Salt Edge PSD2 Compliance Logo

Create

The API allows the TPP to ask an ASPSP to create a new account-access-consent resource.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.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.fDNXckOQe49tEmAhqvtoeS8Sa-pgjtUUDz5eIwt6y4wLSYB57sVk8I2Bkn8VB17my5WL1TQcy_ntOFnWGAXKi0fjEo08yF78BWSrBgMhvjzRVyipX1StM-byafnLjwveJVgLQqfot2Jf_ZFZg0dbCYOODvMh4_sTLzZbI_tvAKbsRJh981PZb1T3v0A8OGbEW8Ath_kyFUqjoOaX2My6AvpDgYGzSBZvrcYjlAzSP7eO8RhX6M3VzoSeU5IusfBdrnyzmqUjyeIPrKl-RTVK0ywIBPMhJU1WnoHzMFhai14_AOeckHbfZDLMalZksEPqYAHIOLEjHmI03ZCQH7895w' \ 
-X POST "/api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents"

Example of request

{"Data":{"Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadPAN","ReadParty","ReadStandingOrdersDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-05-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{}}

Example of response

{"Data":{"ConsentId":"urn-alphabank-intent-88379","Status":"AwaitingAuthorisation","StatusUpdateDateTime":"2017-05-02T00:00:00+00:00","CreationDateTime":"2017-05-02T00:00:00+00:00","Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadPAN","ReadParty","ReadStandingOrdersDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-08-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/account-access-consents/urn-alphabank-intent-88379"},"Meta":{"TotalPages":1}}
Request

POST /api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Content-Type string, required The media type of the body of the request. Default value: application/json
Idempotency-Key string, optional Unique uuid used to recognize subsequent retries of the same request valid for 24 hours. Allowed length: max: 40 characters
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
Risk
object, required
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Risk
object, required
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
FieldInvalidDate 400 An invalid date is supplied.
ResourceInvalidFormat 400 Payload schema does not match to the endpoint.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Forbidden 403 Action is forbidden. More details in error_message.

Show

A TPP may optionally retrieve an account-access-consent resource that they have created to check its status. Prior to calling the API, the TPP must have an access token issued by the ASPSP using a client credentials grant.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.Yzv8ijw8tF11qFlKqzWdbclbVW-xNjBIfQ4dxBHPcCcVNkY4C21gFPXqQTc8YXyKBsAceDLyfCpmLVX615dTAX1GbEMb3_ylLn2o3q6JuHaREox3Ic8JspcJG7VSbfbHDlzNRCHBPp8c2QwQIsNZfaB5YNfHYsdpNQzeEIwkwQmWCz-SGvcEjFOaLFHe_OiDvDBmUiE89USFc4V4HhHRRzkgH6E_Hvv_xtUA0_cvnysJ9LBe7LYSb2fDrMpKNh1QXRXEnOE_5IUWLYLGDDHPpOlbjPMEwBI9IsWDI0e4oSJ4itxXwC7RyPgjNupOtD_klEJpE8_-mREiblAMEfXHdQ' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents/:consent_id"

Example of response

{"Data":{"ConsentId":"urn-alphabank-intent-88379","Status":"AwaitingAuthorisation","StatusUpdateDateTime":"2017-05-02T00:00:00+00:00","CreationDateTime":"2017-05-02T00:00:00+00:00","Permissions":["ReadAccountsBasic","ReadAccountsDetail","ReadBalances","ReadBeneficiariesDetail","ReadTransactionsBasic","ReadTransactionsCredits","ReadTransactionsDebits","ReadTransactionsDetail","ReadPAN","ReadParty","ReadStandingOrdersDetail","ReadDirectDebits"],"ExpirationDateTime":"2017-08-02T00:00:00+00:00","TransactionFromDateTime":"2017-05-03T00:00:00+00:00","TransactionToDateTime":"2017-12-03T00:00:00+00:00"},"Risk":{},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/account-access-consents/urn-alphabank-intent-88379"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents/:consent_id

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
consent_id (path)
string, required
Unique identification as assigned to identify the account access consent resource. Can raise: FieldInvalid, ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Risk
object, required
The Risk section is sent by the initiating party to the ASPSP. It is used to specify additional details for risk scoring for Account Info.
Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Forbidden 403 Action is forbidden. More details in error_message.

