Endpoints
- Get bank account —
POST /v3/bank_account - Get statements —
POST /v3/statements
Authentication and account targeting
All endpoints use signed POST requests. SendX-Client-ID, X-Timestamp, X-Nonce, and X-Signature. X-Content-Hash is optional for inbound API calls.
For a USER credential, send both X-ISPB and X-Account-Number to select the account. An ACCOUNT credential can omit the pair and use its bound account. The credential must be allowed to access the selected account.