The API Report CardAPI Index
SumUp

SumUp API

Mobile Card Reader & SMB Payment Processing · sumup.com

SumUp publishes a REST API at developer.sumup.com covering checkouts, transactions, payouts, readers, and merchants, open to any merchant with a developer account. Auth is API keys or OAuth 2.0, with official SDKs in seven languages. Banking surfaces like Business Account stay walled off.

Last verified: July 2026Financial Services
API GRADE
A
VERIFIED JUL 2026

SCORECARD

ExistenceGOODDocumented REST API at api.sumup.com covering checkouts, transactions, payouts, readers, and merchants.
AccessGOODOpen to any merchant who creates a developer account; no tier gating on the core API.
CoverageGOODCheckouts, transactions, payouts, and reader control; banking products like Business Account are not in the public API.
AuthGOODAPI keys (sk_test and sk_live) or OAuth 2.0 over HTTPS; scope and token lifecycle docs are thin.
Docs & DXGOODOfficial SDKs in seven languages, sandbox merchant mode, and transaction webhooks; sandbox does not fully simulate APMs.
StabilityGOOD
MORE FROM THE REPORT CARD
Supergood: SumUp shipped a real API. Most vendors don't; we ship near-native APIs for the rest.

Frequently asked questions

SumUp scores A on the API Report Card. SumUp publishes a REST API at developer.sumup.com covering checkouts, transactions, payouts, readers, and merchants, open to any merchant with a developer account. Auth is API keys or OAuth 2.0, with official SDKs in seven languages. Banking surfaces like Business Account stay walled off.

Tried to integrate with SumUp?
SOURCES
Rate-limit thresholds are not published, developers only learn limits via 429s in production developer.sumup.com
Webhook coverage is mostly transaction/checkout events; no first-class events for Business Account ledger movements or payout-status changes documented developer.sumup.com
The Business Account / SumUp Wealth / SumUp Pay surfaces are largely walled off from the public API, the open API mostly covers card acceptance, not banking developer.sumup.com
OAuth scopes and token lifecycle are thinly documented vs. Stripe/Adyen equivalents apitracker.io
Sandbox does not fully simulate APMs (iDEAL, Boleto, Apple/Google Pay) the way production does developer.sumup.com
Sudden account freezes and terminations with limited explanation, and funds withheld for up to 60 days as 'chargeback protection' trustpilot.com
Customer service is chat-only, slow, and hard to escalate to a human when payouts are blocked cardpaymentoptions.com
Recurring outages on card processing, 684+ outages logged over ~3 years, plus Nov 2025 and May 2026 incidents with elevated failures isdown.app
Card readers are Wi-Fi/Bluetooth dependent and unpair frequently; setup is not intuitive for non-technical merchants trustpilot.com
Funds-held-for-security-checks delays merchants from accessing their own takings cardpaymentoptions.com
Pricing 'no monthly fees' marketing obscures higher per-transaction rates than tiered competitors for higher-volume merchants creative.onl