aid: bykea
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/bykea.png
name: Bykea
description: >-
  Bykea is a Karachi-based Pakistani mobility and logistics super-app that
  offers app-hailed motorbike rides, on-demand parcel and food delivery, cash
  pickup and drop-off, and digital payments across major Pakistani cities. It
  connects a large network of motorbike captains with riders and merchants,
  positioning itself as a low-cost transport, last-mile logistics, and financial
  services platform for the mass market. Backed by Prosus Ventures (Naspers),
  Bykea was added to the API Evangelist network as a mobility-sector portfolio
  lead; this profile has been enriched with the provider's public security
  surface (a live RFC 9116 security.txt and a HackerOne bug bounty program) and
  domain-security posture. No public developer portal, OpenAPI, or partner API
  documentation is exposed - the primary web surface sits behind Cloudflare bot
  protection.
url: https://raw.githubusercontent.com/api-evangelist/bykea/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- prosus-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Mobility
- Logistics
- Delivery
- Ride Hailing
- Payments
- Pakistan
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: SecurityTxt
  url: well-known/bykea-security.txt
- type: WellKnown
  url: well-known/bykea-well-known.yml
- type: VulnerabilityDisclosure
  url: security/bykea-vulnerability-disclosure.yml
- type: Security
  url: https://bykea.com/security
- type: DomainSecurity
  url: security/bykea-domain-security.yml
- type: Website
  url: https://bykea.com
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence