# Deluxe Corporation

> Deluxe Corporation (NYSE: DLX) is a US payments and data company. Its developer surface is the
> Deluxe Payments Platform (DPP) — a card, ACH/EFT, invoicing and reporting gateway sold to
> independent software vendors and merchants. This file was generated by API Evangelist from the
> contracts and documentation Deluxe publishes; it is NOT served by Deluxe. Deluxe serves no
> llms.txt of its own (https://developer.deluxe.com/llms.txt returns the portal's SPA HTML shell,
> not a document).

Generated: 2026-08-13
Method: generated
Source: https://developer.deluxe.com/, https://docs.deluxe.com/, and the artifacts in this repository
Profile: https://apis.io/deluxe

## What the API does

- Card payments: sale, authorize, capture, void, refund, batch, tip adjust, Level 2 / Level 3 data
- ACH / EFT: debit, credit, account verification, batch, reject handling
- Card present: EMV cloud-to-device processing on Ingenico Tetra terminals
- Customer vault: stored customers, stored instruments, tokens, cryptograms, network tokens
- Recurring billing: subscriptions
- Payment links and hosted / embedded payment forms
- Invoicing: draft, edit, share, clone, download, configuration
- Reporting: daily card and ACH settlement, monthly fee statements, authorized / captured / settled
  transaction reports
- Webhooks: eight event types with subscribe, unsubscribe, resend, report and test-fire operations

## Access

- Base URL (production): https://api.deluxe.com/dpp/v1  (legacy alternate: /dpp/v1/gateway)
- Base URL (sandbox): https://sandbox.api.deluxe.com/dpp/v1
- Auth: OAuth 2.0 bearer token in the Authorization header, plus a required partnerToken GUID header
- Token lifetime: 60 minutes; refresh at 45 minutes
- Credentials: NOT self-serve. Email isvinquiries@deluxe.com to request a Client ID and Client Secret.
- Pricing: none published. Merchant agreement, sales-gated.

## Contracts in this repository

- openapi/deluxe-dpp-gateway-openapi.yml — 37 operations (derived from Deluxe's published RAML)
- openapi/deluxe-dpp-reports-openapi.yml — 8 operations (derived from Deluxe's published RAML)
- openapi/deluxe-dpp-invoices-openapi.yml — 11 operations (derived from Deluxe's published RAML)
- openapi/deluxe-postman-sandbox-openapi.yml — OpenAPI 3.0.0 published verbatim by Deluxe on Stoplight
- raml/ — the six RAML 1.0 documents Deluxe actually publishes, saved verbatim

## Runtime semantics an agent must know

- Business failures return **HTTP 200** with a non-zero `responseCode` in the body. Do not read the
  HTTP status to decide whether a payment succeeded.
- 57 published gateway/issuer response codes; 30 share the identical masked message "REQUEST DECLINED!".
- **No idempotency mechanism exists.** No idempotency header on createPayment, createRefund or any
  batch operation. Never auto-retry a money-moving POST — call searchPayments with your own orderId
  instead.
- **No rate limits are published** and no RateLimit-* / Retry-After headers are documented.
- **No webhook signature or shared secret** is documented. Re-fetch state from the API rather than
  trusting a webhook body.
- Reporting dates are MM/DD/YYYY, not ISO 8601.
- Pagination is `page`/`pageSize` on reports but `pageNumber`/`pageSize` in the invoice-search body.
- Identifiers are bare GUIDs with no type prefix.
- No deprecation policy, no Sunset header, no public status page, and an empty Release Notes page.

## Agent skills in this repository

- skills/deluxe-authenticate.md
- skills/deluxe-take-a-card-payment.md
- skills/deluxe-vault-a-customer.md
- skills/deluxe-subscribe-to-events.md
- skills/deluxe-pull-settlement-reports.md
- skills/deluxe-issue-an-invoice.md

## Agent surfaces Deluxe does NOT ship

- No MCP server (no hosted endpoint, no stdio package)
- No A2A agent card (/.well-known/agent-card.json and /.well-known/agent.json probed on six hosts)
- No llms.txt
- No /.well-known/ document of any kind
- No first-party SDK in npm, PyPI, RubyGems, NuGet or Packagist

## Links

- Developer portal: https://developer.deluxe.com/
- API reference: https://developer.deluxe.com/api-ref/merchant-services/payments
- Developer guides (legacy, Stoplight): https://docs.deluxe.com/
- Error codes: https://docs.deluxe.com/docs/deluxe-payments-platform/en4e8l7er7ckt-error-codes
- Test data: https://docs.deluxe.com/docs/deluxe-payments-platform/h259yvmvb1zg4-test-data
- Company: https://www.deluxe.com/
- Merchant services: https://www.deluxe.com/merchant-services/
- Privacy policy: https://www.deluxe.com/policy/privacy/