Multi-tenant regulated money movement infrastructure

Move money on every rail from one integration.

Zenoz is multi-tenant regulated money movement infrastructure with deep integrations into tier-1 processors and banks. Push to a card in seconds, settle cross-border over XRP Ledger or SWIFT, run ACH, RTP and FedNow — all from one API, one ledger, one dashboard.

Visa Direct Mastercard Send Visa VPC Ripple · XRPL SWIFT ACH Same-Day ACH Next-Day RTP FedNow Card
For developerssandbox · no card required

Watch a payout settle from your terminal in under three minutes.

Coming September 15, 2026

$curl -fsSL https://cloud.zenoz.ai/install.sh | sh

Then zenoz login and zenoz init. Nothing issued here can move real money. See the whole flow ↓

For executives & partners30 minutes

See the rails, the tenancy model and the controls — with your own numbers.

A walkthrough for banks, program managers and platform partners evaluating Zenoz as the gateway under their portfolio.

Live sandbox payout pyt_01JQ8K2 CREATED
RailVisa DirectTenantten_9f3a2c
Visa Direct Mastercard Send Visa VPC Ripple · XRPL SWIFT ACH Same-Day ACH Next-Day Merchant mer_acme · Acme Zenoz quote · preflight ledger · idempotent screening · limits Recipient rcp_7c21 · •••4242 $25.00
Two-phase by design. Every payout is quoted, then committed with an idempotency key. Re-checked at commit. Limits, screening and balance run again under lock, not just at parse time. One ledger. Card rails settle in about a second in sandbox, Ripple in a few; SWIFT and ACH post to the same ledger and settle in their network windows.
Developer path

Three commands. One settled transaction.

The shell script is a bootstrapper, not a wizard. The browser owns identity. The terminal never sees a password, and it ends in money moving — not in "you have an account."

  1. 01
    Install

    curl -fsSL https://cloud.zenoz.ai/install.sh | sh — verifies SHA-256 against a signed manifest, installs to ~/.local/bin, never uses sudo, never edits your dotfiles. Under 250 readable lines, because you'll open it first.

  2. 02
    Log in

    zenoz login opens a browser tab. OAuth device flow (RFC 8628), the same mechanism behind gh and stripe. Your sandbox tenant links to this machine; credentials land in ~/.zenoz/credentials.toml, mode 0600.

  3. 03
    Init

    zenoz init asks two things — rail and language — then sends a $25.00 sandbox payout, renders every status transition, and writes a quickstart containing the exact request that just settled, with your key already in it.

zsh — zenoz

        
Executive path

One gateway under your whole portfolio.

Zenoz is built for the partner who sits above merchants: a bank, a program manager, a platform. Every tenant gets its own merchants, keys, limits and ledger — and you see all of it.

Multi-tenant from the ground up

Tenants own merchants; merchants own recipients and keys. Every transaction row carries merchant and tenant attribution, so portfolio questions narrow to one merchant without switching context.

Tier-1 rails, one contract

Visa Direct, Mastercard Send and Visa VPC for push-to-card; Ripple over XRPL and SWIFT wires for cross-border; ACH same-day and next-day, RTP and FedNow for domestic. Rail mix is a query, not a re-integration.

Controls that live server-side

Capability flags per merchant, per-transaction and velocity limits per rail, sanctions screening on every recipient, and a two-phase quote/commit so nothing moves on a single call.

Underwriting built in

Merchant applications flow through auto-approval or manual review with MCC, average ticket and expected volume on the record — and a review queue you can actually see the age of.

Sandbox that can't hurt you

Self-serve credentials are sandbox-scoped and enforced by the token itself. Production keys are minted in the dashboard, behind KYB and an owner-role check.

Ask it in plain English

The Zenoz MCP server answers "what's stuck in manual review?" and "what's our effective rate on RTP?" straight from the API. Read-only, tenant-scoped, no CSV export.

Rails

Pick the rail per payout, not per integration.

Nine rails, one request shape. Recipient, amount and idempotency key stay the same; Zenoz handles the processor, the bank and the settlement path — push-to-card, XRPL and SWIFT cross-border, same-day and next-day ACH, and the two instant networks.

