Account and Transaction API Specification logo

Account and Transaction API Specification

Account and Transaction API Specification

UK Open Banking Account Information API (AIS) lets authenticated third parties read user bank account balance, transactions, and metadata with user consent.

Visit site ↗Health checked 9h ago
Use it when

Standardized (consistent schema across banks)

Watch for

90-day mandatory user reauthorization (CMA rule)

First check

Institution registers as AISP with FCA → registers app on bank developer portal → user OAuth consent → GET /open-banking/v3.1/aisp/accounts and related endpoints read accounts.

Auth
CORS
No
HTTPS
Yes
Signup
?
Latency
1143 ms
Protocol
REST
Pricing

Uptime · 30-day window

Probes: 1Uptime: 100%Avg latency: 1143ms
01

About this API

AIS (Account Information Service) is the "read" side of Open Banking. It replaces traditional "screen scraping" (user provides app with password, app simulates bank web login to scrape — non-compliant and unreliable) with "user gives OAuth consent on bank page → app gets token, calls standardized API to read data". All major UK banks must implement the unified schema (CMA9 standard): account lists, balances, transactions (90-day lookback), standing orders, direct debits, etc. AISP-type third-party institutions all use this — Money Dashboard for personal finance, Truelayer/Plaid for data aggregation middleware, Xero/QuickBooks for accounting transaction auto-import, lenders for income verification. 90-day reauthorization is CMA-mandated user protection — avoids "users unknowingly read long-term".

02

What you can build

  • 1Spending analysis apps (Money Dashboard, Cleo, etc.)
  • 2Account aggregation display
  • 3Accounting SaaS auto-import transactions
  • 4Loan underwriting auto-verification
03

Strengths & limitations

Strengths

  • Standardized (consistent schema across banks)
  • Strict user authorization (SCA + 90-day reconsent)
  • More reliable and compliant than screen scraping

Limitations

  • 90-day mandatory user reauthorization (CMA rule)
  • Read-only — cannot modify user account info
04

Example request

Generic template — replace <endpoint> with the real path from the docs.
curl https://openbanking.org.uk/<endpoint>
05

Getting started

Institution registers as AISP with FCA → registers app on bank developer portal → user OAuth consent → GET /open-banking/v3.1/aisp/accounts and related endpoints read accounts.

06

FAQ

Can I access transactions from years ago?+

After each authorization, API returns the last 90 days. To keep older data, store it yourself.

07

Technical details

CORS: NoHTTPS: YesSignup: ?Open source: No
Auth type
unknown
Pricing
unknown
Protocols
REST
SDKs
python, javascript, go, java
Response time
1143 ms
Last health check
5/12/2026, 7:38:01 AM
08

Tags

09

More from Openbanking Org Uk