Thredd
"The AI-first issuer processor supporting debit, credit, prepaid and virtual card programmes globally with real-time authorisation, digital wallets and AI-enabled fraud management." [1]
Thredd is an issuer-processor API supporting debit, credit, prepaid, and virtual card programs across 47+ countries, aimed at fintechs, neobanks, and embedded finance builders. It handles card lifecycle management, real-time authorization, spend controls, 3DS, tokenization, push provisioning, and AI-enabled fraud monitoring via a REST API with OAuth2 and mTLS authentication. Pricing is negotiated through sales with no published rates. The platform holds SOC 2 Type 2, ISO 27001, and PCI DSS certifications, and customers include Zilch, Bigpay, and Pliant; notably, Thredd is an issuer-processor and not a BIN sponsor, so clients must arrange their own sponsoring bank.
Best for / Avoid if
Best for: Regulated or enterprise workloads - compliance attestations and an enterprise plan; Teams needing broad API coverage out of the box
Avoid if: You need transparent pricing up front; You want to try it free before paying
Pricing & procurement
Capabilities
- Supported actions
- issue_virtual_card, issue_physical_card, card_lifecycle_management, spend_controls, authorization_stream, 3ds, tokenization, push_provisioning, dispute_management, program_management, real_time_webhooks, fraud_monitoring, merchant_allow_disallow_lists, balance_inquiry, card_load_unload, pin_management, chargeback_management, cardholder_fee_management, open_banking_registration, bulk_card_creation [6]
- Regions
- Europe, UK, APAC, Americas, Middle East, 47+ countries [7]
- Input types
- Visa, Mastercard, Discover, virtual, physical, debit, credit, prepaid [8]
- Output types
- JSON, webhook events, card tokens, authorization events, transaction data, XML (SOAP) [9]
- Webhooks
- ✓ Yes [10]
- Sandbox / test mode
- ✓ Yes [11]
- SDK languages
- Unknown
- MCP server
- ✗ No
Trust & compliance
- SOC 2
- SOC 2 Type II [12]
- HIPAA
- – Unknown
- GDPR
- ✓ Yes [13]
- ISO 27001
- ✓ Yes [14]
- PCI DSS
- ✓ Yes [15]
- Published SLA
- ✗ No
- Known restrictions
- Thredd is an issuer-processor, NOT a turnkey BIN sponsor - clients must arrange their own sponsor bank or connect to an issuer via Thredd's partner network (e.g. Sutton Bank for US programs, announced June 2026), Clients handling cardholder data must be PCI DSS Level 1 compliant to retrieve full PANs; non-compliant clients must use Thredd's Public Token system instead, Sandbox provides restricted functionality only - no live card scheme processing, physical card printing, or payment transaction emulation, Production access requires sales engagement and signed programme agreement; self-serve sandbox is available but going live requires Thredd pavement testing approval plus issuer sign-off, No SDK available for the Cards API [16]
Developer surface
Integration
- API style
- rest
- Base URL
- https://api.threddpay.com/
- Version
- v1
- Versioning
- url
- Stability
- ga
- Auth methods
- oauth2, mtls
- Idempotency keys
- ✓ Yes
- Error format
- vendor-specific
Adoption & maturity
- Launched
- 2007-01-01
- Notable customers
- Zilch, Transcard, Treezor, REAP, Pliant, Bigpay, B4B Payments, Caxton
Other Card Issuing APIs
Lithic
"Programmable card issuing and money movement" platform designed to help developers and companies "launch fast, scale confidently, and offload complexity."
Stripe Issuing
"With over 275 million cards created, Stripe Issuing is the preferred card issuance infrastructure provider for disruptive startups, innovative software platforms, and evolving enterprises."
Weavr
"Embedded finance for digital B2B products"
Swan
"The easiest way to embed banking features into your product."
Wallester
"Free business IBAN account with cards and expense management"
Adyen Issuing
"Get everything you need to create and manage your card program with our financial technology platform."