Push to card

Visa Direct

Push to a debit card. Settles in seconds. The default first rail in zenoz init.

rail: visa_directUSD
Push to card

Mastercard Send

Push to a debit card across the Mastercard network. Seconds to settle, same request shape.

rail: mc_sendUSD
Push to card

Visa VPC

Push to a card via Visa Payout Connect for programs that need the VPC path.

rail: visa_vpcUSD
Cross-border

Ripple

Cross-border settlement over the XRP Ledger. Test XRPL addresses in sandbox; a few seconds to settle.

rail: rippleXRPL
Cross-border

SWIFT

International wires over the SWIFT network for correspondent-bank payouts where the recipient isn't on XRPL. Multi-currency, with tracking on the same ledger.

rail: SWIFTMulti-ccy
Bank transfer

ACH Same-Day

Same-day ACH credits and debits through the Nacha same-day windows. Returns land on the same ledger as the original item.

rail: ACH_SDUSD
Bank transfer

ACH Next-Day

Standard next-day ACH for scheduled payouts and lower-cost volume where speed isn't the point.

rail: ACH_NDUSD
Instant

RTP

Real-time payments over The Clearing House network. Final and irrevocable, 24/7/365, with request-for-payment on the roadmap.

rail: RTPUSD
Instant

FedNow

The Federal Reserve's instant rail, for banks and credit unions on FedNow rather than RTP. Same request shape as everything else.

rail: FEDNOWUSD

Card acquiring (CARD) runs on the same ledger, with refunds, voids, chargebacks and ACH returns tracked as first-class transaction types.

Ask Zenoz · MCP server

Your payments, answered in a sentence.

Connect the Zenoz MCP server to Claude and ask about volume, fees, rail mix, stuck money and your onboarding queue the way you'd ask a colleague. Every answer comes straight from the API, scoped to what your key can see.

  • "How much have we processed month-to-date, by rail?"
  • "What failed this week, and what did it cost us in fees?"
  • "Which merchant is driving the most volume?"
  • "What's sitting in manual review, and for how long?"
  • "Are any of our service-account keys already expired?"
  • "Build me a month-end summary I can send to accounting."

Read-only today. Nothing you ask can move money or change state — the money-moving payout.quote / payout.commit tools ship with their own key class and step-up confirmation.

What's failed on our account?
4 failed transactions · $1,279.79. Small in count, but you were still charged $21.98 in fees against them — worth a look.
How much of our volume went over RTP?
9 transactions · $19,928.52 · $6.15 in fees. RTP is roughly 5% of your volume but a rounding error on fees — $0.68 average per transaction versus the blended $3.97.
What's stuck in manual review?
5 of 41 applications are in MANUAL_REVIEW. Oldest: Torp - Wiza Co., a Canadian restaurant (MCC 5812) submitted July 14 — unreviewed for 33 days.
Security posture

An unauthenticated path to free credentials on a payments platform is a target. We built it like one.

The browser owns identity

Account creation, terms, email verification and tenant creation happen on cloud.zenoz.ai, where consent records, bot defenses and KYB live. The CLI never collects a password.

Sandbox only, enforced by the token

Self-serve tokens carry a sandbox environment claim that cannot be exchanged for production scopes — enforced server-side, not by the client.

Token hygiene

Access tokens live one hour; refresh tokens rotate on use and a reused one revokes the whole family. Every device approval writes an audit event with one-click revoke.

Signed, verified installer

SHA-256 against a manifest signed in CI. No sudo, no dotfile edits, atomic writes, and a main() wrapper so a truncated download runs nothing.

The model is never the authorization boundary

Natural-language intents extract to a rigid schema; anything ambiguous is a refusal. Policy runs server-side and re-runs at commit, bound to the quote the merchant actually read.

Audit chain on every intent

The literal request, the extracted schema, the quote hash, every preflight result and the confirmation evidence are logged — because "the merchant said send it" is not a defense.

Book a walkthrough

Thirty minutes, your portfolio, real rails.

We'll run a payout on each rail from the sandbox, walk the tenancy and control model, and show what your team could ask the MCP server on day one. Bring a merchant list if you have one.

Book a walkthrough Or try the sandbox first
Agenda
  1. Rails and settlement: push-to-card, XRPL, SWIFT, ACH/RTP/FedNow
  2. Tenancy: tenants, merchants, keys, limits, ledger
  3. Controls: quote/commit, screening, velocity, audit
  4. Onboarding: applications, review queue, KYB to production
  5. Ask Zenoz: what your ops and finance teams can query