Amazon Payment Cryptography
AWS Payment Cryptography is a managed service that makes it easy to build and maintain payment processing applications by providing cloud-based cryptographic capabilities. It enables you to perform cryptographic operations required by payment card industry standards without managing hardware security modules.
Solid contracts, transparent operations, and an easy start — typically complete on four or five facets with one clear soft spot.
API Evangelist profiles Amazon Payment Cryptography the way a machine reads it — 316 machine-readable artifacts across 20 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Amazon Payment Cryptography scores 69.9/100 (strong), with a separate agent-readiness read of 48/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Amazon Payment Cryptography
Each block below is one kind of artifact we hold for Amazon Payment Cryptography. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 20
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.CreateAlias API
The #X Amz Target=PaymentCryptographyControlPlane.CreateAlias API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.createalias.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.CreateKey API
The #X Amz Target=PaymentCryptographyControlPlane.CreateKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.createkey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.DeleteAlias API
The #X Amz Target=PaymentCryptographyControlPlane.DeleteAlias API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.deletealias.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.DeleteKey API
The #X Amz Target=PaymentCryptographyControlPlane.DeleteKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.deletekey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.ExportKey API
The #X Amz Target=PaymentCryptographyControlPlane.ExportKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.exportkey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.GetAlias API
The #X Amz Target=PaymentCryptographyControlPlane.GetAlias API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.getalias.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.GetKey API
The #X Amz Target=PaymentCryptographyControlPlane.GetKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.getkey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.GetParametersForExport API
The #X Amz Target=PaymentCryptographyControlPlane.GetParametersForExport API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane....
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.GetParametersForImport API
The #X Amz Target=PaymentCryptographyControlPlane.GetParametersForImport API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane....
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.GetPublicKeyCertificate API
The #X Amz Target=PaymentCryptographyControlPlane.GetPublicKeyCertificate API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane...
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.ImportKey API
The #X Amz Target=PaymentCryptographyControlPlane.ImportKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.importkey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.ListAliases API
The #X Amz Target=PaymentCryptographyControlPlane.ListAliases API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.listaliases.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.ListKeys API
The #X Amz Target=PaymentCryptographyControlPlane.ListKeys API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.listkeys.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.ListTagsForResource API
The #X Amz Target=PaymentCryptographyControlPlane.ListTagsForResource API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.lis...
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.RestoreKey API
The #X Amz Target=PaymentCryptographyControlPlane.RestoreKey API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.restorekey.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.StartKeyUsage API
The #X Amz Target=PaymentCryptographyControlPlane.StartKeyUsage API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.startkeyu...
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.StopKeyUsage API
The #X Amz Target=PaymentCryptographyControlPlane.StopKeyUsage API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.stopkeyusage.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.TagResource API
The #X Amz Target=PaymentCryptographyControlPlane.TagResource API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.tagresource.
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.UntagResource API
The #X Amz Target=PaymentCryptographyControlPlane.UntagResource API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.untagreso...
Amazon Payment Cryptography #X Amz Target=PaymentCryptographyControlPlane.UpdateAlias API
The #X Amz Target=PaymentCryptographyControlPlane.UpdateAlias API from Amazon Payment Cryptography — 1 operation(s) for #x amz target=paymentcryptographycontrolplane.updatealias.
Scroll within the panel for all 20 ·
Open Collections 1
Open, tool-agnostic collections carry the same runnable value as Postman without locking you to one client — the portable, forkable form of the same exercise.
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
Payment Cryptography Control Plane
OPEN COLLECTIONPricing Plans 1
Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the six things the Kin Score reads for commercial clarity.
Published pricing tiers and plan structures.
Rate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Amazon Payment Cryptography Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals let a buyer model the financial operations of an API before it's live. We profile them for the same reason we profile pricing: the money is part of the contract.
Cost, billing, and metering signals for API financial operations.
Semantic Vocabularies 1
JSON-LD contexts give the data shared meaning across APIs. We profile them because semantics are what let a machine reconcile 'customer' here with 'customer' somewhere else.
JSON-LD contexts and semantic vocabularies used across these APIs.
Spectral Rules 2
Governance rulesets we run against this provider's specs — the automated checks behind parts of the score. Profiling them makes the quality bar explicit and re-runnable, not a matter of opinion.
