CityPay Partner Programme for Web Developers

Build faster • Earn revenue • Give every client a world-class checkout

We help web agencies deliver seamless, secure payments for every project – while earning an ongoing commission for the life of each client. Expect priority onboarding, direct access to engineers, and co-branded marketing that helps you win more pitches.

We speak your language and know your pains!

R

Why developers choose CityPay

  • Modern APIs & SDKs – Clean HTTP APIs with clear guides, SDKs, and quick starts for real-time authorisation, refunds, pre-auths / voids / completions, and tokenised payments. 
  • Hosted 3-D Secure (SCA-ready) – Full 3DSv2.2 flows baked in, including frictionless and challenge journeys – without you managing scheme accreditations. 
  • Alternative payments that convert – Click to Pay, Apple Pay and Google Pay supported with practical guidance for Paylink / iframes and domain association. 
  • Credential-on-file and tokenisation – Store a token, not a card. Ideal for subscriptions, repeat billing and continuous authority. 
  • Flexible integration choices – Hosted forms (Paylink) for super-fast PCI-light builds, or Direct Post when you want full control of the UI.
  • Event-driven webhooks – Subscribe to payment events and trigger your app flows in real time. 
  • Beyond “just e-commerce” – Support for MOTO, payment links, IVR and in-store endpoints when projects need omnichannel.

Integrate your way (whatever your stack)

Whether you’re shipping a SPA with a BFF, a conventional MVC app, server-only backends, or server / client hybrids, CityPay meets you where you are:

  • Paylink (Hosted Form) – Generate a token server-side and redirect to a responsive, CityPay-hosted checkout. 3-D Secure handled for you. Perfect when you want speed, security and less PCI scope. 
  • Direct Post – Keep your own payment UI and post card data directly from the browser to CityPay (with domain keys, redirects, 3DS handling, token flows). Great for bespoke UX or headless builds. 
  • Authorisation API – Full control for server-side flows: e-commerce, MOTO, pre-auth / capture, refunds, BIN lookups and more. 
  • Webhooks – Subscribe to success / fail / refund events to drive fulfilment, CRM updates, and automation. 
  • Alternative Payments – Enable Click to Pay, Apple Pay and Google Pay alongside cards for a smoother, SCA-friendly checkout.
v

Checkout, built for you – not by you.” Paylink gives you the velocity of Stripe while Direct Post and the full API keep power in your hands. Stripe and Braintree both lead with simple flows + deep docs; we mirror that balance and give you total control with Elements. Most importantly, CityPay has real software developers you can talk to. Developers who actually built the systems you are using. And they’re just an email or telephone call away.

Fast track: three common builds

Fastest go-live (Paylink)

Spin up payments in minutes with Paylink, our responsive, CityPay-hosted checkout. Your server creates a payment token, then you redirect the shopper to a secure, PCI-approved flow where 3-D Secure (SCA) and scheme nuances are handled for you. You keep full control of order creation and confirmation pages while CityPay manages card input, risk checks, and liability shift. Configure branding (logo, colours, copy), set return / cancel URLs, and hook into post-backs / webhooks for fulfilment, emails, CRM updates and analytics. Because no cardholder data touches your environment, PCI scope is dramatically reduced – ideal for agencies that want velocity without security headaches. Built-in validation, accessibility and mobile optimisation come as standard, with clear error messaging and retry guidance to protect conversion. Add wallets and alternative payments as needed, and localise messaging/currency for international projects.

Great for: quick launches, MVPs, PCI-light builds, teams who want a proven checkout with minimal dev lift.

f

Bespoke UI (Direct Post + tokens)

Own every pixel of the checkout while CityPay handles the sensitive bits under the bonnet. With Direct Post, you render your own form and client-side interactions, then securely post card details directly to CityPay from the browser (domain-keyed), keeping your server out of scope for raw PAN data. We return a token so your backend can authorise, capture, refund, and manage repeats without re-entering card details – perfect for credential-on-file and subscription flows. The standard redirect / return pattern supports 3-D Secure challenges and result handling (success, decline, partial, retry), and you can subscribe to webhooks to drive fulfilment, ledger updates and marketing automation. This pattern fits headless commerce, SSR / ISR sites, and SPA+BFF setups where you want custom UX, bespoke validation, error states, A/B testing and design-system components – while maintaining a clean security boundary.

