    },
    {
      "field": "api_style",
      "url": "https://docs.thredd.ai/More_Information/Cards_API.htm",
      "excerpt": "The Thredd Cards API is based on RESTful principles. The API uses standard HTTP Response codes and verbs. All requests to the API must be made over HTTPS.",
      "confidence": "high"
    },
    {
      "field": "api_version",
      "url": "https://cardsapidocs.thredd.com/",
      "excerpt": "Core API (v1.0): For legacy REST solutions. API Hub (v2.0): For the Single URL API Hub solution. Sandbox (v0.0): For REST Sandbox environment testing.",
      "confidence": "high"
    },
    {
      "field": "stability",
      "url": "https://cardsapidocs.thredd.com/",
      "excerpt": "Core API (v1.0) for legacy REST solutions and API Hub (v2.0) for the Single URL API Hub solution",
      "confidence": "high"
    },
    {
      "field": "quickstart_url",
      "url": "https://cardsapidocs.thredd.com/docs/getting-started-1",
      "excerpt": "The Thredd Cards API enables RESTful integration for card management. Begin by reviewing the Getting Started documentation and Introduction to Cards sections before making API calls.",
      "confidence": "high"
    },
    {
      "field": "error_format",
      "url": "https://docs.thredd.ai/More_Information/Cards_API.htm",
      "excerpt": "The API uses standard HTTP Response codes and verbs.",
      "confidence": "low"
    },
    {
      "field": "webhook_events_url",
      "url": "https://docs.thredd.ai/More_Information/Webhooks.htm",
      "excerpt": "An event is an activity that happens outside of your system, such as a card transaction or card being blocked. Event codes 101-117 include fraud detection, card status changes, tokenisation requests, transaction confirmations, and Open Banking interactions.",
      "confidence": "high"
    },
    {
      "field": "requires_verification",
      "url": "https://docs.thredd.ai/gettingstarted/Content/Getting_Started/Stages_in_a_Project.htm",
      "excerpt": "Thredd pavement testing approval is required in addition to any Issuer sign-off before we can switch your products to Active. Signed Thredd contracts, current payment status, completed production readiness activities required.",
      "confidence": "high"
    },
    {
      "field": "launched_at",
      "url": "https://www.thredd.ai/company",
      "excerpt": "Thredd was founded in 2007 and is based in London, UK.",
      "confidence": "high"
    },
    {
      "field": "notable_customers",
      "url": "https://www.thredd.ai/",
      "excerpt": "Notable customers on the platform include: REAP, Treezor, Transcard, Zilch, Pliant, Bigpay, B4B Payments.",
      "confidence": "high"
    },
    {
      "field": "notable_customers",
      "url": "https://www.thredd.ai/company",
      "excerpt": "Thredd serves 130+ clients across 50+ countries, with investors including Advent International, Viking Global Investors, Temasek, MissionOG, Mastercard and Visa.",
      "confidence": "high"
    },
    {
      "field": "auth_docs_url",
      "url": "https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub",
      "excerpt": "Clients obtain access tokens by calling the Get Access Token endpoint. Access tokens are valid for 10 minutes and include the scopes that are associated with your application.",
      "confidence": "high"
    },
    {
      "field": "stability",
      "url": "https://cardsapidocs.thredd.com/changelog",
      "excerpt": "The changelog lists updates chronologically, with the most recent being Release Notes for the 5th June (16 days ago). Updates are attributed to Jon Bullock and organized by release date.",
      "confidence": "high"
    },
    {
      "field": "idempotency_supported",
      "url": "https://cardsapidocs.thredd.com/docs/what-is-idempotency",
      "excerpt": "Idempotent endpoints require the request to contain a unique ID (idempotency key) in the header. The key is valid for an hour after initial use. If another attempt to use the same key is done within the hour, a 200 response is returned but the idempotent behaviour will be present.",
      "confidence": "high"
    },
    {
      "field": "webhook_events_url",
      "url": "https://cardsapidocs.thredd.com/v2/docs/introduction-to-webhooks",
      "excerpt": "Webhook endpoints should return a 2XX HTTP status code. The system will retry failed deliveries up to 3 times at 1-second intervals before abandoning the attempt.",
      "confidence": "high"
    },
    {
      "field": "requires_verification",
      "url": "https://cardsapidocs.thredd.com/docs/onboarding-checklist",
      "excerpt": "Thredd pavement testing approval is required in addition to any Issuer sign-off before we can switch your account to Active. Ensure your Thredd contracts are fully executed and verify all payments are current.",
      "confidence": "high"
    },
    {
      "field": "sdk_packages",
      "url": "https://cardsapidocs.thredd.com/docs/general-faqs",
      "excerpt": "Thredd does not currently support an SDK for the Cards API.",
      "confidence": "high"
    },
    {
      "field": "launched_at",
      "url": "https://www.pymnts.com/payments-as-a-service/2023/global-processing-services-rebrands-as-thredd-aims-to-expand/",
      "excerpt": "GPS rebranded as Thredd in April 2023 to reflect the company's pivotal role in weaving together the different 'threads' of the next-gen global payments ecosystem.",
      "confidence": "high"
    },
    {
      "field": "notable_customers",
      "url": "https://www.businesswire.com/news/home/20260617515344/en/Thredd-and-Sutton-Bank-Partner-to-Power-U.S.-Card-Program-Expansion-for-Global-Brands",
      "excerpt": "Thredd and Sutton Bank Partner to Power U.S. Card Program Expansion for Global Brands",
      "confidence": "high"
    },
    {
      "field": "data_retention_policy_url",
      "url": "https://www.thredd.ai/privacy-policy",
      "excerpt": "This website is not intended to cover personal data processed for recruitment or employment purposes. Data is retained for the duration of the association for marketing and business relationship purposes.",
      "confidence": "medium"
    },
    {
      "field": "auth_docs_url",
      "url": "https://cardsapidocs.thredd.com/docs/authenticating-cards-api-with-mtls",
      "excerpt": "mTLS operates alongside OAuth 2.0 authentication rather than replacing it. After configuring certificates, clients must register dynamically with the authorization server via DCR, generate access tokens using private key JWT authentication, and present both the certificate (for mTLS) and access token in API requests.",
      "confidence": "high"
    }
  ],
  "fields_not_found": [
    "hipaa",
    "minimum_commitment",
    "documented_rate_limits",
    "sla_published",
    "deprecation_policy_url",
    "sla_url",
    "sdk_packages",
    "mcp_url",
    "rate_limit_requests",
    "rate_limit_window",
    "starting_price_usd",
    "price_basis",
    "free_tier_limit",
    "ga_date",
    "webhook_signing",
    "error_format_verbatim"
  ],
  "source_confidence": "high",
  "last_verified_at": "2026-06-21T00:00:00.000Z",
  "contribute": {
    "note": "This data is crowd-editable. Suggest corrections or leave a review via these endpoints - no auth required, requests are rate-limited, and every submission is reviewed before it goes live. For a field edit, {field} is any key in this response and a citation is required.",
    "endpoints": [
      {
        "action": "review",
        "label": "Leave a review or comment",
        "method": "POST",
        "url": "https://apio.sh/api/feedback/thredd",
        "example_body": {
          "kind": "review",
          "rating": 5,
          "body": "Your experience with this API…"
        }
      },
      {
        "action": "field_edit",
        "label": "Suggest a correction to a field (cite a source)",
        "method": "POST",
        "url": "https://apio.sh/api/suggest/thredd/{field}",
        "example_body": {
          "value": "corrected value",
          "citations": [
            {
              "url": "https://source.example/page",
              "excerpt": "supporting quote"
            }
          ],
          "note": "what changed and why"
        }
      },
      {
        "action": "new_api",
        "label": "Suggest a new API to add (only name is required - send as much as you can cite)",
        "method": "POST",
        "url": "https://apio.sh/api/suggest/api",
        "example_body": {
          "value": {
            "name": "Acme Email API",
            "website_url": "https://acme.example",
            "vendor_name": "Acme",
            "categories": [
              "email"
            ],
            "pricing_model": "usage_based",
            "has_published_pricing": true,
            "free_tier_available": true,
            "price_points": [
              {
                "plan": "Pay as you go",
                "item": "1,000 emails",
                "amount_usd": 1,
                "per": "1,000 emails",
                "source_url": "https://acme.example/pricing"
              }
            ],
            "soc2": "type_2",
            "docs_url": "https://docs.acme.example"
          },
          "citations": [
            {
              "url": "https://acme.example/pricing",
              "excerpt": "$1 per 1,000 emails"
            }
          ]
        },
        "value_schema": [
          {
            "field": "name",
            "type": "string",
            "label": "Product name (the only required field)"
          },
          {
            "field": "website_url",
            "type": "string",
            "label": "Marketing website URL"
          },
          {
            "field": "vendor_name",
            "type": "string",
            "label": "Company/vendor name behind the product"
          },
          {
            "field": "vendor_description",
            "type": "string",
            "label": "One-line description, quoted from the vendor"
          },
          {
            "field": "categories",
            "type": "string[]",
            "label": "Category/leaf slugs it belongs to, e.g. [\"email\",\"sms\"]"
          },
          {
            "field": "primary_use_cases",
            "type": "string[]",
            "label": "What it's used for"
          },
          {
            "field": "supported_actions",
            "type": "string[]",
            "label": "Concrete API actions/capabilities"
          },
          {
            "field": "supported_regions",
            "type": "string[]",
            "label": "Countries/regions/data-residency"
          },
          {
            "field": "supported_languages",
            "type": "string[]",
            "label": "Human/spoken languages supported"
          },
          {
            "field": "input_types",
            "type": "string[]",
            "label": "Accepted input types/formats"
          },
          {
            "field": "output_types",
            "type": "string[]",
            "label": "Produced output types/formats"
          },
          {
            "field": "webhooks_supported",
            "type": "bool",
            "label": "Supports webhooks?"