JSON Schema 96
Standalone JSON Schema definitions describe the data models behind the API. We profile them so the shapes are validatable on their own — useful long after a single request is forgotten.
Standalone JSON Schema definitions for this provider's data models.
AccessDeniedException
JSON SCHEMAAliasName
JSON SCHEMAAlias
JSON SCHEMAAliases
JSON SCHEMABoolean
JSON SCHEMACertificateType
JSON SCHEMAConflictException
JSON SCHEMACreateAliasInput
JSON SCHEMACreateAliasOutput
JSON SCHEMACreateKeyInput
JSON SCHEMACreateKeyOutput
JSON SCHEMADeleteAliasInput
JSON SCHEMADeleteAliasOutput
JSON SCHEMADeleteKeyInputDeleteKeyInDaysInteger
JSON SCHEMADeleteKeyInput
JSON SCHEMADeleteKeyOutput
JSON SCHEMAExportKeyInput
JSON SCHEMAExportKeyMaterial
JSON SCHEMAExportKeyOutput
JSON SCHEMAExportTokenId
JSON SCHEMAExportTr31KeyBlock
JSON SCHEMAExportTr34KeyBlock
JSON SCHEMAGetAliasInput
JSON SCHEMAGetAliasOutput
JSON SCHEMAGetKeyInput
JSON SCHEMAGetKeyOutput
JSON SCHEMAGetParametersForExportInput
JSON SCHEMAGetParametersForExportOutput
JSON SCHEMAGetParametersForImportInput
JSON SCHEMAGetParametersForImportOutput
JSON SCHEMAGetPublicKeyCertificateInput
JSON SCHEMAGetPublicKeyCertificateOutput
JSON SCHEMAHexLength16
JSON SCHEMAImportKeyInput
JSON SCHEMAImportKeyMaterial
JSON SCHEMAImportKeyOutput
JSON SCHEMAImportTokenId
JSON SCHEMAImportTr31KeyBlock
JSON SCHEMAImportTr34KeyBlock
JSON SCHEMAInternalServerException
JSON SCHEMAKeyAlgorithm
JSON SCHEMAKeyArnOrKeyAliasType
JSON SCHEMAKeyArn
JSON SCHEMAKeyAttributes
JSON SCHEMAKeyCheckValueAlgorithm
JSON SCHEMAKeyCheckValue
JSON SCHEMAKeyClass
JSON SCHEMAKeyMaterial
JSON SCHEMAKeyMaterialType
JSON SCHEMAKeyModesOfUse
JSON SCHEMAKeyOrigin
JSON SCHEMAKey
JSON SCHEMAKeyState
JSON SCHEMAKeySummaryList
JSON SCHEMAKeySummary
JSON SCHEMAKeyUsage
JSON SCHEMAListAliasesInput
JSON SCHEMAListAliasesOutput
JSON SCHEMAListKeysInput
JSON SCHEMAListKeysOutput
JSON SCHEMAListTagsForResourceInput
JSON SCHEMAListTagsForResourceOutput
JSON SCHEMAMaxResults
JSON SCHEMANextToken
JSON SCHEMAPrimitiveBoolean
JSON SCHEMAResourceArn
JSON SCHEMAResourceNotFoundException
JSON SCHEMARestoreKeyInput
JSON SCHEMARestoreKeyOutput
JSON SCHEMARootCertificatePublicKey
JSON SCHEMAServiceQuotaExceededException
JSON SCHEMAServiceUnavailableException
JSON SCHEMAStartKeyUsageInput
JSON SCHEMAStartKeyUsageOutput
JSON SCHEMAStopKeyUsageInput
JSON SCHEMAStopKeyUsageOutput
JSON SCHEMATagKey
JSON SCHEMATagKeys
JSON SCHEMATagResourceInput
JSON SCHEMATagResourceOutput
JSON SCHEMATag
JSON SCHEMATagValue
JSON SCHEMATags
JSON SCHEMAThrottlingException
JSON SCHEMATimestamp
JSON SCHEMATr31WrappedKeyBlock
JSON SCHEMATr34KeyBlockFormat
JSON SCHEMATr34WrappedKeyBlock
JSON SCHEMATrustedCertificatePublicKey
JSON SCHEMAUntagResourceInput
JSON SCHEMAUntagResourceOutput
JSON SCHEMAUpdateAliasInput
JSON SCHEMAUpdateAliasOutput
JSON SCHEMAValidationException
JSON SCHEMAWrappedKeyMaterialFormat
JSON SCHEMAWrappedKey
JSON SCHEMAScroll within the panel for all 96 ·
JSON Structure 96
JSON Structure captures the data shapes in a form built for tooling — a complement to JSON Schema that keeps the model machine-legible.