Destroy

If the PSU revokes consent to data access with the TPP, the TPP must delete the account-access-consent resource with the ASPSP as soon as is practically possible.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.qcP39_Rc42A4AMA7_0A0ySVNwy5KrwA4KbwaOeGt1ZMLzYsi-TdIgvGBoktNcQD_vIfyDS0A842PzPKwBwdvosXLA7MLa-FD-g6zjf19CvIOobWOJB5EX80XSFkaan4aSJ1suUpOPkMQu1jrtbJrUQ84pbRbknr8ZIFP2gOhpwitFqKPPUbx8nLQ7O5cYC-zHzJwy42WDbfW-fwLVSxo_CWEMCZX-gXHYwypOoxkXom52o-K1l0Ko9QjHYO2uZhelK5qmHpamXODYhY6G5IEcWjASK93RZllumvm8MZT8J8wVFVuMr-jVMRZg1vlabY96RNb_QlrkqqirhCpXGpykQ' \ 
-X DELETE "/api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents/:consent_id"
Request

DELETE /api/:provider_code/open-banking/v3.1.11/aisp/account-access-consents/:consent_id

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound
consent_id (path)
string, required
Unique identification as assigned to identify the account access consent resource. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.

Index

The first step for a TPP after an account request is authorised - is to call the GET /accounts endpoint.
A TPP will be given the full list of accounts (the AccountId(s)) that the PSU has authorised the TPP to access. The AccountId(s) returned may then be used to retrieve other resources for a specific AccountId. The selection of authorised accounts happens only at the ASPSP's interface.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.cwWkvVKveM_kikYGZcxDXg1aH6XQPZfEQsqoCR4FcUSYyDQHMOYZAhG0crjCD933bcNMQHQYD0MtPc_zMHIyfuCZ37kjJfxM1iCA19bk31UI9wU0A2NT5-bpXxqTgi_17FJiGXWIDcXEDqM2ZUHZGu34XN7hZ6O432KEhPghw6yndV7SjtAPgT6HqCAVdWJYSY6-7EKsvAieuR-AAsafdXvd90841v-Y4k6LZxp9HK_ahxdDYuy53RujarUmco5pWHmRg3Gw-CqtfnZByoY5b_jBPGU-TQE43tYTxHwLhbvaLU_Nsl5JLXF_X09VsEGvwSiUmnfJxnW6gybV0ZeOiQ' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts"

Example of response

{"Data":{"Account":[{"AccountId":"22289","Status":"Enabled","StatusUpdateDateTime":"2019-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Description":"Description of account","Nickname":"Bills","OpeningDate":"2019-01-01","MaturityDate":"2019-01-01","SwitchStatus":"processing","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203345","Name":"Mr Kevin","SecondaryIdentification":"00021"}],"Servicer":{"SchemeName":"UK.OBIE.BICFI","Identification":"80200110203345"}},{"AccountId":"31820","Status":"Enabled","StatusUpdateDateTime":"2018-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Nickname":"Household","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203348","Name":"Mr Kevin"}]}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Show

A TPP may retrieve the account information resources for the AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.Jv9mNHPieLFBLejFJMLUyTWzQidFvq8ryFYfXhPllnHqL2Q0dqdETio5kc3d-CgM1EoaSOQwI-0bmEZNzyiecAJiMXoe2jJFOK6r0b9Od2Ysdi1k5RUl7gckjR7go3QfTjUlgs6mZXSs21Lv40GWcsS0OcMbd8Zn2lNP1x4Mt_sFqJWAnH65qWkVPtZbSm8jcQ4qg0HaBqhAnkCwOSlvzDXvsDKVcVCK1NYfBsDVxV520S-u1hgkRr7cO5zd3cvUDy5CBW-_NEHmsEY2JWav8akHn7HRAQwXG9S9Qq3_mHDK5YZnkrGDHh5hJm0j_XJXz-ph6jGgqGfnJ4TdTWb6uw' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id"

Example of response

{"Data":{"Account":[{"AccountId":"22289","Status":"Enabled","StatusUpdateDateTime":"2019-01-01T06:06:06+00:00","Currency":"GBP","AccountType":"Personal","AccountSubType":"CurrentAccount","Description":"Description of account","Nickname":"Bills","OpeningDate":"2019-01-01","MaturityDate":"2019-01-01","SwitchStatus":"processing","Account":[{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200110203345","Name":"Mr Kevin","SecondaryIdentification":"00021"}],"Servicer":{"SchemeName":"UK.OBIE.BICFI","Identification":"80200110203345"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
A unique and immutable identifier used to identify the account resource. This identifier has no meaning to the account owner. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Transactions

