How to connect with our APIs?
1. Sign up and create a Sandbox App
- create a free account
- choose which APIs you would like to use
- create a Sandbox App and get your Sandbox API Keys
2. Develop and test
- develop with our Sandbox APIs
- each API offers a Sandbox Environment which also allows testing of specific Use-Cases
3. Switch to production access and go live
- you can access the production PSD2-APIs with valid eIDAS certificate
Announcement: Update PSD2 XS2A APIs
ANKÜNDIGUNG: ERHÖHUNG DES KONTOZUGRIFFS AUF ZAHLUNGSINFORMATIONEN OHNE SCA VON 90 AUF 180 TAGE
Bezugnehmend auf die DelVO (EU) 2022/2360 ist eine Erhöhung des Kontozugriffs ohne SCA von 90 auf 180 Tagen per 25.7.2023 erforderlich. Diese Erhöhung wird an unserer XS2A-API entsprechend umgesetzt und per 25.7.2023 veröffentlicht.
Details
Erhöhung Kontozugriff von 90 auf 180 Tage ohne SCA
SCA beim ersten Zugriff nötig
SCA bei Ablauf der Frist nötig
Bestehende Consents, die mit der 90 Tage Regelung via SCA bestätigt werden, sind von der Änderung nicht betroffen. Der Consent ist 90 Tage gültig. Nach Ablauf wird ein neuer Consent mit 180 Tagen via SCA bestätigt.
ANNOUNCEMENT: INCREASE ACCOUNT ACCESS TO ACCOUNT INFORMATION WITHOUT SCA FROM 90 TO 180 DAYS
Referring to the DelVO (EU) 2022/2360, an increase in account access without SCA from 90 to 180 days as of July 25, 2023 is required. This increase will be implemented accordingly on our XS2A API and published on July 25th, 2023.
Details
Increased account access from 90 to 180 days without SCA
SCA required on first access
SCA required at deadline
Existing consents that are confirmed with the 90-day rule via SCA are not affected by the change. The consent is valid for 90 days. After expiry, a new consent with 180 days is confirmed via SCA.
ANNOUNCEMENT 09.11.2022: ROLLOUT FOR APP-TO-APP REDIRECTION HAS STARTED AND UPDATE TO ACCOUNT INFORMATION SERVICES
Update #1: The rollout of App-to-App Redirection has started!
Details to App-to-App Redirection:
The new VKB CONNECT is available in stores. Customers will need to update their Banking App to the latest version to enjoy the benefit of the App-to-App Redirection.
Our API uses the “App-to-App redirection based on deep linking” approach according to NISP / Berlin Group.
When a TPP App or Website forwards a PSU to the redirect url, the PSU will be redirected directly into the VKB CONNECT (instead of the Browser based redirect flow) and later will be redirected back again to the TPP Redirect-Back-Url.
App-to-App Redirection is only available if the TPP App and the VKB CONNECT are used on the same device.
The App-to-App Redirection has the same features and flows as the already established Browser-Redirect
The API Endpoints will stay the same and no changes in the API calls are needed.
Update #2: Changes to Account Information Service transaction history
AISPs only need one consent to access the complete transaction history and to also access the transactions for the next 90 days. The logic is a as follows: After a PSU has signed a consent, the complete transaction history is available for AISPs for up to 5 minutes. After 5 minutes only the last 90 days of transaction history are available.
The extended transaction history (available in the first 5 minutes) will be the same as in the PSUs online-banking and depends on the PSUs banking product (This can range from 1 to 7 years).