JSON Structure definitions describing this provider's data shapes.
Openapi Access Denied Exception Structure
JSON STRUCTUREOpenapi Alias Name Structure
JSON STRUCTUREOpenapi Alias Structure
JSON STRUCTUREOpenapi Aliases Structure
JSON STRUCTUREOpenapi Boolean Structure
JSON STRUCTUREOpenapi Certificate Type Structure
JSON STRUCTUREOpenapi Conflict Exception Structure
JSON STRUCTUREOpenapi Create Alias Input Structure
JSON STRUCTUREOpenapi Create Alias Output Structure
JSON STRUCTUREOpenapi Create Key Input Structure
JSON STRUCTUREOpenapi Create Key Output Structure
JSON STRUCTUREOpenapi Delete Alias Input Structure
JSON STRUCTUREOpenapi Delete Alias Output Structure
JSON STRUCTUREOpenapi Delete Key Input Structure
JSON STRUCTUREOpenapi Delete Key Output Structure
JSON STRUCTUREOpenapi Export Key Input Structure
JSON STRUCTUREOpenapi Export Key Material Structure
JSON STRUCTUREOpenapi Export Key Output Structure
JSON STRUCTUREOpenapi Export Token Id Structure
JSON STRUCTUREOpenapi Export Tr31 Key Block Structure
JSON STRUCTUREOpenapi Export Tr34 Key Block Structure
JSON STRUCTUREOpenapi Get Alias Input Structure
JSON STRUCTUREOpenapi Get Alias Output Structure
JSON STRUCTUREOpenapi Get Key Input Structure
JSON STRUCTUREOpenapi Get Key Output Structure
JSON STRUCTUREOpenapi Get Parameters For Export Input Structure
JSON STRUCTUREOpenapi Get Parameters For Export Output Structure
JSON STRUCTUREOpenapi Get Parameters For Import Input Structure
JSON STRUCTUREOpenapi Get Parameters For Import Output Structure
JSON STRUCTUREOpenapi Get Public Key Certificate Input Structure
JSON STRUCTUREOpenapi Get Public Key Certificate Output Structure
JSON STRUCTUREOpenapi Hex Length16 Structure
JSON STRUCTUREOpenapi Import Key Input Structure
JSON STRUCTUREOpenapi Import Key Material Structure
JSON STRUCTUREOpenapi Import Key Output Structure
JSON STRUCTUREOpenapi Import Token Id Structure
JSON STRUCTUREOpenapi Import Tr31 Key Block Structure
JSON STRUCTUREOpenapi Import Tr34 Key Block Structure
JSON STRUCTUREOpenapi Internal Server Exception Structure
JSON STRUCTUREOpenapi Key Algorithm Structure
JSON STRUCTUREOpenapi Key Arn Or Key Alias Type Structure
JSON STRUCTUREOpenapi Key Arn Structure
JSON STRUCTUREOpenapi Key Attributes Structure
JSON STRUCTUREOpenapi Key Check Value Algorithm Structure
JSON STRUCTUREOpenapi Key Check Value Structure
JSON STRUCTUREOpenapi Key Class Structure
JSON STRUCTUREOpenapi Key Material Structure
JSON STRUCTUREOpenapi Key Material Type Structure
JSON STRUCTUREOpenapi Key Modes Of Use Structure
JSON STRUCTUREOpenapi Key Origin Structure
JSON STRUCTUREOpenapi Key State Structure
JSON STRUCTUREOpenapi Key Structure
JSON STRUCTUREOpenapi Key Summary List Structure
JSON STRUCTUREOpenapi Key Summary Structure
JSON STRUCTUREOpenapi Key Usage Structure
JSON STRUCTUREOpenapi List Aliases Input Structure
JSON STRUCTUREOpenapi List Aliases Output Structure
JSON STRUCTUREOpenapi List Keys Input Structure
JSON STRUCTUREOpenapi List Keys Output Structure
JSON STRUCTUREOpenapi List Tags For Resource Input Structure
JSON STRUCTUREOpenapi List Tags For Resource Output Structure
JSON STRUCTUREOpenapi Max Results Structure
JSON STRUCTUREOpenapi Next Token Structure
JSON STRUCTUREOpenapi Primitive Boolean Structure
JSON STRUCTUREOpenapi Resource Arn Structure
