Stripe Issuing
"With over 275 million cards created, Stripe Issuing is the preferred card issuance infrastructure provider for disruptive startups, innovative software platforms, and evolving enterprises." [1]
Stripe Issuing is a card issuance infrastructure API for platforms, fintechs, and enterprises that need to create virtual or physical cards, covering expense management, B2B programs, fleet cards, and embedded finance. It is available in the US, UK, Canada, and across the EU, with over 275 million cards created and customers including Ramp and Shopify. Pricing is usage-based at $0.10 per card, though access requires a sales conversation and a compliance review before launch. The REST API ships with SDKs for seven languages, webhooks, sandbox access, and certifications for SOC 2 Type 2, PCI DSS, and GDPR.
Best for / Avoid if
Best for: Regulated or enterprise workloads - compliance attestations and an enterprise plan; AI agents and automation - an agent-ready surface (MCP / llms.txt); Teams needing broad API coverage out of the box
Avoid if: You need to start building today without contacting sales; You want to try it free before paying
Pricing & procurement
- Pricing model
- Usage-based [2]
- Published pricing
- ✓ Yes [3]
- Free tier
- ✗ No
- Self-serve signup
- ✗ No [4]
- Requires sales call
- ✓ Yes [5]
- Enterprise plan
- ✓ Yes [6]
| Item | Per | Amount | Source |
|---|---|---|---|
| Virtual card | card | $0.1 | source |
| Physical card (standard) | card | $3.5 | source |
| Dispute | dispute | $15 | source |
| Cross-border transaction (percentage component) | transaction | 1% | source |
| Cross-border transaction (fixed component) | transaction | $0.3 | source |
| Currency conversion (additional surcharge on top of cross-border fee) | transaction | 1% | source |
Capabilities
- Supported actions
- issue_virtual_card, issue_physical_card, spend_controls, authorization_stream, real_time_authorizations, partial_authorizations, incremental_authorizations, authorization_reversals, cardholder_management, card_lifecycle_management, card_pin_management, dispute_management, transaction_reconciliation, push_provisioning, 3ds, balance_funding, interchange_revenue_sharing, multi_capture, force_capture, over_capture, custom_card_designs, digital_wallet_provisioning, program_management, real_time_webhooks, connect_platform_issuing, stablecoin_backed_cards [7]
- Regions
- US, GB, AT, BE, CA, CY, DE, EE, ES, FI, FR, GR, HR, IE, IT, LT, LU, LV, MT, NL, PT, SI, SK, 40+ countries via cross-border/multinational programs, 30+ countries via stablecoin-backed cards (Latin America, Caribbean, Africa - private preview) [8]
- Input types
- Visa, Mastercard, virtual, physical, debit, credit, prepaid, commercial, consumer [9]
- Output types
- JSON, webhook events, card tokens, authorization events, transaction data, card number and CVC via API, balance transactions, dispute records, audit logs
- Webhooks
- ✓ Yes [10]
- Sandbox / test mode
- ✓ Yes [11]
- SDK languages
- Node.js, Python, Ruby, PHP, Java, Go, .NET [12]
- MCP server
- ✓ Yes [13]
Trust & compliance
- SOC 2
- SOC 2 Type II [14]
- HIPAA
- – Unknown [15]
- GDPR
- ✓ Yes [16]
- ISO 27001
- – Unknown [17]
- PCI DSS
- ✓ Yes [18]
- Published SLA
- ✗ No
- Rate limits
- Live mode: 100 requests per second (global); Sandbox: 25 requests per second; Individual endpoints: 25 requests per second. Card creation limits depend on the account's country and industry. HTTP 429 returned when exceeded. [19]
- Known restrictions
- Stripe acts as program manager using its own sponsor banks (Celtic Bank, Cross River Bank, Sutton Bank, Fifth Third Bank) - customers do NOT need to bring their own sponsor bank, PCI DSS Service Provider Level 1, Issuing only supports Custom connected accounts (platform owns loss liability and requirement collection), Consumer credit issuing is in private preview (US only), Stablecoin-backed cards in private preview, Compliance review required before launching any card program (Stripe compliance must approve application flow, marketing, and UI - up to 10 business days), Physical custom cards require minimum order of 2,500 cards, Real-time authorization webhook has 2-second response timeout, 3DS in the US is opt-in (not default); in UK/EU it is mandatory (SCA), Program approval and underwriting required before going live - requires sales intake and Stripe representative engagement, not instant self-serve for live card issuance, Custom card designs subject to additional pricing; shipping rates not included in standard physical card fee, Connect users may not pass dispute fees to Connected Accounts [20]
Developer surface
Integration
- API style
- rest
- Base URL
- https://api.stripe.com/v1
- Version
- 2026-05-27.dahlia
- Versioning
- header
- Stability
- ga
- Auth methods
- api_key
- Idempotency keys
- ✓ Yes
- Error format
- vendor-specific
- Webhook signing
- hmac_sha256
- Rate limit
- 100 / second
Adoption & maturity
- Launched
- 2018-07-26
- GA
- 2018-07-26
- Notable customers
- Ramp, Shopify, Wayflyer
Other Card Issuing APIs
Lithic
"Programmable card issuing and money movement" platform designed to help developers and companies "launch fast, scale confidently, and offload complexity."
Weavr
"Embedded finance for digital B2B products"
Swan
"The easiest way to embed banking features into your product."
Wallester
"Free business IBAN account with cards and expense management"
Adyen Issuing
"Get everything you need to create and manage your card program with our financial technology platform."