          },
          {
            "field": "sandbox_available",
            "type": "bool",
            "label": "Dedicated sandbox/test mode?"
          },
          {
            "field": "sdk_languages",
            "type": "string[]",
            "label": "Languages with an official SDK"
          },
          {
            "field": "mcp_server_available",
            "type": "bool",
            "label": "Official MCP server?"
          },
          {
            "field": "pricing_model",
            "type": "enum",
            "label": "Pricing model",
            "values": [
              "usage_based",
              "subscription",
              "seat_based",
              "hybrid",
              "contact_sales"
            ]
          },
          {
            "field": "has_published_pricing",
            "type": "bool",
            "label": "Concrete prices published publicly?"
          },
          {
            "field": "free_tier_available",
            "type": "bool",
            "label": "Recurring/perpetual free tier (not a trial)?"
          },
          {
            "field": "free_tier_details",
            "type": "string",
            "label": "What the free tier includes"
          },
          {
            "field": "minimum_commitment",
            "type": "string",
            "label": "Any stated minimum spend/commitment"
          },
          {
            "field": "self_serve_signup",
            "type": "bool",
            "label": "Get an API key without talking to sales?"
          },
          {
            "field": "requires_sales_call",
            "type": "bool",
            "label": "Does going live require sales?"
          },
          {
            "field": "enterprise_plan_available",
            "type": "bool",
            "label": "Named enterprise tier?"
          },
          {
            "field": "starting_price_usd",
            "type": "number",
            "label": "Lowest published paid entry price (USD number)"
          },
          {
            "field": "price_basis",
            "type": "string",
            "label": "Unit the starting price is per, e.g. '1,000 emails'"
          },
          {
            "field": "free_tier_limit",
            "type": "string",
            "label": "Free-tier ceiling in literal terms"
          },
          {
            "field": "price_points",
            "type": "object[]",
            "label": "Structured prices: [{plan,item,amount_usd,amount_percent,per,source_url}]"
          },
          {
            "field": "soc2",
            "type": "enum",
            "label": "SOC 2 status",
            "values": [
              "type_2",
              "type_1",
              "in_progress",
              "none",
              "unknown"
            ]
          },
          {
            "field": "hipaa",
            "type": "bool",
            "label": "HIPAA (e.g. BAA available)?"
          },
          {
            "field": "gdpr",
            "type": "bool",
            "label": "GDPR compliance stated?"
          },
          {
            "field": "iso_27001",
            "type": "bool",
            "label": "ISO 27001 certified?"
          },
          {
            "field": "pci_dss",
            "type": "bool",
            "label": "PCI DSS compliant?"
          },
          {
            "field": "sla_published",
            "type": "bool",
            "label": "Published SLA / uptime commitment?"
          },
          {
            "field": "documented_rate_limits",
            "type": "string",
            "label": "Documented rate limits, quoted"
          },
          {
            "field": "known_restrictions",
            "type": "string[]",
            "label": "Notable documented restrictions/limits"
          },
          {
            "field": "auth_methods",
            "type": "string[]",
            "label": "Auth methods",
            "values": [
              "api_key",
              "oauth2",
              "jwt",
              "basic",
              "hmac_signature",
              "mtls",
              "session"
            ]
          },
          {
            "field": "api_style",
            "type": "enum",
            "label": "Primary API style",
            "values": [
              "rest",
              "graphql",
              "grpc",
              "soap",
              "websocket"
            ]
          },
          {
            "field": "base_url",
            "type": "string",
            "label": "API root/base URL"
          },
          {
            "field": "api_version",
            "type": "string",
            "label": "Current API version string"
          },
          {
            "field": "quickstart_url",
            "type": "string",
            "label": "Quickstart / hello-world URL"
          },
          {
            "field": "docs_url",
            "type": "string",
            "label": "Developer docs URL"
          },
          {
            "field": "api_reference_url",
            "type": "string",
            "label": "API reference URL"
          },
          {
            "field": "openapi_spec_url",
            "type": "string",
            "label": "OpenAPI spec URL"
          },
          {
            "field": "changelog_url",
            "type": "string",
            "label": "Changelog URL"
          },
          {
            "field": "status_page_url",
            "type": "string",
            "label": "Status page URL"
          },
          {
            "field": "notable_customers",
            "type": "string[]",
            "label": "Named public customers"
          },
          {
            "field": "launched_at",
            "type": "string",
            "label": "Launch date (ISO date or year)"
          }
        ]
      },
      {
        "action": "token",
        "label": "Optional - raise your rate limit",
        "method": "GET",
        "url": "https://apio.sh/api/feedback/token"
      }
    ]
  }
}