Great for: headless builds, design-system parity, complex journeys, teams who need maximum UX control with modern tokenisation.

Elements (React / Vue / Angular)

Compose a fully themeable checkout with CityPay Elements – granular, framework-ready components (card number, expiry, CVC, name / address, wallet buttons, error summaries) you place and style to the pixel. You own layout, typography and spacing, while CityPay securely hosts the sensitive inputs so card data never touches your servers. That delivers total front-end flexibility with a PCI-approved security boundary, plus built-in 3-D Secure, tokenisation, and server-verified result handling.

Elements fit modern stacks: SPAs with a BFF, SSR / ISR apps, or classic MVC. Load the library async, render inputs using design-system tokens (fonts, radii, dark mode), and listen for brand detection, validity and error events to drive inline messaging and pay-button states. Pair with webhooks for fulfilment and CRM updates, and add Apple Pay / Google Pay / Click to Pay on the same surface. 

Great for: SPAs / BFFs, design-system parity, pixel-perfect checkouts with minimal PCI burden.

Subscriptions, memberships and repeat billing

Use Card Holder Accounts to register a card once and charge later via token – supporting credential-on-file for cardholder-initiated (CIT) and merchant-initiated (MIT) flows. Combine with batch / instalment services for schedule-based charging.

Built-in conversion boosters to encourage buying

  • 3-D Secure v2.2 with frictionless support to minimise checkout friction while maintaining liability shift. 
  • Apple Pay / Google Pay / Click to Pay for one-tap, biometric-authenticated checkouts (with Paylink iframe guidance and domain verification steps).

Support that actually picks up the phone

UK-based support for partners and merchants, with clear documentation and direct access to the people who build the platform. From implementation to optimisation, we collaborate with your team to get projects live quickly and keep them humming.

w

The commercial upside for agencies

Earn while you build - then keep earning.

You’ll receive a minimum 10% revenue share on CityPay gateway fees and (when applicable) acquiring fees via our preferred acquirer partners – for the life of the client. Paid quarterly (subject to minimums).

The more your clients process, the more you earn.

Worked example

  • Client processes £10,000,000 / year, at £100 Average Order Value (≈100,000 transactions).
  • Assuming £0.08 gateway fee per transaction and 0.30% acquirer fee, your year-one share ≈ £3,800.
  • Over 5 years, that’s ≈ £19,000 from one intro – before growth.

Note:

Actual fees vary by acquirer, volume and risk profile; agency share remains 10% of fees received by CityPay.

What you can build with CityPay

  • Standard e-commerce with Paylink or your own UI (Direct Post) or total pixel perfect control of the UI with Elements.
  • Memberships and subscriptions (tokenisation + credential-on-file).
  • MOTO and back-office payments for service businesses.
  • Omnichannel projects that mix online, IVR and in-store endpoints.

Developer quick facts

  • SDKs: PHP, Java, JavaScript (and more) to speed up integration. 

  • Integrations: Magento, OpenCart, ResDiary, WooCommerce, WordPress, Xero and more.
  • Security: PCI-sensible integration patterns, tokens over PANs, TLS enforced. 

  • Observability: Reporting endpoints + webhooks for reconciliation and automation. 

How the partnership works

Apply

Tell us about your agency and typical builds.

Onboard

Get sandbox credentials, a technical walkthrough, and co-branded materials.

Launch

We’ll fast-track your first client to production.

Grow

Quarterly revenue share, roadmap previews, and priority support.