Consents

Create

The API allows the TPP to ask an ASPSP to create a new account-access-consent resource.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.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.XeCKUJRnrNQLEceORtbW1Tg-XfLFaQuMlOkeWrH5_M0CznsUklayJjjNYtPOVICt6WkDQY5IZbHnfrd8_aKRYnbhZ1vwrd3cYzwFTAMtYmI_-k_GXSrucoWpd8Ud8lrvhQTJimX3qmLgQl13UxMsQyOgXyUYsXYRSOJc5MS0DTQg1VzmLt4MLA1E53XdBJuHeWJ0_Z-Xnm4Cx0dkHeHZdFxgAQNlAGxtsvatRYmVRdYBujxd4SBH2YHWNHjNSuQiTGyX34YOqPYP3tuHiDbfD4do1iyg62EBhUTh1Jb6LNoD3c61EFrRFr2PlZuCMqSq5a7zrQxgClSNYHA_9ihLMQ' \ 
-X POST "/api/:provider_code/open-banking/v3.1/aisp/account-access-consents"

Example of request

{"Data":{"Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadOffers","ReadPAN","ReadParty","ReadPartyPSU","ReadProducts","ReadStandingOrdersDetail","ReadScheduledPaymentsDetail","ReadStatementsDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-05-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{}}

Example of response

{"Data":{"ConsentId":"urn-alphabank-intent-88379","Status":"AwaitingAuthorisation","StatusUpdateDateTime":"2017-05-02T00:00:00+00:00","CreationDateTime":"2017-05-02T00:00:00+00:00","Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadOffers","ReadPAN","ReadParty","ReadPartyPSU","ReadProducts","ReadStandingOrdersDetail","ReadScheduledPaymentsDetail","ReadStatementsDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-08-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/account-access-consents/urn-alphabank-intent-88379"},"Meta":{"TotalPages":1}}
Request

POST /api/:provider_code/open-banking/v3.1/aisp/account-access-consents

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Idempotency-Key string, optional Unique uuid used to recognize subsequent retries of the same request valid for 24 hours. Allowed length: max: 40 characters
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
Risk
hash, optional
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Risk
hash, required
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
FieldInvalidDate 400 An invalid date is supplied.
ResourceInvalidFormat 400 Payload schema does not match to the endpoint.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Forbidden 403 Action is forbidden. More details in error_message.

Show

A TPP may optionally retrieve an account-access-consent resource that they have created to check its status. Prior to calling the API, the TPP must have an access token issued by the ASPSP using a client credentials grant.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.CXmc8wZM6MrPYSYps6_-0IXw3S1Y6JJNSt23p18s6T_DRPwttCMPZjpAdBqclUE4k0UC8ynPRMfkve7iHR-Cm6Fwpp3lcdzP-_bn5zQ6mZvfTpN0MH2VeLwagloqgpQc8HNefLQjYFwCh9PaSNEkYu8SC9iMeZ_6KmyQbyyziwpe65j1qpoenBBX9vkvYP9YV-_kxJ3rNEnRi-Dr5MnHNIk57BPvVHgeITLFvm2YlVHxr66C_a6U6uAbdyNJFycuvhIAYuZitytqgPSoIRzmE2OvYi9EEkciDr_tQYs3WGgpdLJkfjKZRMA1cb-CT8bGx2HP91VpM5ves5VaFjTScg' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/account-access-consents/:consent_id"

Example of response

{"Data":{"ConsentId":"urn-alphabank-intent-88379","Status":"AwaitingAuthorisation","StatusUpdateDateTime":"2017-05-02T00:00:00+00:00","CreationDateTime":"2017-05-02T00:00:00+00:00","Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadOffers","ReadPAN","ReadParty","ReadPartyPSU","ReadProducts","ReadStandingOrdersDetail","ReadScheduledPaymentsDetail","ReadStatementsDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-08-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/account-access-consents/urn-alphabank-intent-88379"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/account-access-consents/:consent_id

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
consent_id (path)
string, required
Unique identification as assigned to identify the account access consent resource. Can raise: FieldInvalid, ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Risk
hash, required
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Forbidden 403 Action is forbidden. More details in error_message.

