Cybersource (Visa Acceptance)

Best for: AI agents and automation - an agent-ready surface (MCP / llms.txt); Teams needing broad API coverage out of the box

Avoid if: You need transparent pricing up front; You want to try it free before paying; You have strict compliance requirements

Pricing model

Contact sales [2]cybersource.com/en-us/contact-us/sales.html“To find out more about Cybersource products and services, please complete this request form.”developer.cybersource.com/hello-world/sandbox.html“To accept real payments, you will need a merchant account”

Published pricing

✗ No [3]cybersource.com/en-us/contact-us/sales.html“To find out more about Cybersource products and services, please complete this request form.”

Free tier

✗ No

Self-serve signup

✓ Yes [4]developer.cybersource.com/hello-world/sandbox.html“Simply, create your account and go.”

Requires sales call

✓ Yes [5]developer.cybersource.com/hello-world/sandbox.html“To accept real payments, you will need a merchant account”

Enterprise plan

✓ Yes [6]cybersource.com/solutions/merchant/enterprise/“Enterprise: Payment and Fraud Management Solutions - US & Canada”

• Hosted checkout
• In-person / POS
• Recurring payments
• Marketplace payouts
• Built-in fraud tools

Supported actions

create_charge, authorize, capture, void, refund, hosted_checkout, tokenization, network_tokenization, 3ds_authentication, recurring_payments, payouts, in_person_terminal, dispute_management, fraud_screening, multicurrency, apple_pay, google_pay, click_to_pay, samsung_pay, dcc, account_updater, transaction_search, reporting, webhooks, invoicing, pay_by_link, bin_lookup, batch_submission, oauth2_auth, jwt_auth [7]developer.cybersource.com/docs/cybs/en-us/webhooks/implementation/all/rest/webhooks/wh-fg-intro.html“Fraud alerts, Invoice status updates, Network token is provisioning, Transaction monitoring, Recurring billing”developer.cybersource.com/docs.html“Payments, Token Management: 'tokenizes, securely stores, and manages customer and payment data', Payouts to Visa/Mastercard accounts, Flex Microform for PCI-DSS compliance, Google Pay integration, Apple Pay integration, Unified Checkout”

Regions

160+ countries and territories, 50+ currencies, 200+ acquirer and processor connections globally [8]cybersource.com/en-us/solutions/payment-acceptance/payment-gateway.html“Access 200+ acquirers and processors in over 160 countries and territories, and accept payments in over 50 currencies.”

Input types

Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay, Cartes Bancaires, Mada, ELO, Hipercard, Aura, RuPay, TPN Thailand, Apple Pay, Google Pay, Samsung Pay, Click to Pay, PayPal, Affirm, Afterpay, Clearpay, Klarna, PayPo, Visa Installments, Bacs, SEPA, iDEAL, Bancontact, Belfius, BLIK, KBC, KCP, Multibanco, Pix, Przelewy24, Sofort, OXXO, BuyBox [9]cybersource.com/en-us/solutions/payment-acceptance/payment-methods.html“American Express, Aura, Cartes Bancaires, Diners Club, Discover, ELO, Hipercard, JCB, Mada, Mastercard, RuPay, TPN Thailand, UnionPay, Visa”cybersource.com/en-us/solutions/payment-acceptance/payment-methods.html“Affirm, Afterpay, Clearpay, Klarna, PayPo, and Visa Installments. Apple Pay, Click to Pay, Google Pay, and Samsung Pay. PayPal. Bacs and SEPA. Bancontact, Belfius, BLIK, iDEAL, KBC, KCP, Multibanco, Pix, Przelewy24, and Sofort. OXXO. BuyBox.”

Output types

JSON, webhook events, hosted checkout page, payment link, settlement report, transaction search results, batch reports, daily/weekly/monthly/yearly reporting

Webhooks

✓ Yes [10]developer.cybersource.com/docs/cybs/en-us/webhooks/implementation/all/rest/webhooks/wh-fg-intro.html“By using the Webhooks REST API, you can subscribe to these notifications for events of your choice and designate a URL in your system to receive them.”

Sandbox / test mode

✓ Yes [11]developer.cybersource.com/hello-world/sandbox.html“After completing the evaluation registration process, you will be able to send test transactions.”developer.cybersource.com/hello-world/sandbox.html“Signup for sandbox and use testing resources before going live.”

SDK languages

Java, Python, Node.js, .NET, PHP, Ruby [12]developer.cybersource.com/resources/rest-api-sdks.html“Java (up to Java 19), .NET (.NET Framework 4.6.1–4.8.1, .NET Core 3.1, .NET 5–7, .NET Standard 2.1), PHP (8.0.0 and above), Node.js (14.21.3 and above), Python (3.6 and above), Ruby (2.5.0 and above)”

MCP server

✓ Yes [13]developer.cybersource.com/resources/Agent-Toolkit.html“The Visa Acceptance Solutions Agent Toolkit, npx -y @visaacceptance/mcp --tools=all --merchant-id=MERCHANT_ID --api-key-id=API_KEY_ID --secret-key=SECRET_KEY”github.com/visaacceptance/agent-toolkit“Toolkit for integrating Visa Acceptance API into agentic workflows — npm package @visaacceptance/agent-toolkit, MCP server @visaacceptance/mcp”

SOC 2

Unknown [14]cybersource.com/en-us/about/dpa.html“The accountants conduct the review in accordance with the American Institute of Certified Public Accounts Statement on Standards for Attestation Engagements No. 18 SOC I Type II ('SSAE 18')”support.visaacceptance.com/knowledgebase/Knowledgearticle/“You can fulfill this requirement by presenting either the Attestation of Compliance (AoC) or the SSAE 18 report (also referred to as the SOC-1 report; previously known as SSAE 16).”

