This is not our API. This repository is an independent, third-party profile of a company's publicly available API surface, maintained by API Evangelist. API Evangelist does not operate, host, resell, or support this company's APIs, and is not affiliated with or endorsed by the company unless stated on the profile.
Where the information came from. Everything here is assembled from material a member of the public can reach with a browser and no credentials — the company's own website, developer portal and documentation, the specifications it publishes for public use (OpenAPI, AsyncAPI, JSON Schema,
apis.json,llms.txtand similar), its public repositories, and its public status, pricing and changelog pages. Nothing here is obtained by breaching a system, defeating an access control, or using credentials of any kind.The rating is an independent assessment. The Kin Score and Agent Readiness rating are independently calculated scores of a company's public API artifacts, produced by API Evangelist against a published rubric. They are not certifications, endorsements, security assessments, or audits, and they score published artifacts — not the quality, safety, or security of the software.
Corrections, re-scores, and removal are free. No partnership, contract, or purchase is required, and you do not need to justify the request.
- Something wrong? Open an issue on this repository, or email info@apievangelist.com.
- Published something new? Ask for a re-score and we will re-run the rating.
- Want the listing taken down? Say so and we will honor it. The profile is reduced to your company name, a factual description, and a link to your own site, and the company is recorded as unrated — never scored zero for having asked.
Response times. Acknowledgement within one business day; removal or restriction within two business days; corrections and re-scores within five business days.
Not from the company, and here with a question? You are welcome here — we would rather be the front line and point you the right way than have a good report go nowhere. What this repository can answer is narrow, though, so it is worth knowing who you are actually looking for:
- A question about how the API works, an account, billing, or a bug in the service — that is the company's own support, not us. We profile this API; we do not operate it and cannot see your account.
- A bug in an open-source project we only catalog — file it on that project's own repository. This has happened with a real and correct bug report that reached us instead of the people who could fix it, which helped nobody.
- Anything about this listing itself — the description, the tags, the rating, a missing or wrong artifact — is ours. Open an issue here.
- Not sure, or something general about API Evangelist or APIs.io — open an issue on the APIs.io Inbox and we will route it.
This repository contains no software, and we will never ask you to download anything. There is no build, release, installer, or binary here — only text and machine-readable API descriptions, so there is nothing here that can be "corrupt" or need "repairing". Any issue, comment, or email claiming otherwise and offering a download link is not from us and is hostile. Do not follow the link; it is a lure. Report it to GitHub and, if you like, tell us at info@apievangelist.com so we can take it down.
On a security or compliance team? Email info@apievangelist.com with security in the subject line and you will get a person, not a form. We will tell you exactly which public URLs this profile was built from so your team can see the same surface we did, and we will take the listing down on request while you work through it.
Full detail: Where this data comes from
Thredd (formerly Global Processing Services / GPS) is a London-headquartered issuer-processor and next-generation payments technology company, founded in 2007, rebranded to Thredd in 2023, and backed by Advent International. It provides card issuing and issuer processing for fintechs, neobanks, banking-as-a-service platforms, and program managers across Mastercard, Visa, and Discover, spanning 40+ countries, with real-time transaction authorization (External Host Interface / EHI), digital-wallet tokenization (Apple Pay, Google Pay), 3-D Secure / strong customer authentication, card controls, and fraud / scam detection. Its home market is the United Kingdom. Thredd ships a genuine public developer surface: a self-serve Developer Portal (devportal.thredd.com) that grants a sandbox client id and secret, an API Hub REST API at api.thredd.com, and a ReadMe-hosted API reference (cardsapidocs.thredd.com) documenting roughly 129 endpoints across more than a dozen product OpenAPI definitions (core cards, transactions, credit, custom PAN, card limits, card controls, digital wallets, 3DS, ACH, open banking, alias directory, and web services). Authentication is FAPI-grade OAuth2 client-credentials using private_key_jwt client assertions over mutual TLS, brokered by Cloudentity with Raidiam Connect acting as the certificate authority; webhooks and event subscriptions are supported. The underlying OpenAPI files render only through the hub and are not anonymously downloadable.