Destroy

If the PSU revokes consent to data access with the TPP, the TPP must delete the account-access-consent resource with the ASPSP as soon as is practically possible.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.b71oObt7SD2fZAjfReJ0TTQGnlX9MO7Topxuh46M6X4PCNiVwNLqqEbQo1cOVZOqClJZKMxxInDI9GlSgzkTBX7o5oMPrvISOyICzSLzrDgSE0VsZl08u8xFUkMkdVH_p8gx_JwHfM_9GmjlratexLu0sALL2f4-Hxe8JnlEeB_iutx5B8TQ_sv3SyLX4Of9kwWGymxqoZbA1nOeGw_SeM2LLFzbb_isT0_00U5IfOuRJL3J0vVArYP_dCCpjem-4WULfd51EgGunYRbj6EdND4wCIbYRka67BFdkT4C1fDeNqVN7j7SPXrfxF-HlHQKY47qbVdaqnVOMLzKdaz67g' \ 
-X DELETE "/api/:provider_code/open-banking/v3.1/aisp/account-access-consents/:consent_id"
Request

DELETE /api/:provider_code/open-banking/v3.1/aisp/account-access-consents/:consent_id

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
consent_id (path)
string, required
Unique identification as assigned to identify the account access consent resource. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.

Accounts

Refresh

A lot of ASPSP's can not return imediately all AIS information. Call the POST /refresh endpoint before GET /accounts .
TPP should await success or fail final status. TPP may retrieve status by calling GET /refresh_status.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.eyJEYXRhIjp7IkluaXRpYXRlZEJ5Q3VzdG9tZXIiOnRydWV9fQ.wLb7bPjOazmHJUJGfNoGmEqRS33TeLoBnL9TT6g3NOaJeC49nPshwMlK1VVl4auB18Pl4TV_uEmAY4Ws_Zoywe8XbylmzKNyR32rCRalOmTBgMQr0qKUM12jZsWF0JauTdTg5NV7Ok9cr1QGzVh0J1L9HMRSqemuyupEs_bI4jNFUUJJ0mez1wN20vgVFTF9PUOIQ4qQwARAhoCYrpTZ1ShPfkPbv-7NWkopv4LStPGDwgSuiY4o1TKeM0zqMNFa_QH0e-M_m7tqhE0TI0hMhHlvtjawSqyFR45KIF6gqK4AwIDZQwikik4ISW0Z-VUwN6JjXrGreFOpT4eV5j3qow' \ 
-X POST "/api/:provider_code/open-banking/v3.1/aisp/accounts/refresh"

Example of request

{"Data":{"InitiatedByCustomer":true}}

Example of response

{"Data":{"Status":"Processing"},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/refresh/status"},"Meta":{"TotalPages":1}}
Request

POST /api/:provider_code/open-banking/v3.1/aisp/accounts/refresh

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
InitiatedByCustomer
boolean, optional
Defines whether the request was initiated by the user or by the AISP without user presence. AISPs can access the payment accounts information only a max of 4 times within 24 hours without the user presence, or whenever the payment service user is actively requesting such information. Default value: false Can raise: ActionNotAllowed, AccessExceeded, AccessExceeded
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
ActionNotAllowed 406 You're not allowed to perform this action. This might be a configuration problem or parameters incompatibility.
TooEarly 425 The service is not ready to process the request.
AccessExceeded 429 Exceeded the number of automatic requests for this action.
AccessExceeded 429 Exceeded the number of automatic requests for this action.

Status of Refresh

TPP can retrieve REFRESH process status by calling the GET /refresh_status endpoint.
TPP should await success final status before request AIS info (e.g. accounts, transactions, balances).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.Gv0sMGLeL9LrtS3iz0cSKETDQEBLffCUAQ7RRn6zcz93vS45-tFOBt9LQVLd9OXhzcZEm77jNMPLty2Qe3yOkdIpfu3wIcJxwNf0uoAJFAILf_fFzHUQnOnl9TO6lUPPrvk2Y-6e6M49ouxVzXsZIjZ9fnAlftTFE3VmxBahRwsUqmDOs2xRxP4mg4eJ0_xKqDKGr--yrB15ZnqLkWfmG2DZr1a9FdKyUbjMpeqhGRH5DR5IOoaE5kcs5VXr90HpGCsReFvBr0NAXAZ69NT2SSaa1aHK3rMSeWWqMUVyV4-gqjm3eSBDjuK1npzw0Qju95b02zZWsYEw4d4WrLXVNA' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/accounts/refresh/status"

Example of response

{"Data":{"Status":"FetchingFinished"},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/refresh/status"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/accounts/refresh/status

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
ResourceNotFound 400 Specified resource doesn't exist.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Forbidden 403 Action is forbidden. More details in error_message.

Index

The first step for a TPP after an account request is authorised - is to call the GET /accounts endpoint.
A TPP will be given the full list of accounts (the AccountId(s)) that the PSU has authorised the TPP to access. The AccountId(s) returned may then be used to retrieve other resources for a specific AccountId. The selection of authorised accounts happens only at the ASPSP's interface.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.YfVf2Lo9IyMNXkHlsh2R86U9mQTg_OTluyhwNEQTO-dE2hsgZdHa5pW5QFF0-WEQWKDiYYDzWbJ2QNkJmS4bUPzMDOHfJVFOzomCcYWEno0nHq5ZTZwsOX9arsEFVNXyLYeuGlklMgQ7Bf9Xu2g_Epb_0gkHhHBxMwELuiUgv_IyQ11VoS1gHjkcEj-Ad4_6Nk_Qr6aqpOL_faqr18j43BwRsai2lsg22xDanBgOO-By5f2eDLubSfbidfJhcZ6iHLDfTPqjYbxNtbG7ldtX447DTYUfeno-D9YywqO3KFovFSJVIvQ4bar0VS8QMRKefwvK5zbOcdQO8pqpSzz3bw' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/accounts"

Example of response

{"Data":{"Account":[{"AccountId":"22289","Status":"Enabled","StatusUpdateDateTime":"2019-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Description":"Description of account","Nickname":"Bills","OpeningDate":"2019-01-01","MaturityDate":"2019-01-01","SwitchStatus":"processing","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203345","Name":"Mr Kevin","SecondaryIdentification":"00021"}],"Servicer":{"SchemeName":"UK.OBIE.BICFI","Identification":"80200110203345"}},{"AccountId":"31820","Status":"Enabled","StatusUpdateDateTime":"2018-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Nickname":"Household","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203348","Name":"Mr Kevin"}]}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/accounts

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Show

A TPP may retrieve the account information resources for the AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.tqhHBwQGKmCS9icwg8Id6g3IkzA7hH8z-fyCwDv-sglHTK8mFOCg6M5DxzkR9midezWivHZXAiEZ8Vfl61UC9O5M3IasZRQ2Gw00rvfLQ9kbcrbVja24wPrLfTgO4w5GLSd7bkR9AOZs5bb522gHdx9NDwLz8FdB_2MXWXne4HoO3CzH0YH73iem4zdzcC4MImnpvnyFwRT0vogiUesvQF5nvkG3Ibwua8SUPZvJR4wyITx-N5JZ3AH6OKuM65PcW1XMr4ZG51SgP8A9koSb3T1uPelHD8QNmbTGuRAGrYcW6Rjar2BxR9mHgl9Vwz4lTRZiEp7LkXfrxQVzD8i4og' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id"

Example of response

{"Data":{"Account":[{"AccountId":"22289","Status":"Enabled","StatusUpdateDateTime":"2019-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Description":"Description of account","Nickname":"Bills","OpeningDate":"2019-01-01","MaturityDate":"2019-01-01","SwitchStatus":"processing","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203345","Name":"Mr Kevin","SecondaryIdentification":"00021"}],"Servicer":{"SchemeName":"UK.OBIE.BICFI","Identification":"80200110203345"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
A unique and immutable identifier used to identify the account resource. This identifier has no meaning to the account owner. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Transactions

An TPP may retrieve the transaction resource for a specific AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.pFsG_kvpms07qzaxwX4IDsdrG81s7FK3YFjAEq6WJK_FD66ZFVgdhOE8AEpvKXuoDe5dy6FLMp5wsIMIqweMo-UeoWXtjIOqd4j-S0moibM24a9NosQl5r3kvO-CwlToG84wiTVTUM1atWcW09X7pwOqd0ErH7GFlwMWHl-vt10kzy3VLnENCSfQVxrGqNBMXopbFFQjustIZsxq6hscuRo8tjyWITaJUPrORfjWebF_gIv1-DvQQaKForB_PW7Fu-YW14mmZTgZzD-yVayQ4ZVTZSBg2tTNktZKTJ9ex9tq1VP4XqaXUXUuk80RHixvE05Vc_rumlsP6r_YGn5wlg' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id/transactions"

