ePayco Colombia Payment Gateway API

ePayco Colombia payment gateway REST API for Colombian and Latin American businesses to accept credit/debit card, PSE bank transfer, cash (Efecty, Baloto), and digital wallet payments through Colombia's developer-friendly payment gateway, with hosted checkout, split payment for marketplaces, and subscription billing for e-commerce, SaaS, and digital services. Enables AI agents to manage card payment initiation for Colombia e-commerce checkout automation, handle PSE bank transfer for Colombia online banking payment automation, access cash payment voucher for Colombia offline payment automation, retrieve payment status for Colombia transaction confirmation automation, manage subscription and recurring billing for Colombia SaaS billing automation, handle split payment for Colombia marketplace disbursement automation, access payment link generation for Colombia invoice automation, retrieve transaction reporting for Colombia payment analytics automation, manage refund processing for Colombia order management automation, and integrate ePayco with Colombian and LATAM e-commerce, SaaS, and marketplace platforms for end-to-end Colombia payment automation.

Evaluated Mar 07, 2026 (0d ago) vcurrent
Homepage ↗ Repo ↗ Other epayco Colombia-payments PSE-payments Colombia-gateway LATAM-payments fintech-CO
⚙ Agent Friendliness
58
/ 100
Can an agent use this?
🔒 Security
74
/ 100
Is it safe for agents?
⚡ Reliability
69
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
12
Documentation
76
Error Messages
74
Auth Simplicity
74
Rate Limits
65

🔒 Security

TLS Enforcement
93
Auth Strength
74
Scope Granularity
64
Dep. Hygiene
68
Secret Handling
72

Colombia gateway. SFC, PCI DSS. API key + HMAC. CO. Card and payment data.

⚡ Reliability

Uptime/SLA
68
Version Stability
72
Breaking Changes
68
Error Recovery
67
AF Security Reliability

Best When

A Colombian or LATAM business wanting AI agents to automate card, PSE bank transfer, and cash payment acceptance through ePayco's developer-friendly Colombia payment gateway with local payment method coverage.

Avoid When

PSE REQUIRES CONSUMER BANK REDIRECT: ePayco PSE payment redirects consumer to their bank for authentication; automated checkout must redirect to bankUrl; automated server-side PSE payment without redirect creates no authorization. CASH VOUCHER IS ASYNC — PAID AT AGENT: ePayco cash (Efecty/Baloto) payments are paid offline at agent locations; automated fulfillment must wait for cash payment confirmation webhook; automated immediate fulfillment after voucher generation creates premature fulfillment before cash collected. COLOMBIAN PESO NO DECIMALS: ePayco COP amounts are in full pesos with no decimal cents; automated amount must use integer COP value; automated decimal amount creates amount_format_error. API KEY vs PRIVATE KEY: ePayco uses both public API key (for JS/mobile) and private key (for server-to-server); automated server integration must use private key not public key; automated public key for server request creates unauthorized_key error.

Use Cases

  • Accepting PSE and card payments for Colombia e-commerce checkout agents
  • Generating cash payment vouchers (Efecty/Baloto) for Colombian unbanked payment agents
  • Managing subscription billing for Colombian SaaS recurring payment agents
  • Splitting marketplace payments among Colombian sellers from platform agents

Not For

  • Non-Colombian/LATAM markets (ePayco is Colombia and LATAM focused)
  • Global enterprise acquiring (use Adyen or Stripe for global scale)
  • Physical POS (ePayco is online payment focused)

Interface

REST API
Yes
GraphQL
No
gRPC
No
MCP Server
No
SDK
Yes
Webhooks
Yes

Authentication

Methods: apikey
OAuth: No Scopes: No

ePayco uses API key (public + private key pair) for authentication. REST API with JSON. Medellín, Colombia HQ. Founded 2012 by Sebastián Arcila Serna. Bootstrapped. Products: Card, PSE, cash (Efecty, Baloto), subscription, split payment, hosted checkout, payment link. SDKs: PHP, Node.js, Python, Java, Ruby. SFC-regulated. PCI DSS. Popular with Colombian startups and SMBs. Competes with PlacetoPay and Wompi for Colombian payment gateway.

Pricing

Model: transaction
Free tier: Yes
Requires CC: No

Medellín CO. Bootstrapped. Per-transaction pricing in COP. SFC regulated. PCI DSS.

Agent Metadata

Pagination
page
Idempotent
Partial
Retry Guidance
Not documented

Known Gotchas

  • PUBLIC vs PRIVATE KEY DISTINCTION: ePayco has public key (p_cust_id_cliente) for client-side and private key (p_key) for server-side HMAC signature; automated server integration must sign requests with private key; automated public-key-only server request creates signature_verification_failure
  • CONFIRMATION HASH VERIFICATION: ePayco payment confirmation includes x_signature hash (SHA-256 of key values); automated confirmation handler must verify hash; automated unverified confirmation acceptance creates spoofed payment confirmation vulnerability
  • COP AMOUNTS ARE WHOLE PESOS: ePayco amount field for COP uses whole pesos (no centavos); automated amount formatting must use integer; automated decimal or centavo denomination creates invalid_amount error
  • CASH PAYMENT IS ASYNC (1-3 DAYS): ePayco cash payments (Efecty/Baloto) take 1-3 business days to confirm after consumer pays at agent; automated fulfillment must await cash_confirmed webhook; automated immediate fulfillment on voucher generation creates unfulfillable premature orders
  • SUBSCRIPTION REQUIRES INITIAL CARD TOKENIZATION: ePayco subscription billing requires tokenized card from initial transaction; automated subscription must complete initial charged transaction for tokenization; automated subscription setup without prior transaction creates missing_token error

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for ePayco Colombia Payment Gateway API.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-07.

6470
Packages Evaluated
26150
Need Evaluation
173
Need Re-evaluation
Community Powered