An TPP may retrieve the transaction resource for a specific AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.aMSeOlJpyXJufqBy0nPZkZQLfXf6gsYKSWTtZpTB73QvoTxbns18Ip7t6egN_-N1kGbA6l8iVGcYIxzwnu4aN2dpbyg1dmY6z-vxb_tbCt7-7vIYzFBW_Fwoz3URIT09jOM51tpu9rGpQpL7GmnqsH0y0eLwIX7L9uKpcsGQlyx3p3OJ2LStORuNiFavV-cUzwbONEQXC31baISlnx6AuZ8w0EX1IZ_lTjE6x1pWnmSuvoCtD_2BwnR3LdSmV6b4oYosDRnITBUxWhYiAr5RC__CGWCn2bHYlwNluRgodIsGqyiKblP54oOWRzOxPigoO38_zYiO1a2hHGHmM82q8Q' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/transactions"

Example of response

{"Data":{"Transaction":[{"AccountId":"22289","TransactionId":"123","TransactionReference":"Ref 1","StatementReference":["some-ref"],"CreditDebitIndicator":"Credit","Status":"Booked","TransactionMutability":"Immutable","BookingDateTime":"2017-04-05T10:43:07+00:00","ValueDateTime":"2017-04-05T10:45:22+00:00","TransactionInformation":"Cash from Aubrey","Amount":{"Amount":"10.00","Currency":"GBP"},"ChargeAmount":{"Amount":"10.00","Currency":"GBP"},"CurrencyExchange":{"SourceCurrency":"EUR","TargetCurrency":"GBP","UnitCurrency":"GBP","ExchangeRate":"0.92","ContractIdentification":"some-identification","QuotationDate":"2017-04-05","InstructedAmount":{"Amount":"10.00","Currency":"GBP"}},"BankTransactionCode":{"Code":"ReceivedCreditTransfer","SubCode":"DomesticCreditTransfer"},"ProprietaryBankTransactionCode":{"Code":"Transfer","Issuer":"AlphaBank"},"Balance":{"Amount":{"Amount":"230.00","Currency":"GBP"},"Type":"InterimBooked","CreditDebitIndicator":"Credit"},"MerchantDetails":{"MerchantName":"Merchant name","MerchantCategoryCode":"some-code"},"CreditorAgent":{"SchemeName":"UK.OBIE.BICFI","Identification":"GB29NWBK60161331926819","Name":"Creditor Agent Name","PostalAddress":{"AddressType":"Address with house number and street","Department":"Prime Minister's Office","SubDepartment":"Cabinet Office","StreetName":"Sir George Downing","BuildingNumber":"10","PostCode":"SW1A 2AA","TownName":"City of Westminster London,","CountrySubDivision":"London","Country":"GB","AddressLine":"10 Downing St, Westminster, London SW1A 2AA, United Kingdom"}},"CreditorAccount":{"SchemeName":"UK.OBIE.IBAN","Identification":"GB29NWBK60161331926819","Name":"Creditor Account Name","SecondaryIdentification":"12-34-56"},"DebtorAgent":{"SchemeName":"UK.OBIE.BICFI","Identification":"GB29NWBK60161331926810","Name":"Debtor Agent Name","PostalAddress":{"AddressType":"Address with house number and street","Department":"Prime Minister's Office","SubDepartment":"Cabinet Office","StreetName":"Sir George Downing","BuildingNumber":"10","PostCode":"SW1A 2AA","TownName":"City of Westminster London,","CountrySubDivision":"London","Country":"GB","AddressLine":"10 Downing St, Westminster, London SW1A 2AA, United Kingdom"}},"DebtorAccount":{"SchemeName":"UK.OBIE.IBAN","Identification":"GB29NWBK60161331926810","Name":"Debtor Account Name","SecondaryIdentification":"22-33-55"},"CardInstrument":{"CardSchemeName":"Debit Card","AuthorizationType":"OAuth","Name":"Card Name","Identification":"12-34-56"},"SupplementaryData":{}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/transactions/"},"Meta":{"TotalPages":1,"FirstAvailableDateTime":"2017-05-03T00:00:00+00:00","LastAvailableDateTime":"2017-12-03T00:00:00+00:00"}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/transactions