JSON STRUCTUREOpenapi Resource Not Found Exception Structure
JSON STRUCTUREOpenapi Restore Key Input Structure
JSON STRUCTUREOpenapi Restore Key Output Structure
JSON STRUCTUREOpenapi Root Certificate Public Key Structure
JSON STRUCTUREOpenapi Service Quota Exceeded Exception Structure
JSON STRUCTUREOpenapi Service Unavailable Exception Structure
JSON STRUCTUREOpenapi Start Key Usage Input Structure
JSON STRUCTUREOpenapi Start Key Usage Output Structure
JSON STRUCTUREOpenapi Stop Key Usage Input Structure
JSON STRUCTUREOpenapi Stop Key Usage Output Structure
JSON STRUCTUREOpenapi Tag Key Structure
JSON STRUCTUREOpenapi Tag Keys Structure
JSON STRUCTUREOpenapi Tag Resource Input Structure
JSON STRUCTUREOpenapi Tag Resource Output Structure
JSON STRUCTUREOpenapi Tag Structure
JSON STRUCTUREOpenapi Tag Value Structure
JSON STRUCTUREOpenapi Tags Structure
JSON STRUCTUREOpenapi Throttling Exception Structure
JSON STRUCTUREOpenapi Timestamp Structure
JSON STRUCTUREOpenapi Tr31 Wrapped Key Block Structure
JSON STRUCTUREOpenapi Tr34 Key Block Format Structure
JSON STRUCTUREOpenapi Tr34 Wrapped Key Block Structure
JSON STRUCTUREOpenapi Trusted Certificate Public Key Structure
JSON STRUCTUREOpenapi Untag Resource Input Structure
JSON STRUCTUREOpenapi Untag Resource Output Structure
JSON STRUCTUREOpenapi Update Alias Input Structure
JSON STRUCTUREOpenapi Update Alias Output Structure
JSON STRUCTUREOpenapi Validation Exception Structure
JSON STRUCTUREOpenapi Wrapped Key Material Format Structure
JSON STRUCTUREOpenapi Wrapped Key Structure
JSON STRUCTUREScroll within the panel for all 96 ·
Examples 92
Real request and response payloads are what turn a spec from abstract into obvious — and they're one of the twelve things an agent needs to call an API correctly on the first try.
Example request and response payloads for these APIs.
Openapi Alias Example
EXAMPLEOpenapi Alias Name Example
EXAMPLEOpenapi Boolean Example
EXAMPLEOpenapi Hex Length16 Example
EXAMPLEOpenapi Key Arn Example
EXAMPLEOpenapi Key Class Example
EXAMPLEOpenapi Key Example
EXAMPLEOpenapi Key Material Example
EXAMPLEOpenapi Key Origin Example
EXAMPLEOpenapi Key State Example
EXAMPLEOpenapi Key Summary Example
EXAMPLEOpenapi Key Usage Example
EXAMPLEOpenapi Max Results Example
EXAMPLEOpenapi Next Token Example
EXAMPLEOpenapi Resource Arn Example
EXAMPLEOpenapi Tag Example
EXAMPLEOpenapi Tag Key Example
EXAMPLEOpenapi Tag Value Example
EXAMPLEOpenapi Timestamp Example
EXAMPLEOpenapi Wrapped Key Example
EXAMPLEScroll within the panel for all 92 ·
Security Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Resources
Every other property we hold for Amazon Payment Cryptography — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 6
Reference material describing how the API behaves
Agent Surfaces 1
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 3
Pagination, idempotency, versioning, errors, and events
Build 1
SDKs, sample code, and the tooling you integrate with
Access & Security 4
Authentication, authorization, and security posture
Operate 3
Status, limits, changes, and where to get help
Commercial 2
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
← All providers · Data indexed from github.com/api-evangelist/amazon-payment-cryptography · machine-readable index on apis.io