PSD2 AIS - Account Information Service

The AIS API implements the Account Information Service parts of the PSD2 specification, and provides the following services to authorised TPPs:

• Accounts overview
• Account balances
• Account transactions
• Account details

Access to the Account Information Service API is controlled through the general onboarding/enrollment flow. I.e. the API is only accessible to valid TPPs, who have completed the enrollment in order to upload and verify their qualified certificates. By accessing the API, you confirm that you already have status as an authorized TPP - or (for sandbox access only) that your application has been submitted to a local NCA and is pending approval. Only TPPs who can document their authorization status are elegible for support.

The AIS API is part of the general PSD2 XS2A implementation and works in the same security context. In addition to the information contained below, all communication, headers and additional steps adhere to the general security model and flows. Refer to this link for up to date information on required security headers.

The API is implemented against Berlin Group XS2A version 1.3.

Note about this version This version of the AIS API now also supports testing of security, consent and SCA flows in sandbox with full security context.

• The sandbox API works on (stateless) mocked account data, while SCA, security and consent flows are identical to production.
• The security model for TPP enrollment and PSU authentication/authorization is implemented and enforced for both production and sandbox API

Access to API Endpoints

Production and Sandbox endpoints

Production: https://psd2api{bank_id}.prod.bec.dk/eidas/1.0/v1 Sandbox: https://psd2testapi{bank_id}.prod.bec.dk/eidas/1.0/v1

Production and sandbox access: Prior to calling the API the TPP must complete the (one-time) process for Onboarding on a per-bank basis. Separate API URL/host endpoints are required for each bank under the BEC Umbrella. Consult the Environments section for information on URL schemas in production and sandbox environments. See list of included ASPSPs and their corresponding urls by following this link. The X-IBM-Client-Id attribute is not required in this version.