The API Report CardAPI Index
Cellpoint Digital

Cellpoint Digital API

cellpointdigital.com

Cellpoint's Velocity platform has a documented public payments API over HTTPS with XML bodies, plus iOS and Android SDKs and a hosted payment page. Access is not self-serve: credentials arrive only after a commercial agreement, and there is no public sandbox.

Last verified: July 2026Hospitality & Travel
API GRADE
C
VERIFIED JUL 2026

SCORECARD

ExistenceGOODA documented public API on the Velocity platform: XML over HTTPS covering Initialize, Authorize, Pay, Capture, Reversal, and Refund.
AccessMIXEDDocs are public, but credentials are provisioned manually after a commercial agreement; no sandbox signup.
CoverageMIXEDFull payment lifecycle plus 3DS2, Pay-By-Link, and APMs like Pix; the 2025 OSO platform adds a second surface to target.
AuthMIXEDHTTP Basic plus a custom SHA-256 body-hash token; whitespace normalization bugs surface as hard-to-debug 401s.
Docs & DXGOODPublic docs cover payments, webhooks, and 3DS, with native iOS and Android SDKs and a hosted payment page.
StabilityMIXEDNo prominent versioning or changelog, and the OSO successor platform signals a migration ahead for Velocity integrators.
MORE FROM THE REPORT CARD
Supergood: Cellpoint Digital has an API, with gaps. We cover what it's missing: stable endpoints, normalized JSON, managed auth.

Frequently asked questions

Cellpoint Digital scores C on the API Report Card. Cellpoint's Velocity platform has a documented public payments API over HTTPS with XML bodies, plus iOS and Android SDKs and a hosted payment page. Access is not self-serve: credentials arrive only after a commercial agreement, and there is no public sandbox.

Tried to integrate with Cellpoint Digital?
SOURCES
API is XML-based at a time when virtually every modern payments API (Stripe, Adyen, Checkout.com, Braintree, Primer) is REST/JSON, increases integration effort for engineers who haven't written XML payment code in a decade documentation.cellpointdigital.com
Custom HMAC scheme (`x-cpm-sec-token` = SHA-256 of whitespace-stripped body + Cellpoint-issued salt) is non-standard; bugs in body normalization (e.g., whitespace, encoding) silently produce 401s that are hard to debug documentation.cellpointdigital.com
No self-serve sandbox, credentials (API username, password, ClientID, Account, HMAC salt) are provisioned manually after a commercial agreement, blocking exploratory integration work documentation.cellpointdigital.com
OSO (2025) introduces a second platform alongside Velocity; merchants and integrators must reason about which surface to build against and plan a migration prnewswire.com
Pay-By-Link and Deactivate-PBL operations break the otherwise-uniform XML payload pattern, requiring per-endpoint serialization logic documentation.cellpointdigital.com
Webhook signature verification is optional and lightly documented; common asynchronous-payment failure modes (delivery retries, replay, ordering) are not specified in detail documentation.cellpointdigital.com
Documentation portal periodically returns 503s under load (observed during this audit), slower to navigate than first-party Stripe / Adyen docs documentation.cellpointdigital.com
No published OpenAPI / WSDL spec or first-party server SDKs (Node / Python / Go / Java / Ruby), integrators hand-roll HTTP + XML clients cellpointdigital.com
No public rate-limit documentation, limits are negotiated per merchant in the commercial agreement documentation.cellpointdigital.com
Orchestration-layer object model (Initialize → Authorize → Capture → Reversal) maps awkwardly to Stripe/Adyen's PaymentIntent / Charge model, complicating any multi-processor abstraction documentation.cellpointdigital.com
Public reviews and complaint volume are thin, Cellpoint sells via enterprise sales to a small set of large airlines, so there is no SMB/self-serve community generating reviews on G2 / Trustpilot / BBB getapp.com
Employee reviews (Glassdoor 3.8/5, 57 reviews) cite internal communication, management changes and pace-of-change concerns following multiple platform rewrites (Velocity → OSO) glassdoor.com
2025 launch of OSO (One Source Orchestration) introduces a parallel platform alongside Velocity that existing customers will need to migrate to, creating a transitional-architecture window prnewswire.com
Pricing is fully opaque (custom enterprise contracts only), no published rate card, no self-serve signup, prospects must contact sales for any quote cellpointdigital.com
Smaller scale vs. horizontal incumbents (~$8B processed vs. Stripe's $1.9T, Adyen's €1.3T) means less leverage with networks / acquirers on fee negotiation for very large merchants prnewswire.com
Heavy dependence on a small set of named airline logos (Avianca, Cebu Pacific, Southwest, Icelandair) creates concentration risk in the customer base cellpointdigital.com