Marqeta
"We are the world's first modern card issuing platform" - enabling any company to deliver delightful payment experiences natively.
References
- ↑Description: stripe.com
- ↑Pricing model: stripe.com · stripe.com
- ↑Published pricing: stripe.com · stripe.com
- ↑Self-serve signup: docs.stripe.com · stripe.com
- ↑Requires sales call: docs.stripe.com · docs.stripe.com
- ↑Enterprise plan: stripe.com · stripe.com
- ↑Supported actions: docs.stripe.com · docs.stripe.com · docs.stripe.com
- ↑Regions: docs.stripe.com · docs.stripe.com
- ↑Input types: stripe.com · docs.stripe.com
- ↑Webhooks: docs.stripe.com
- ↑Sandbox: docs.stripe.com
- ↑SDK languages: docs.stripe.com
- ↑MCP server: docs.stripe.com
- ↑SOC 2: docs.stripe.com
- ↑HIPAA: docs.stripe.com
- ↑GDPR: stripe.com · stripe.com
- ↑ISO 27001: docs.stripe.com
- ↑PCI DSS: docs.stripe.com
- ↑Rate limits: docs.stripe.com
- ↑Known restrictions: docs.stripe.com · stripe.com · docs.stripe.com
Change history
- 2026-06-21 Capabilities: {} → {"multi_region":true,"virtual_cards":true,"physical_cards":true,"spend_controls…
- 2026-06-21 Summary Md: (none) → Stripe Issuing is a card issuance infrastructure API for platforms, fintechs, a…
- 2026-06-21 Score Pricing Transparency: (none) → 70
- 2026-06-21 Score Agent Friendliness: (none) → 55
- 2026-06-21 Score Setup Speed: (none) → 40
- 2026-06-21 Score Docs Quality: (none) → 55
- 2026-06-21 Score Procurement Friction: (none) → 30
- 2026-06-21 Score Trust Readiness: (none) → 50
- 2026-06-21 Best For: (none) → Regulated or enterprise workloads - compliance attestations and an enterprise p…
- 2026-06-21 Avoid If: (none) → You need to start building today without contacting sales, You want to try it f…
- 2026-06-21 Scoring Methodology: (none) → Scores are computed deterministically from this profile's published, sourced fi…
- 2026-06-21 Llms Txt URL: (none) → https://stripe.com/llms.txt
- 2026-06-21 Has Structured Data: (none) → No
- 2026-06-21 Robots Allows Agents: (none) → Yes
- 2026-06-21 API Reference URL: (none) → https://docs.stripe.com/api
- 2026-06-21 Status Page URL: (none) → https://status.stripe.com
- 2026-06-21 Changelog URL: (none) → https://stripe.com/changelog
- 2026-06-21 Docs URL: (none) → https://docs.stripe.com/
- 2026-06-21 Rendering: (none) → static
- 2026-06-21 Llms Txt Present: (none) → Yes
- 2026-06-21 Requires Sales Call: set to Yes
- 2026-06-21 Enterprise Plan Available: set to Yes
- 2026-06-21 SOC 2: set to type_2
- 2026-06-21 GDPR: set to Yes
- 2026-06-21 PCI DSS: set to Yes
- 2026-06-21 SLA Published: set to No
- 2026-06-21 Data Retention Policy URL: set to https://support.stripe.com/questions/data-retention-policy
- 2026-06-21 Documented Rate Limits: set to Live mode: 100 requests per second (global); Sandbox: 25 requests per second; I…
- 2026-06-21 Rate Limit Requests: set to 100
- 2026-06-21 Rate Limit Window: set to second
- 2026-06-21 Known Restrictions: set to Stripe acts as program manager using its own sponsor banks (Celtic Bank, Cross …
- 2026-06-21 Auth Methods: set to api_key
- 2026-06-21 Auth Docs URL: set to https://docs.stripe.com/api/authentication
- 2026-06-21 API Style: set to rest
- 2026-06-21 Base URL: set to https://api.stripe.com/v1
- 2026-06-21 API Version: set to 2026-05-27.dahlia
- 2026-06-21 Versioning Scheme: set to header
- 2026-06-21 Stability: set to ga
- 2026-06-21 Deprecation Policy URL: set to https://docs.stripe.com/upgrades
- 2026-06-21 MCP URL: set to https://mcp.stripe.com
- 2026-06-21 Quickstart URL: set to https://docs.stripe.com/issuing
- 2026-06-21 Idempotency Supported: set to Yes
- 2026-06-21 Error Format: set to vendor-specific
- 2026-06-21 Webhook Signing: set to hmac_sha256
- 2026-06-21 Webhook Events URL: set to https://docs.stripe.com/api/events/types
- 2026-06-21 Requires Verification: set to Yes
- 2026-06-21 Starting Price Usd: set to 0.1
- 2026-06-21 Slug: set to stripe-issuing
- 2026-06-21 Launched At: set to 2018-07-26
- 2026-06-21 GA Date: set to 2018-07-26
Suggest an edit / leave a review
Leave a review or comment
curl -X POST https://apio.sh/api/feedback/stripe-issuing \
-H 'Content-Type: application/json' \
-d '{"kind":"review","rating":5,"body":"Your experience with this API…"}'Suggest a correction to a field (cite a source)
curl -X POST https://apio.sh/api/suggest/stripe-issuing/FIELD \
-H 'Content-Type: application/json' \
-d '{"value":"corrected value","citations":[{"url":"https://source.example/page","excerpt":"supporting quote"}],"note":"what changed and why"}'