Skip to main content

Use Open Banking

Leverage open banking APIs for financial services with PSD2-compliant solutions using Berlin Group standards and OAuth 2.0 authentication.

Integration Steps

1

Obtain QWAC Certificate

Get a valid QWAC certificate for XS2A from a trusted certificate authority.

Certificate must be validated via OCSP
2

Contact Paysera

Provide description of your API usage and required endpoints.

Specify Production or Sandbox environment
3

Set Up Accounts

Have Paysera accounts with sufficient funds for testing.

Required for both testing and production
4

Start Integration

Begin using the Open Banking APIs with OAuth 2.0 authentication.

https://open-banking-api.paysera.com

Supported Services

Account Information Service (AIS)

Access account information with proper customer consent

  • Account details and balances
  • Transaction history
  • Multi-currency account support
  • Various consent scopes (dedicated, global, bank-offered)

Payment Initiation Service (PIS)

Initiate payments on behalf of customers

  • Single payment initiation
  • Multi-currency payment support
  • Payment status tracking
  • 15-minute payment timeout

API Specifications

Authentication & Security

SCA Approach:✅ Redirect OAuth 2.0
Decoupled:❌ Not supported
Embedded:❌ Not supported
Certificate:✅ QWAC required

Consent & Timeouts

SCA Validity (Current):180 days
SCA Validity (One-off):1 hour
Consent Timeout:1 day
Max Frequency:4 per day

Account Support

IBAN:✅ Supported
Multi-currency:✅ Aggregation & Sub-account
Balance Types:✅ Interim Available & Booked
Owner Names:✅ Supported

Implementation Guidelines

Follow the Berlin Group NextGenPSD2 XS2A Framework for detailed implementation guidelines, sample queries, and best practices.

API Base URL

https://open-banking-api.paysera.com/xs2a/berlin/1.3/v1

Production Access Requirements

To access the production API, you must have:

  • Valid QWAC certificate from trusted authority
  • Certificate validation via OCSP
  • Compliance with international standards
  • Certificate must not be suspended or revoked

Failure to meet requirements results in HTTP 403 (Access Forbidden)

Documentation & Resources

Read Full Documentation

Complete API reference, authentication, and specifications

View API Docs

See More Examples

Real-world code examples and integration patterns

View Examples

Common Questions

Frequently asked questions about Open Banking integration

View FAQ