# Xapo

> Xapo Bank is a members-only, Gibraltar-regulated private bank and Bitcoin custodian (founded 2013). Members earn interest on Bitcoin and USD, borrow against Bitcoin, invest in US stocks, and transact globally — all app-only. Xapo Bank publishes no public developer API or portal today; its legacy Bitcoin Wallet API (developers.xapo.com) was retired. Regulated by the GFSC: Xapo Bank Limited as a credit institution (No. 23171), Xapo VASP Limited as a DLT Provider (No. 26061). Publishes SOC 2 Type II / SOC 3, PCI DSS, and GDPR compliance claims.

Generated by API Evangelist from apis.yml and repo artifacts; Xapo publishes no /llms.txt of its own (404 as of 2026-07-21).

## Company

- [Website](https://www.xapobank.com/en): Xapo Bank homepage
- [About Us](https://www.xapobank.com/en/company/about-us): company background
- [Membership](https://www.xapobank.com/en/membership): membership pricing (USD $1000/year) and application
- [Sign Up](https://application.xapobank.com/membership-application): membership application flow
- [Help Hub](https://www.xapobank.com/en/help): FAQs and resources
- [Support](https://www.xapobank.com/en/contact): contact
- [The Xapo Insider](https://www.xapobank.com/en/insider): blog ([RSS](https://www.xapobank.com/feed.xml))

## Security & Compliance

- [Our Security System](https://www.xapobank.com/en/company/our-security-system): custody model, SOC 2 Type II / SOC 3, PCI DSS, GDPR badges
- [Compliance](https://www.xapobank.com/en/company/compliance): GFSC regulation details
- [Responsible Disclosure Policy](https://legal.xapobank.com/misc/responsible-disclosure-policy): vulnerability disclosure
- [security.txt](https://www.xapobank.com/.well-known/security.txt): RFC 9116, PGP-signed
- [Website Terms of Use](https://legal.xapobank.com/misc/website-terms-use)
- [Privacy Notice](https://legal.xapobank.com/privacy/privacy-notice)

## APIs

Xapo Bank exposes no public developer API. Legacy hosts (developers.xapo.com, docs.xapo.com, api.xapobank.com) no longer resolve; api.xapo.com returns 404. Legacy SDKs from the pre-bank wallet era remain on registries:

- [xapo_sdk on PyPI](https://pypi.org/project/xapo-sdk/): legacy Xapo bitcoin SDK 0.2.2 (retired API)
- [xapo_sdk on RubyGems](https://rubygems.org/gems/xapo_sdk): legacy Xapo bitcoin SDK 0.2.2 (retired API)

## Repo Artifacts

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/apis.yml): APIs.json profile
- [Well-known index](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/well-known/xapo-well-known.yml)
- [Domain security](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/security/xapo-domain-security.yml)
- [Vulnerability disclosure](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/security/xapo-vulnerability-disclosure.yml)
- [Trust center](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/security/xapo-trust-center.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/conformance/xapo-conformance.yml)
- [Packages](https://raw.githubusercontent.com/api-evangelist/xapo/refs/heads/main/packages/xapo-packages.yml)