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
fromBookingDateTime (query)
datetime, optional
Specifies start date and time for filtering of the Transaction records on the Transaction/BookingDateTime field.
toBookingDateTime (query)
datetime, optional
Specifies end date and time for filtering of the Transaction records on the Transaction/BookingDateTime field.
limit (query)
integer, optional
The limit query parameter specifies the maximum number of items to be returned in a single response when pagination is enabled (i.e., when paginated=1). This allows clients to control the size of the response, making it easier to handle large datasets and improving the efficiency of data retrieval.
The maximum allowable value for the limit parameter is 100.
offset (query)
string, optional
The offset query parameter indicates the starting point or the number of items to skip in the result set when pagination is enabled. It allows clients to navigate through the paginated data by specifying how many records should be bypassed before retrieving the next set of items. Can raise: FieldInvalid
paginated (query)
integer, optional
This query parameter determines whether pagination is applied to the response. When set to 1, the API will return paginated results, allowing for controlled retrieval of a subset of the collection based on the specified limit and offset. Conversely, when set to 0, the API will return the entire collection in a single response, without any pagination applied.
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Balances

A TPP may retrieve the account balance information resource for a specific AccountId (which is retrieved in the call to GET /accounts).

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.gp7Qk6Wn6EpGuCuuB4hA49yfNHFhi9MRcPhefSOxMUoRnWlKvqBJSWL4KafaANwkozrBS9LSbW3RLFlQwthVU3s2OGVY21zXWXMTwpaOcWt-lgHdBxq92FbahGpqyeLpIAi4ggN5zmJSPEKRZG9Jfa689gnOHTIT9dICu16woVDMDKcJIrqMI4UNlEsA_4eKM4M3CTwU_qx3ovKeBRLnZ73Za_8PgtgE7x2mHeyDsBUkJHig3kaWSpuC3WVkrKAnHHKm2hx5tUqa3ZB-ChMg7PRFyQAjNOLb0GgoOKm3wU-vahCJTb5md6e9bVbrmNm6xsd8m_Z-2yMn-VM8iaStwA' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/balances"

Example of response

{"Data":{"Balance":[{"AccountId":"22289","Amount":{"Amount":"1230.00","Currency":"GBP"},"CreditDebitIndicator":"Credit","Type":"InterimAvailable","DateTime":"2017-04-05T10:43:07+00:00","CreditLine":[{"Included":true,"Amount":{"Amount":"1000.00","Currency":"GBP"},"Type":"Temporary"}]},{"AccountId":"31820","Amount":{"Amount":"57.36","Currency":"GBP"},"CreditDebitIndicator":"Debit","Type":"InterimBooked","DateTime":"2017-05-02T14:22:09+00:00"}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/balances/"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/balances

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Beneficiaries

An AISP may retrieve the account beneficiaries information resource for a specific AccountId

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.Jsn1ZVOcmKSU3vRzcbSxJCYGGQmXsrS1fiYVuv8qhbCKP9znYPJRj_tc_Aphi34t1E-jJ44YOiwU2OyIFS5zNBdyto5HnljJwGPoPoPL4reHYkurM8nRic5uWtxh_oymkitbBGy1LcEIygYPdnoSvNrA8duSMjFc5gBpU2m-z1r-vRcFJPU_E_onbvAJ_kmV1P6WU-y76S_89fn0UlirDZHrs_hsPEyIdesD2luOFGi_dRa7T-9DvbGju5FZi9UfwTns5-2LANUkNtmIaE6lvo3wwM0ncTtl5dGiG2bvL7nVBX7iggu0ZtazgCkQ5k2N1IBGRCLKrlnoRIsRjJYgdQ' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/beneficiaries"

Example of response

{"Data":{"Beneficiary":[{"AccountId":"22289","BeneficiaryId":"Ben1","Reference":"Towbar Club","CreditorAccount":{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200112345678","Name":"Mrs Juniper"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/beneficiaries"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/beneficiaries

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Direct Debits

An ASPSP must provide this endpoint for AISPs to retrieve the direct-debits for a specific account identified by AccountId.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.sdF9eN5rk7vwP7ULUPdvgop17guIMai3ISWw6FUKbSdO0MS7BM03krt7yhpeWZ5WHVjkxVhPRNkADct52JCNIUo5Ti6zeN3M-4JFqi4cyv4efnvRf-KHo5G5VfXNY2yuH3m0CRiBLISxBtFV6c7o--VhzrFHZySJR9M4hVQGgU7Py8v1EUXs71OOgzR36IHs-G37xZ5ov_xu6QGfzt8IXNt7LC_ofuQd2Oti3tXcL_0k_c-XhCk_gIz-0g5YGVm49Mw4a5q-17pZxSnjCX-MtX2HjH_DrCnzfOS8xOFip81-OuIt9rcHCkvSI8R8TLzsF40aBI2DKSMx8HNyyJtSmA' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/direct-debits"

