Authorize.net
"We help make it easy to get paid. It's that simple." [1]
Authorize.net is a payment gateway, operated by Visa subsidiary CyberSource, that handles ecommerce checkout, recurring billing, in-person card payments, virtual terminal orders, and mobile POS for merchants in the United States, Canada, Australia, and New Zealand. Pricing is hybrid: a per-transaction fee starting at $0.10 with a $25 monthly minimum, and an All-in-One plan that bundles a merchant account for businesses without one. The REST API supports six major languages, webhooks, tokenization, and Apple Pay and Google Pay, with a sandbox available for testing. PCI DSS compliance is confirmed; SOC 2 is not available, and a SOC 1 report can be requested by account owners only.
Best for / Avoid if
Best for: Teams needing broad API coverage out of the box; Cost-sensitive teams - low, transparent entry price
Avoid if: You want to try it free before paying; You have strict compliance requirements
Pricing & procurement
- Pricing model
- Hybrid (base + usage) [2]
- Published pricing
- ✓ Yes [3]
- Free tier
- ✗ No [4]
- Self-serve signup
- ✓ Yes [5]
- Requires sales call
- ✗ No [6]
- Enterprise plan
- ✓ Yes [7]
- Minimum commitment
- $25 per month (applies to all published plans) [8]
| Plan | Item | Per | Amount | Source |
|---|---|---|---|---|
| All-in-One | Monthly account fee | month | $25 | source |
| All-in-One | Card transaction | transaction | 2.9% + $0.3 | source |
| Gateway Only | Monthly account fee | month | $25 | source |
| Gateway Only | Card transaction | transaction | $0.1 | source |
| Gateway Only | Daily batch settlement fee | batch | $0.1 | source |
| Gateway + eCheck | Monthly account fee | month | $25 | source |
| Gateway + eCheck | Card transaction | transaction | $0.1 | source |
| Gateway + eCheck | Daily batch settlement fee | batch | $0.1 | source |
| Gateway + eCheck | eCheck (ACH) transaction | transaction | 0.75% | source |
| Gateway Only (ANZ) | Monthly gateway fee | month | $35 | source |
| Gateway Only (ANZ) | Card transaction | transaction | $0.3 | source |
Capabilities
- Supported actions
- authCaptureTransaction, authOnlyTransaction, priorAuthCaptureTransaction, captureOnlyTransaction, refundTransaction, voidTransaction, hosted_checkout, tokenization, customer_profiles, recurring_payments, apple_pay, google_pay, paypal_express_checkout, echecknet_ach, account_updater, advanced_fraud_detection_suite, dispute_management, 3ds_authentication, in_person_terminal, virtual_terminal, level2_level3_processing, split_tender, account_funding_transactions, webhooks, sandbox_testing, digital_invoicing [9]
- Regions
- United States, Canada, Australia, New Zealand [10]
- Input types
- Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay, Apple Pay, Google Pay, PayPal, eCheck / ACH [11]
- Output types
- JSON, XML, webhook events, hosted checkout page, payment nonce / token, settlement report, transaction detail response, batch statistics
- Webhooks
- ✓ Yes [12]
- Sandbox / test mode
- ✓ Yes [13]
- SDK languages
- PHP, Java, C#/.NET, Python, Ruby, Node.js [14]
- MCP server
- ✗ No [15]
Trust & compliance
- SOC 2
- None [16]
- HIPAA
- ✗ No [17]
- GDPR
- ✓ Yes [18]
- ISO 27001
- – Unknown
- PCI DSS
- ✓ Yes [19]
- Published SLA
- ✗ No
- Known restrictions
- eCheck/ACH only available for businesses based in the United States, Merchants must be physically located in US, Canada, or Australia/NZ; UK and European businesses directed to CyberSource, Merchant account required (All-in-One plan bundles one; Gateway-only requires an existing merchant account), All-in-One applicants subject to underwriting; approval can take one to five business days, PCI DSS compliant; listed under CyberSource on the Visa Global Registry of Service Providers - specific Level number not published separately, SSAE-18 (SOC 1) report available on request to Account Owners/Admins only; no SOC 2, Authorize.net does not handle HIPAA information - payment processing falls within HIPAA Section 1179 exemption, Enterprise/interchange-plus pricing requires contacting sales (threshold: $500K+ annual processing), No contract or early termination fees on published plans [20]
Developer surface
Integration
- API style
- rest
- Base URL
- https://api.authorize.net/xml/v1/request.api
- Version
- v1
- Versioning
- url
- Stability
- ga
- Auth methods
- api_key
- Idempotency keys
- ✗ No
- Error format
- vendor-specific
- Webhook signing
- hmac_sha512
Adoption & maturity
- Launched
- 1996-01-01
Other Online Card Payment APIs
PayPal Payments
"Accept payments in 200+ markets, 130+ currencies, and 30+ payment methods with a single, developer-friendly platform."
Square Payments
"Square Payments Built for however you do business" - Square Payments is a comprehensive payment processing solution for in-person, online, and mobile transactions.
Adyen
"One platform for payments, data, and financial products. Built to scale with the world's leading businesses."
Razorpay
"India's All-in-One Finance Platform" that helps businesses accept payments, make payouts, manage banking, automate payroll, and access credit - all from a single platform.
Stripe
Financial infrastructure to grow your revenue.