HIPAA

– Unknown

GDPR

✓ Yes [15]cybersource.com/en-us/about/dpa.html“Module 2 (Transfer controller to processor) of the EEA Standard Contractual Clauses shall apply with respect to any Transfer of Customer Personal Information from the EEA, UK or Switzerland to Cybersource”

ISO 27001

✗ No [16]cybersource.com/en-us/about/dpa.html“designed to meet the standards set forth in ISO 27002 published by the International Organization for Standardization”

PCI DSS

✓ Yes [17]cybersource.com/en-us/solutions/payment-security.html“We are a certified Level 1 PCI Service Provider”cybersource.com/en-us/about/dpa.html“Cybersource Corporation is certified as compliant with all standards established by the Payment Card Industry Data Security Standards”

Published SLA

✗ No [18]status.cybersource.comcybersource.com/en-us/solutions/payment-acceptance/payment-gateway.html“99.999% uptime, built on Visa's world-leading infrastructure”

Known restrictions

PCI DSS Level 1 Service Provider (highest level), Production merchant account required to process live payments - sandbox only for testing, Load testing of developer/sandbox accounts not permitted, JWT messaging required for all API calls; HTTP signature deprecated - mandatory migration by September 2026, Pricing is custom/quote-only; not published publicly [19]cybersource.com/en-us/solutions/payment-security.html“We are a certified Level 1 PCI Service Provider”developer.cybersource.com/hello-world/sandbox.html“load testing a Developer Account or Products is not permitted”developer.cybersource.com/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-intro.html“By September 2026, all merchants using HTTP signature messaging must migrate to JSON Web Token (JWT) messaging.”

• Docs
• API reference
• llms.txt
• Status page

Docs rendering: static · llms.txt present

API style

rest

Base URL

https://api.cybersource.com

Version

v2

Versioning

url

Stability

ga

Auth methods

jwt, hmac_signature, oauth2

Idempotency keys

✗ No

Error format

vendor-specific

Webhook signing

hmac_sha256

SDKs

• Java com.cybersource:cybersource-rest-client-java · repo
• Python cybersource-rest-client-python · repo
• Node.js cybersource-rest-client · repo
• .NET CyberSource.Rest.Client · repo
• PHP cybersource/rest-client-php · repo
• Ruby cybersource_rest_client · repo

• Auth docs
• Quickstart
• MCP server
• Webhook events
• Deprecation policy

Launched

1994-01-01

GA

1994-01-01

Notable customers

Razorpay, Pockyt, Mypinpad, Dick's Sporting Goods

• PayPal Payments

  "Accept payments in 200+ markets, 130+ currencies, and 30+ payment methods with a single, developer-friendly platform."

  Hybrid · public pricing · self-serve

• Square Payments

  "Square Payments Built for however you do business" - Square Payments is a comprehensive payment processing solution for in-person, online, and mobile transactions.

  Hybrid · public pricing · self-serve

• Adyen

  "One platform for payments, data, and financial products. Built to scale with the world's leading businesses."

  Sales-led · public pricing · self-serve

• Razorpay

  "India's All-in-One Finance Platform" that helps businesses accept payments, make payouts, manage banking, automate payroll, and access credit - all from a single platform.

  Usage · public pricing · self-serve

• Stripe

  Financial infrastructure to grow your revenue.

  Usage · public pricing · self-serve

• Authorize.net

  "We help make it easy to get paid. It's that simple."

  Hybrid · public pricing · self-serve

Cybersource (Visa Acceptance) alternatives · Cybersource (Visa Acceptance) vs PayPal Payments · All Online Card Payment APIs APIs

Each field above carries a numbered source - hover for a preview, click to jump here.

1. ↑Description: cybersource.com
2. ↑Pricing model: cybersource.com · developer.cybersource.com
3. ↑Published pricing: cybersource.com
4. ↑Self-serve signup: developer.cybersource.com
5. ↑Requires sales call: developer.cybersource.com
6. ↑Enterprise plan: cybersource.com
7. ↑Supported actions: developer.cybersource.com · developer.cybersource.com
8. ↑Regions: cybersource.com
9. ↑Input types: cybersource.com · cybersource.com
10. ↑Webhooks: developer.cybersource.com
11. ↑Sandbox: developer.cybersource.com · developer.cybersource.com
12. ↑SDK languages: developer.cybersource.com
13. ↑MCP server: developer.cybersource.com · github.com
14. ↑SOC 2: cybersource.com · support.visaacceptance.com
15. ↑GDPR: cybersource.com
16. ↑ISO 27001: cybersource.com
17. ↑PCI DSS: cybersource.com · cybersource.com
18. ↑Published SLA: status.cybersource.com · cybersource.com
19. ↑Known restrictions: cybersource.com · developer.cybersource.com · developer.cybersource.com

Every field change, who made it, and when - from our audited data pipeline and editors.