Example of response

{"Data":{"DirectDebit":[{"AccountId":"22289","DirectDebitId":"DD03","MandateIdentification":"Caravanners","DirectDebitStatusCode":"Active","Name":"Towbar Club 3 - We Love Towbars","PreviousPaymentDateTime":"2017-04-05T10:43:07+00:00","PreviousPaymentAmount":{"Amount":"0.57","Currency":"GBP"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/direct-debits"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/direct-debits

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Standing Orders

An AISP may retrieve the standing-order resource for a specific AccountId

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.MoN0fsQzkLnF_DWDn0VIkjHbNU0e8ioQUC8ak6FsvgGvcHjCQmvYc89F868PpL61n6-9wIO4VqMuxp5nfxeF_FO1kjorhLkIu7cG_uoeBHwLts-5LgfCq91IaEsyQiy9mUN7qxeBYc5NheUqSQsErUAjzhCMrLHKowvsmwnUxS58feqF2inkjHuIZyze9e1UMkpSydRRDI7VnUYUrCfzm-CmdltW-KZvJGH_54NQr1TW7XSkJyD80_pZQ8Z7Hwwj51GM6Umykbigbsw4Q_AKO5GReC5JIZ74o4BxmE2ut1qosOeRTByd7IO-XaPtU8GLhAxvCPhveVdkk6mUvQJRtg' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/standing-orders"

Example of response

{"Data":{"StandingOrder":[{"AccountId":"22289","StandingOrderId":"Ben3","Frequency":"EvryWorkgDay","Reference":"Towbar Club 2 - We Love Towbars","FirstPaymentDateTime":"2017-08-12T00:00:00+00:00","FirstPaymentAmount":{"Amount":"0.57","Currency":"GBP"},"NextPaymentDateTime":"2017-08-13T00:00:00+00:00","NextPaymentAmount":{"Amount":"0.56","Currency":"GBP"},"FinalPaymentDateTime":"2027-08-12T00:00:00+00:00","FinalPaymentAmount":{"Amount":"0.56","Currency":"GBP"},"StandingOrderStatusCode":"Active","CreditorAccount":{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"80200112345678","Name":"Mrs Juniper"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/standing_orders"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/standing-orders

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Party

The ASPSP must return details on the account owner: In the case of a business - this will be the details of the business. In the case of a joint account - this will be the party that has given authorisation to the AISP to view the account. If the AISP wishes to access details of other parties linked to the AccountId, the AISP must go through an authorisation flow with the other parties.

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.Awzz_j0IdExPbsDqnP8i-dB4i51oVybwCnp5n6ye7e2HcM1pR9d9U2INSClZzbBIef53-OXRfgvtTvXu_Mxr8XsatVpEj7z0ENhu68wraVqEXlicrWS6-TUJjQ21E807CeG8txjHBRLyEPcE6xAWYmRVkfsvBnlAMlc6vplmO9tUMgigTJnxVRXBafo5plNMybx_nr2b9kBPhlOD2YCUQtYbBhvq1DUDxcApzudROBgKBygvK6VgRM-BoB2p3DsSbW-wCtRkWLPW0E9RFwCBeuocMjyOqkD6RD4kI52RMOEU7SQ1EDOYVww7wlAKw0BKnOznVD5qFBTnHAZ_sHh8fA' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/party"

Example of response

{"Data":{"Party":[{"PartyId":"PABC123","PartyType":"Sole","Name":"Semiotec","FullLegalName":"Semiotec Limited","LegalStructure":"UK.OBIE.PrivateLimitedCompany","BeneficialOwnership":true,"AccountRole":"UK.OBIE.Principal","EmailAddress":"contact@semiotec.co.jp","Phone":"+44-00000000","Mobile":"+44-00000001","Relationships":{"Account":{"Related":"https://api.alphabank.com/open-banking/v4.0/aisp/accounts/22289","Id":"22289"}},"Address":{"AddressType":"Business","StreetName":"Street","BuildingNumber":"15","PostCode":"NW1 1AB","TownName":"London","Country":"GB"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/party"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/party

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

Upon successful request, 200 status code will be returned. See ‘Related Errors’ table for other possibilities.