Braintree (PayPal)
"A global payment processing solution that delivers end-to-end checkout experiences for businesses"
References
- ↑Description: authorize.net
- ↑Pricing model: authorize.net
- ↑Published pricing: authorize.net
- ↑Free tier: authorize.net
- ↑Self-serve signup: developer.authorize.net
- ↑Requires sales call: authorize.net
- ↑Enterprise plan: authorize.net
- ↑Minimum commitment: authorize.net
- ↑Supported actions: developer.authorize.net · developer.authorize.net · developer.authorize.net
- ↑Regions: support.authorize.net · authorize.net · authorize.net
- ↑Input types: authorize.net · support.authorize.net
- ↑Webhooks: developer.authorize.net
- ↑Sandbox: developer.authorize.net · developer.authorize.net
- ↑SDK languages: developer.authorize.net
- ↑MCP server: developer.authorize.net
- ↑SOC 2: support.authorize.net · support.authorize.net
- ↑HIPAA: support.authorize.net
- ↑GDPR: authorize.net · support.authorize.net
- ↑PCI DSS: support.authorize.net · support.authorize.net
- ↑Known restrictions: authorize.net · authorize.net · authorize.net
Change history
- 2026-06-21 Capabilities: {} → {"in_person":true,"recurring":true,"fraud_tools":true,"hosted_checkout":true,"i…
- 2026-06-21 Summary Md: (none) → Authorize.net is a payment gateway, operated by Visa subsidiary CyberSource, th…
- 2026-06-21 Score Pricing Transparency: (none) → 85
- 2026-06-21 Score Docs Quality: (none) → 15
- 2026-06-21 Score Procurement Friction: (none) → 85
- 2026-06-21 Score Trust Readiness: (none) → 25
- 2026-06-21 Best For: (none) → Teams needing broad API coverage out of the box, Cost-sensitive teams - low, tr…
- 2026-06-21 Avoid If: (none) → You want to try it free before paying, You have strict compliance requirements
- 2026-06-21 Scoring Methodology: (none) → Scores are computed deterministically from this profile's published, sourced fi…
- 2026-06-21 Score Agent Friendliness: (none) → 30
- 2026-06-21 Score Setup Speed: (none) → 75
- 2026-06-21 Robots Allows Agents: (none) → Yes
- 2026-06-21 Status Page URL: (none) → https://status.authorize.net
- 2026-06-21 Docs URL: (none) → https://developer.authorize.net/
- 2026-06-21 Has Structured Data: (none) → No
- 2026-06-21 Rendering: (none) → static
- 2026-06-21 Llms Txt Present: (none) → No
- 2026-06-21 Has Published Pricing: set to Yes
- 2026-06-21 Free Tier Available: set to No
- 2026-06-21 Minimum Commitment: set to $25 per month (applies to all published plans)
- 2026-06-21 Self Serve Signup: set to Yes
- 2026-06-21 Requires Sales Call: set to No
- 2026-06-21 Enterprise Plan Available: set to Yes
- 2026-06-21 SOC 2: set to none
- 2026-06-21 HIPAA: set to No
- 2026-06-21 GDPR: set to Yes
- 2026-06-21 PCI DSS: set to Yes
- 2026-06-21 SLA Published: set to No
- 2026-06-21 Data Retention Policy URL: set to https://www.authorize.net/content/dam/anet-redesign/documents/authorizenet-dpa.…
- 2026-06-21 Known Restrictions: set to eCheck/ACH only available for businesses based in the United States, Merchants …
- 2026-06-21 Auth Methods: set to api_key
- 2026-06-21 Auth Docs URL: set to https://support.authorize.net/knowledgebase/Knowledgearticle/?code=000001271
- 2026-06-21 API Style: set to rest
- 2026-06-21 Base URL: set to https://api.authorize.net/xml/v1/request.api
- 2026-06-21 API Version: set to v1
- 2026-06-21 Versioning Scheme: set to url
- 2026-06-21 Stability: set to ga
- 2026-06-21 Deprecation Policy URL: set to https://developer.authorize.net/api/changes.html
- 2026-06-21 Quickstart URL: set to https://developer.authorize.net/hello_world/
- 2026-06-21 Idempotency Supported: set to No
- 2026-06-21 Error Format: set to vendor-specific
- 2026-06-21 Webhook Signing: set to hmac_sha512
- 2026-06-21 Webhook Events URL: set to https://developer.authorize.net/api/reference/features/webhooks.html
- 2026-06-21 Slug: set to authorize-net
- 2026-06-21 Starting Price Usd: set to 0.1
- 2026-06-21 Price Basis: set to transaction
- 2026-06-21 Launched At: set to 1996-01-01
- 2026-06-21 Notable Customers: set to (none)
- 2026-06-21 Fields Not Found: set to iso_27001, sla_published, documented_rate_limits, pci_dss_level_number, rate_li…
- 2026-06-21 Source Confidence: set to high
Suggest an edit / leave a review
Leave a review or comment
curl -X POST https://apio.sh/api/feedback/authorize-net \
-H 'Content-Type: application/json' \
-d '{"kind":"review","rating":5,"body":"Your experience with this API…"}'Suggest a correction to a field (cite a source)
curl -X POST https://apio.sh/api/suggest/authorize-net/FIELD \
-H 'Content-Type: application/json' \
-d '{"value":"corrected value","citations":[{"url":"https://source.example/page","excerpt":"supporting quote"}],"note":"what changed and why"}'