1. 2026-06-21 Score Agent Friendliness: 50 → 65
2. 2026-06-21 Score Docs Quality: 15 → 45
3. 2026-06-21 API Reference URL: (none) → https://developer.cybersource.com/api-reference-assets/index.html
4. 2026-06-21 Rendering: (none) → static
5. 2026-06-21 Has Structured Data: (none) → No
6. 2026-06-21 Llms Txt Present: No → Yes
7. 2026-06-21 Llms Txt URL: (none) → https://developer.cybersource.com/llms.txt
8. 2026-06-21 Capabilities: {} → {"payouts":true,"in_person":true,"recurring":true,"fraud_tools":true,"hosted_ch…
9. 2026-06-21 Summary Md: (none) → Cybersource, a Visa company operating since 1994, is an enterprise payment gate…
10. 2026-06-21 Best For: (none) → AI agents and automation - an agent-ready surface (MCP / llms.txt), Teams needi…
11. 2026-06-21 Score Agent Friendliness: (none) → 50
12. 2026-06-21 Score Pricing Transparency: (none) → 0
13. 2026-06-21 Score Setup Speed: (none) → 75
14. 2026-06-21 Score Docs Quality: (none) → 15
15. 2026-06-21 Score Procurement Friction: (none) → 25
16. 2026-06-21 Score Trust Readiness: (none) → 25
17. 2026-06-21 Avoid If: (none) → You need transparent pricing up front, You want to try it free before paying, Y…
18. 2026-06-21 Scoring Methodology: (none) → Scores are computed deterministically from this profile's published, sourced fi…
19. 2026-06-21 Llms Txt Present: (none) → No
20. 2026-06-21 Docs URL: (none) → https://developer.cybersource.com/docs.html
21. 2026-06-21 Status Page URL: (none) → https://status.cybersource.com
22. 2026-06-21 Robots Allows Agents: (none) → Yes
23. 2026-06-21 SOC 2: set to unknown
24. 2026-06-21 GDPR: set to Yes
25. 2026-06-21 ISO 27001: set to No
26. 2026-06-21 PCI DSS: set to Yes
27. 2026-06-21 SLA Published: set to No
28. 2026-06-21 Data Retention Policy URL: set to https://www.cybersource.com/en-us/about/dpa.html
29. 2026-06-21 Known Restrictions: set to PCI DSS Level 1 Service Provider (highest level), Production merchant account r…
30. 2026-06-21 Auth Methods: set to jwt, hmac_signature, oauth2
31. 2026-06-21 Auth Docs URL: set to https://developer.cybersource.com/docs/cybs/en-us/platform/get-started/all/rest…
32. 2026-06-21 API Style: set to rest
33. 2026-06-21 Base URL: set to https://api.cybersource.com
34. 2026-06-21 API Version: set to v2
35. 2026-06-21 Versioning Scheme: set to url
36. 2026-06-21 Stability: set to ga
37. 2026-06-21 Deprecation Policy URL: set to https://developer.cybersource.com/hello-world/release-notes.html
38. 2026-06-21 MCP URL: set to https://github.com/visaacceptance/agent-toolkit
39. 2026-06-21 Quickstart URL: set to https://developer.cybersource.com/hello-world/sandbox.html
40. 2026-06-21 Idempotency Supported: set to No
41. 2026-06-21 Error Format: set to vendor-specific
42. 2026-06-21 Webhook Signing: set to hmac_sha256
43. 2026-06-21 Webhook Events URL: set to https://developer.cybersource.com/docs/cybs/en-us/webhooks/implementation/all/r…
44. 2026-06-21 Requires Verification: set to Yes
45. 2026-06-21 Launched At: set to 1994-01-01
46. 2026-06-21 GA Date: set to 1994-01-01
47. 2026-06-21 Slug: set to cybersource
48. 2026-06-21 Fields Not Found: set to hipaa, documented_rate_limits, minimum_commitment, sla_published, rate_limit_re…
49. 2026-06-21 Source Confidence: set to high
50. 2026-06-21 Extractor: set to claude-subagent:sonnet

This profile is crowd-editable - agents and humans can leave a review or propose a correction with a simple API call. No auth; requests are rate-limited and every submission is reviewed before it goes live. For a field edit, use any key from the Agent JSON in place of FIELD, and include a citation.

curl -X POST https://apio.sh/api/feedback/cybersource \
  -H 'Content-Type: application/json' \
  -d '{"kind":"review","rating":5,"body":"Your experience with this API…"}'

curl -X POST https://apio.sh/api/suggest/cybersource/FIELD \
  -H 'Content-Type: application/json' \
  -d '{"value":"corrected value","citations":[{"url":"https://source.example/page","excerpt":"supporting quote"}],"note":"what changed and why"}'

All the ways to contribute →