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.

Scheduled Payments

An AISP may retrieve the account scheduled payments information for a specific AccountId

CURL

curl -i  \ 
 -H "Authorization: Bearer Az90SAOJklae" \ 
 -H "x-fapi-interaction-id: some-uuid" \ 
 -H "x-fapi-auth-date: Sun, 10 Sep 2017 19:43:31 GMT" \ 
 -H "x-fapi-customer-ip-address: 104.25.212.99" \ 
 -H "Content-Type: application/json" \ 
 -d 'eyJhbGciOiJQUzI1NiIsImtpZCI6InRlc3QifQ.e30.fg0PfHEED7TnTm3V8lcbmYOmRzA0NyqXbhtoSK91-qsuJrNSLicPwjtWgoBAZ2ZyylBqfmilocgD3fIuBqcINeVoUv6kw0IGW-mvQFHXfunP2Tb73TWAdFsQeg17zEd7VT6ekQkJqEXWKzUGFXJImfjyy6Uul3bE6loWHo2JV5QgAKe1KlubrWct1GfTymHYMnzkomDi1S_8GLXEuyPbO91jajT1ZcQtMlqfTpngDIwoMUTl-1-Xpp0bTEyPAGA_3x8dKLelG81XdFPJA_F9O4w-NFSPOg1dM5jj-el8yq9Bs2N3Kz-EC1grIjCp8n08fZSzMjMEUzW3Xeo6yWZkLA' \ 
-X GET "/api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/scheduled-payments"

Example of response

{"Data":{"ScheduledPayment":[{"AccountId":"22289","ScheduledPaymentId":"SP03","ScheduledPaymentDateTime":"2017-05-05T00:00:00+00:00","ScheduledType":"Execution","InstructedAmount":{"Amount":"10.00","Currency":"GBP"},"CreditorAccount":{"SchemeName":"UK.OBIE.SortCodeAccountNumber","Identification":"23605490179017","Name":"Mr Tee"}}]},"Links":{"Self":"https://api.alphabank.com/open-banking/v3.1/aisp/accounts/22289/scheduled-payments"},"Meta":{"TotalPages":1}}
Request

GET /api/:provider_code/open-banking/v3.1.11/aisp/accounts/:account_id/scheduled-payments

Headers
Header Type Description
Accept string, optional Media type that is acceptable for the response. Default value: application/json
x-fapi-interaction-id string, optional An RFC4122 UID used as a correlation Id.
Authorization string, required Standard HTTP Header; Allows Credentials to be provided to the Authorisation / Resource Server depending on the type of resource being requested. For OAuth 2.0 / OIDC, this comprises of either the Basic / Bearer Authentication Schemes. Can raise: HeaderMissing, HeaderInvalid, ResourceNotFound, Forbidden
x-fapi-auth-date string, optional The time when the PSU last logged in with the TPP. Supplied as HTTP-date (RFC7231), e.g. Sun, 10 Sep 2017 19:43:31 GMT.
x-fapi-customer-ip-address string, optional The PSU's IP address if the PSU is currently logged in with the TPP. Identifies user presence for the data fetch.
Request parameters
provider_code (path)
string, required
Human readable Provider identifier. Can raise: FieldInvalid, ResourceNotFound, Unauthorized, ResourceInvalidConsentStatus, TooEarly
account_id (path)
string, required
Account ID. Can raise: ResourceNotFound
Response headers
Header Type Description
Content-Type string, required The media type of the body of the request.
x-fapi-interaction-id string, required An RFC4122 UID used as a correlation Id. If provided, the ASPSP must "play back" this value in the x-fapi-interaction-id response header.
Retry-After integer, optional Amount of time in seconds after which Salt Edge PSD2 Compliance Solution resends the previously failed request.
Response

An AISP may retrieve the account scheduled payments information for a specific AccountId


Related Errors
Class Code Description
FieldInvalid 400 An invalid value is supplied in the field. More details in error_message.
ResourceNotFound 400 Specified resource doesn't exist.
ResourceInvalidConsentStatus 400 The action can't be performed with current status of consent.
HeaderMissing 400 A required HTTP header has not been provided.
HeaderInvalid 400 An invalid value is supplied in the HTTP header.
Unauthorized 401 Unauthorized access.
Forbidden 403 Action is forbidden. More details in error_message.
TooEarly 425 The service is not ready to process the request.