4 ms·

Which bank is this? I've been looking for one that exposes an API for years.

by mondoshawan 6y ago

tpxl 6y ago
In theory there is EU regulation so all EU banks should expose this. I'm not sure where it went in practice though.
- Freak_NL 6y ago
  I think that (PSD2) only applies to having an API that allows users to grant access to their account to third party apps. Actually using that API yourself seems impossible, as banks want only vetted third parties to actually use the API. It means you get the freedom to choose a different pre-approved proprietary app to access your bank account (which will probably make its money from selling a nicely detailed advertising profile based on your transactions), not the freedom to interface with your bank with an open API. Also, because of the strong authentication requirement from PSD2 (amongst others), you won't get to do banking in an app except on an Android or IOS smartphone. Add to this the ongoing drive from banks and governments alike to push authentication even on a normal computer to smartphones (i.e., you use their proprietary app on an Android/IOS smartphone to authenticate when you access them via a web browser on a normal computer), and the picture becomes really bleak for any alternative smartphone OS. The current trend, at least seen from the Netherlands, is: you submit to an Android or IOS smartphone, and you get to do things like banking or accessing your digital healthcare dossier online. If you don't, then you are classified as digitally illiterate, and are nudged towards having people near you assume those tasks in your name by delegation — basically the strategy for elderly or the mentally incapable. The third option, authentication using discrete hardware such as card readers (currently an option for many banks) or something like WebAuthn is something banks would really like to get rid of because of the cost of maintaining multiple authentication methods, and hey, everybody owns an Android/IOS smartphone anyway, so why not .. ?
  - megous 6y ago
    Pretty much. I had some hope about PSD2, until I read about it. Very useless, unless you just want to give your data to more third parties. In addition EU also broke all my bank scraping scripts (except for the mentioned bank, that still has the same API it had for years already and doesn't require two factor auth, just an api key) by enforcing two-factor (well not really, just SMS auth, it's not like I can use any other 2nd factor, or make my own). So in addition to helping third-party data slurpers, they also broke the first-party data access with the latest regulation.
megous 6y ago
It's fio in czech republic. Probably not much useful to you. It's not the EU enforced API (that's not intended for end users anyway - I tried asking other banks for API access too, and failed). This bank had this API for years.

Which bank is this? I've been looking for one that exposes an API for years.

tpxl 6y ago

In theory there is EU regulation so all EU banks should expose this. I'm not sure where it went in practice though.

Freak_NL 6y ago
I think that (PSD2) only applies to having an API that allows users to grant access to their account to third party apps. Actually using that API yourself seems impossible, as banks want only vetted third parties to actually use the API. It means you get the freedom to choose a different pre-approved proprietary app to access your bank account (which will probably make its money from selling a nicely detailed advertising profile based on your transactions), not the freedom to interface with your bank with an open API. Also, because of the strong authentication requirement from PSD2 (amongst others), you won't get to do banking in an app except on an Android or IOS smartphone. Add to this the ongoing drive from banks and governments alike to push authentication even on a normal computer to smartphones (i.e., you use their proprietary app on an Android/IOS smartphone to authenticate when you access them via a web browser on a normal computer), and the picture becomes really bleak for any alternative smartphone OS. The current trend, at least seen from the Netherlands, is: you submit to an Android or IOS smartphone, and you get to do things like banking or accessing your digital healthcare dossier online. If you don't, then you are classified as digitally illiterate, and are nudged towards having people near you assume those tasks in your name by delegation — basically the strategy for elderly or the mentally incapable. The third option, authentication using discrete hardware such as card readers (currently an option for many banks) or something like WebAuthn is something banks would really like to get rid of because of the cost of maintaining multiple authentication methods, and hey, everybody owns an Android/IOS smartphone anyway, so why not .. ?
- megous 6y ago
  Pretty much. I had some hope about PSD2, until I read about it. Very useless, unless you just want to give your data to more third parties. In addition EU also broke all my bank scraping scripts (except for the mentioned bank, that still has the same API it had for years already and doesn't require two factor auth, just an api key) by enforcing two-factor (well not really, just SMS auth, it's not like I can use any other 2nd factor, or make my own). So in addition to helping third-party data slurpers, they also broke the first-party data access with the latest regulation.

megous 6y ago

It's fio in czech republic. Probably not much useful to you. It's not the EU enforced API (that's not intended for end users anyway - I tried asking other banks for API access too, and failed). This bank had this API for years.