Example of response

{"Data":{"Transaction":[{"AccountId":"22289","TransactionId":"123","TransactionReference":"Ref 1","StatementReference":["some-ref"],"CreditDebitIndicator":"Credit","Status":"Booked","TransactionMutability":"Immutable","BookingDateTime":"2017-04-05T10:43:07+00:00","ValueDateTime":"2017-04-05T10:45:22+00:00","TransactionInformation":"Cash from Aubrey","Amount":{"Amount":"10.00","Currency":"GBP"},"ChargeAmount":{"Amount":"10.00","Currency":"GBP"},"CurrencyExchange":{"SourceCurrency":"EUR","TargetCurrency":"GBP","UnitCurrency":"GBP","ExchangeRate":"0.92","ContractIdentification":"some-identification","QuotationDate":"2017-04-05","InstructedAmount":{"Amount":"10.00","Currency":"GBP"}},"BankTransactionCode":{"Code":"ReceivedCreditTransfer","SubCode":"DomesticCreditTransfer"},"ProprietaryBankTransactionCode":{"Code":"Transfer","Issuer":"AlphaBank"},"Balance":{"Amount":{"Amount":"230.00","Currency":"GBP"},"Type":"InterimBooked","CreditDebitIndicator":"Credit"},"MerchantDetails":{"MerchantName":"Merchant name","MerchantCategoryCode":"some-code"},"CreditorAgent":{"SchemeName":"UK.OBIE.BICFI","Identification":"GB29NWBK60161331926819","Name":"Creditor Agent Name","PostalAddress":{"AddressType":"Address with house number and street","Department":"Prime Minister's Office","SubDepartment":"Cabinet Office","StreetName":"Sir George Downing","BuildingNumber":"10","PostCode":"SW1A 2AA","TownName":"City of Westminster London,","CountrySubDivision":"London","Country":"GB","AddressLine":"10 Downing St, Westminster, London SW1A 2AA, United Kingdom"}},"CreditorAccount":{"SchemeName":"UK.OBIE.IBAN","Identification":"GB29NWBK60161331926819","Name":"Creditor Account Name","SecondaryIdentification":"12-34-56"},"DebtorAgent":{"SchemeName":"UK.OBIE.BICFI","Identification":"GB29NWBK60161331926810","Name":"Debtor Agent Name","PostalAddress":{"AddressType":"Address with house number and street","Department":"Prime Minister's Office","SubDepartment":"Cabinet Office","StreetName":"Sir George Downing","BuildingNumber":"10","PostCode":"SW1A 2AA","TownName":"City of Westminster London,","CountrySubDivision":"London","Country":"GB","AddressLine":"10 Downing St, Westminster, London SW1A 2AA, United Kingdom"}},"DebtorAccount":{"SchemeName":"UK.OBIE.IBAN","Identification":"GB29NWBK60161331926810","Name":"Debtor Account Name","SecondaryIdentification":"22-33-55"},"CardInstrument":{"CardSchemeName":"Debit Card","AuthorizationType":"OAuth","Name":"Card Name","Identification":"12-34-56"},"SupplementaryData":{}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/transactions/"},"Meta":{"TotalPages":1,"FirstAvailableDateTime":"2017-05-03T00:00:00+00:00","LastAvailableDateTime":"2017-12-03T00:00:00+00:00"}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id/transactions

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
A unique and immutable identifier used to identify the account resource. This identifier has no meaning to the account owner. Can raise: ResourceNotFound
fromBookingDateTime (query)
datetime, optional
Specifies start date and time for filtering of the Transaction records on the Transaction/BookingDateTime field.
toBookingDateTime (query)
datetime, optional
Specifies end date and time for filtering of the Transaction records on the Transaction/BookingDateTime field.
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Balances

A TPP may retrieve the account balance information resource for a specific AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.YkFVMvjrkzzbYOOKa2sAymftuI8HET1Sd9AVWTSLEm3VdxEEOiLzcqChwx7FLuV2CvoV9kX0lsNnDqUk0IS-aWWgqiyU0G2cgwmPMHhNMCdzueGm7WSdpoaysp3VCcfqdPnK7-4s0v5iDro3PQpLWuAidYb7GX6AfijCamd0fAjpE1EoHOwboTZSG6oIW9RMBIcfAwJQUJiQOCl_KPCRdQpIIDkLDGaLB9SvJKuX0R_NsTD7_w0sHeZGxxlOeayAxTMnOg3sbIt3Wza-EJTeYNTuPHKFlriMRpCqJsFk9CBM7Ix7bA5CTPG73gfMizATgDnWFSOIeBryESn2j3FyuA' \ 
-X GET "/api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id/balances"

Example of response

{"Data":{"Balance":[{"AccountId":"22289","Amount":{"Amount":"1230.00","Currency":"GBP"},"CreditDebitIndicator":"Credit","Type":"InterimAvailable","DateTime":"2017-04-05T10:43:07+00:00","CreditLine":[{"Included":true,"Amount":{"Amount":"1000.00","Currency":"GBP"},"Type":"Temporary"}]},{"AccountId":"31820","Amount":{"Amount":"57.36","Currency":"GBP"},"CreditDebitIndicator":"Debit","Type":"InterimBooked","DateTime":"2017-05-02T14:22:09+00:00"}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/balances/"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1/aisp/accounts/:account_id/balances

Headers
Header Type Description
Content-Type string, optional The media type of the body of the request. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
A unique and immutable identifier used to identify the account resource. This identifier has no meaning to the account owner. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.