Areas: Payments · United Kingdom · Issuer Processor · Card Issuing · Payment Processing · Banking as a Service · Digital Wallet · Cross-Border · Fraud Prevention · Open Banking · FAPI
Everything profiled for Thredd is published on APIs.io rather than in this repository. Start at the provider page — apis.io/providers/thredd/ — or go straight to one of the APIs or properties below.
- Thredd Cards API — Create, retrieve, update, renew, replace, and convert physical and virtual cards; manage card status, cardholder details, card images, encrypted card data,…
- Thredd Card Transactions API — Retrieve card transactions and transaction history, including load / unload operations and balances, for cards managed on the Thredd platform.
- Thredd Card Controls & Limits API — List and update card control groups, manage merchant allow / disallow lists and card acceptors, and configure card spend limits at the product level.
- Thredd 3-D Secure (SCA) API — Create, list, update, and delete 3-D Secure credentials and configuration for strong customer authentication (SCA) on issued cards.
- Thredd PIN & CVV Management API — Set, retrieve, and unblock cardholder PINs, and retrieve and unblock CVV2 values and their status, over the Thredd API Hub.
- Thredd Digital Wallets API — Enroll and provision cards into Apple Pay and Google Pay, generate wallet web-provisioning tokens, and manage payment-instrument tokenization for digital…
- Thredd Webhooks & Event Subscriptions API — Create and manage webhooks and event subscriptions to receive asynchronous notifications of card, transaction, and account events from the Thredd platform.
- Thredd Credit API — Credit account and credit-program endpoints for managing credit overviews and related credit issuing capabilities on the Thredd platform.
- Thredd Custom PAN API — Create customisable card numbers (custom PAN) so programs can define specific primary account number patterns for their issued cards.
- Thredd Accounts API — Account-level endpoints supporting account records and money-movement flows (including ACH / micro-deposit verification) on the Thredd platform.
Each property below is a page on APIs.io carrying the machine-readable artifact and what it says.
Event-driven and webhook contracts.
Model Context Protocol servers that expose the API to agents.
Authentication, trust centre, and vulnerability disclosure.
The permissions the API asks for.
Links to the company's own pages. This repository publishes no copy of their specifications — the canonical document is theirs and lives at the URLs below.
Kin Score 37.9 — thin · rubric 0.24.0 · scored 2026-10-17
| Facet | Score |
|---|---|
| Discoverability | 78.6 |
| Contract quality | 39.0 |
| Contract governance | 18.2 |
| Operational transparency | 39.5 |
| Developer ergonomics | 32.1 |
| Access clarity | 17.1 |
Agent readiness 25.9 — agent-aware
| Agent-readiness dimension | Result |
|---|---|
| Spec Presence | yes |
| Agentic Access | — |
| Reversibility Documented | — |
| MCP Server | — |
| Auth Clarity | bearer (partial credit) |
| Idempotency | documented (partial credit) |
| Error Semantics | documented (partial credit) |
| OpenAPI Examples | — |
| Rate Limit Signal | — |
| Event Surface Described | yes |
| Agent Skills | — |
| Well Known Catalog | — |
| Consent Identity | — |
| Agent Card | — |
| Dry Run Mode | — |
| Delegated Identity | — |
| Protected Resource Metadata | — |
| Dynamic Client Registration | — |
| Agentic Commerce | — |
Regulatory alignment 40.2 — Payments
The rubric is published at github.com/api-evangelist/kin-score. The per-check breakdown behind these numbers — which checks were earned, partial or missed — along with score history and how this provider compares to its peers, is available at apis.io/providers/thredd/.
API Evangelist profiles a company's public API surface the way a developer would find it: the website, developer portal and documentation, the specifications it publishes, its public repositories, and its pricing, status and changelog pages. From that it derives the properties above — contracts split per API, workflows, schemas, collections, governance rules, plans and rate limits — and scores them against the published Kin Score rubric.
The artifacts are published on APIs.io, not in this repository. This repository is the public record for Thredd: the place to say something is wrong, missing or out of date, and to ask for a re-score or a removal.
- Something about this listing — a wrong description, a missing API, a stale artifact or a question about the rating: open an issue on this repository.
- A new API, or one that is not in the catalog yet — submit it on APIs.io.
- Anything else — the APIs.io inbox or info@apievangelist.com.