References
- ↑Description: thredd.ai
- ↑Published pricing: cardsapidocs.thredd.com · cardsapidocs.thredd.com
- ↑Self-serve signup: cardsapidocs.thredd.com
- ↑Requires sales call: docs.thredd.ai
- ↑Enterprise plan: finance.yahoo.com
- ↑Supported actions: cardsapidocs.thredd.com · docs.thredd.ai
- ↑Regions: finance.yahoo.com · thredd.ai
- ↑Input types: thredd.ai · docs.thredd.ai
- ↑Output types: docs.thredd.ai
- ↑Webhooks: docs.thredd.ai
- ↑Sandbox: docs.thredd.ai · docs.thredd.ai
- ↑SOC 2: finance.yahoo.com
- ↑GDPR: docs.thredd.ai · thredd.ai
- ↑ISO 27001: finance.yahoo.com
- ↑PCI DSS: docs.thredd.ai · finance.yahoo.com
- ↑Known restrictions: docs.thredd.ai · newshub.medianet.com.au · cardsapidocs.thredd.com
Change history
- 2026-06-21 Capabilities: {} → {"multi_region":true,"virtual_cards":true,"physical_cards":true,"spend_controls…
- 2026-06-21 Summary Md: (none) → Thredd is an issuer-processor API supporting debit, credit, prepaid, and virtua…
- 2026-06-21 Score Setup Speed: (none) → 60
- 2026-06-21 Score Docs Quality: (none) → 35
- 2026-06-21 Score Procurement Friction: (none) → 25
- 2026-06-21 Score Trust Readiness: (none) → 65
- 2026-06-21 Best For: (none) → Regulated or enterprise workloads - compliance attestations and an enterprise p…
- 2026-06-21 Avoid If: (none) → You need transparent pricing up front, You want to try it free before paying
- 2026-06-21 Scoring Methodology: (none) → Scores are computed deterministically from this profile's published, sourced fi…
- 2026-06-21 Score Agent Friendliness: (none) → 40
- 2026-06-21 Score Pricing Transparency: (none) → 0
- 2026-06-21 Robots Allows Agents: (none) → Yes
- 2026-06-21 API Reference URL: (none) → https://cardsapidocs.thredd.com/v2.0/
- 2026-06-21 Docs URL: (none) → https://docs.thredd.ai/
- 2026-06-21 Has Structured Data: (none) → Yes
- 2026-06-21 Rendering: (none) → static
- 2026-06-21 Llms Txt Present: (none) → No
- 2026-06-21 Has Published Pricing: set to No
- 2026-06-21 Free Tier Available: set to No
- 2026-06-21 Self Serve Signup: set to Yes
- 2026-06-21 Requires Sales Call: set to Yes
- 2026-06-21 Enterprise Plan Available: set to Yes
- 2026-06-21 SOC 2: set to type_2
- 2026-06-21 GDPR: set to Yes
- 2026-06-21 ISO 27001: set to Yes
- 2026-06-21 PCI DSS: set to Yes
- 2026-06-21 SLA Published: set to No
- 2026-06-21 Data Retention Policy URL: set to https://www.thredd.ai/privacy-policy
- 2026-06-21 Known Restrictions: set to Thredd is an issuer-processor, NOT a turnkey BIN sponsor - clients must arrange…
- 2026-06-21 Auth Methods: set to oauth2, mtls
- 2026-06-21 Auth Docs URL: set to https://cardsapidocs.thredd.com/v2/docs/accessing-api-hub
- 2026-06-21 API Style: set to rest
- 2026-06-21 Base URL: set to https://api.threddpay.com/
- 2026-06-21 API Version: set to v1
- 2026-06-21 Versioning Scheme: set to url
- 2026-06-21 Stability: set to ga
- 2026-06-21 Quickstart URL: set to https://cardsapidocs.thredd.com/docs/getting-started-1
- 2026-06-21 Idempotency Supported: set to Yes
- 2026-06-21 Error Format: set to vendor-specific
- 2026-06-21 Webhook Events URL: set to https://cardsapidocs.thredd.com/v2/docs/introduction-to-webhooks
- 2026-06-21 Slug: set to thredd
- 2026-06-21 Launched At: set to 2007-01-01
- 2026-06-21 Notable Customers: set to Zilch, Transcard, Treezor, REAP, Pliant, Bigpay, B4B Payments, Caxton
- 2026-06-21 Fields Not Found: set to hipaa, minimum_commitment, documented_rate_limits, sla_published, deprecation_p…
- 2026-06-21 Source Confidence: set to high
- 2026-06-21 Extractor: set to claude-subagent:sonnet
- 2026-06-21 Last Verified At: set to 2026-06-21T00:00:00.000Z
- 2026-06-21 Status: set to published
- 2026-06-21 Requires Verification: set to Yes
- 2026-06-21 Name: set to Thredd
Suggest an edit / leave a review
Leave a review or comment
curl -X POST https://apio.sh/api/feedback/thredd \
-H 'Content-Type: application/json' \
-d '{"kind":"review","rating":5,"body":"Your experience with this API…"}'Suggest a correction to a field (cite a source)
curl -X POST https://apio.sh/api/suggest/thredd/FIELD \
-H 'Content-Type: application/json' \
-d '{"value":"corrected value","citations":[{"url":"https://source.example/page","excerpt":"supporting quote"}],"note":"what changed and why"}'