{
"info": {
"_postman_id": "afddd7c0-8f9c-4a4e-9282-25280240a28d",
"name": "Token.io's Open Banking API for TPPs Account on File Accounts API",
"description": "Token.io's Open Banking API
Token.io Support: support.token.io
The Token.io Open Banking API enables you to connect securely with banks for a range of services.
Using our API you can: - provide authorized access to an authenticated user's account information
- get information on specific banks
- initiate authorization with a user-selected bank
- initate and track single immediate payments and future dated payments
- use variable recurring payments (VRP) to grant long-held consents to Payment Initiation Service Providers (PISPs) to initiate series of payments from users' bank accounts
- carry out settlements, payments and refunds using our settlement accounts
For more information see our developer documentation.",
"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"lastUpdatedBy": "35240",
"uid": "35240-afddd7c0-8f9c-4a4e-9282-25280240a28d"
},
"item": [
{
"name": "accounts",
"item": [
{
"name": "{accountId}",
"item": [
{
"name": "balance",
"item": [
{
"name": "Get an account balance",
"id": "fa22114e-65de-4144-9a80-7f2619966e05",
"protocolProfileBehavior": {
"disableBodyPruning": true
},
"request": {
"auth": {
"type": "bearer",
"bearer": [
{
"key": "token",
"value": "{{bearerToken}}",
"type": "string"
}
]
},
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"id": "98d57f73-a1f7-48bc-9eed-5f2d6d40a41a",
"key": "accountId",
"value": "",
"description": "The unique bank account id, which specifies the account for which the information is requested."
}
]
},
"description": "The `GET /accounts/{accountId}/balance` endpoint retrieves the balance for a given bank account."
},
"response": [
{
"id": "2bc98099-e70c-450f-b96a-0c3a7e7dacb1",
"name": "Successful response",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"balance\": {\n \"accountId\": \"\",\n \"available\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"current\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"otherBalances\": [\n {\n \"amount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"type\": \"\",\n \"updatedAtMs\": \"\"\n },\n {\n \"amount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"type\": \"\",\n \"updatedAtMs\": \"\"\n }\n ]\n },\n \"status\": \"INVALID_REQUEST\"\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-2bc98099-e70c-450f-b96a-0c3a7e7dacb1"
},
{
"id": "d197333b-7d65-4515-8179-4e52613baf1e",
"name": "The client specified an invalid argument",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Bad Request",
"code": 400,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-d197333b-7d65-4515-8179-4e52613baf1e"
},
{
"id": "180602d3-cf2e-414d-b56a-8e02cdfc96db",
"name": "The authorization information is missing or invalid",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Unauthorized",
"code": 401,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-180602d3-cf2e-414d-b56a-8e02cdfc96db"
},
{
"id": "3d0bd95d-1936-4309-9cc2-6b75e0d294d6",
"name": "Permission to access this endpoint is denied",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Forbidden",
"code": 403,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"veniam ut\",\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-3d0bd95d-1936-4309-9cc2-6b75e0d294d6"
},
{
"id": "f92cfc0d-da74-49f2-83aa-179a279d003b",
"name": "The requested entity, such as a payment, was not found",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Not Found",
"code": 404,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"aliqua\",\n \"message\": \"\",\n \"paymentId\": \"proident ad u\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-f92cfc0d-da74-49f2-83aa-179a279d003b"
},
{
"id": "1abf733c-6296-45a6-92c6-5839ef9dcf5a",
"name": "Too many requests",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Too Many Requests",
"code": 429,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"ame\",\n \"message\": \"\",\n \"paymentId\": \"occaecat et\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-1abf733c-6296-45a6-92c6-5839ef9dcf5a"
},
{
"id": "d307589a-7a1f-4f30-a7f5-c3e5c908050b",
"name": "An unexpected or internal server error",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Internal Server Error",
"code": 500,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"\",\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-d307589a-7a1f-4f30-a7f5-c3e5c908050b"
},
{
"id": "0a6fe43f-d1a5-44bf-abb3-0360b8302cd7",
"name": "The operation was not implemented",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Not Implemented",
"code": 501,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"commodo eu adipisicing magna\",\n \"message\": \"\",\n \"paymentId\": \"incididunt\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-0a6fe43f-d1a5-44bf-abb3-0360b8302cd7"
},
{
"id": "ccc421f5-7769-4ba4-b776-7afce6e9cb2f",
"name": "Service is unavailable",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Service Unavailable",
"code": 503,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"sed\",\n \"message\": \"\",\n \"paymentId\": \"Duis tempor ullamco sunt\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-ccc421f5-7769-4ba4-b776-7afce6e9cb2f"
},
{
"id": "b9c728d2-4dbb-4592-903a-dea07a7080fc",
"name": "Gateway has timed out",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/balance",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"balance"
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Gateway Timeout",
"code": 504,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"eu\",\n \"message\": \"\",\n \"paymentId\": \"cupidatat\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-b9c728d2-4dbb-4592-903a-dea07a7080fc"
}
],
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-fa22114e-65de-4144-9a80-7f2619966e05"
}
],
"id": "6ea9ab98-73be-4c29-8456-8c367bb08166",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-6ea9ab98-73be-4c29-8456-8c367bb08166"
},
{
"name": "standing-orders",
"item": [
{
"name": "{standingOrderId}",
"item": [
{
"name": "Get standing order information",
"id": "973fd8a7-1397-48d7-87f0-18ab3daa1006",
"protocolProfileBehavior": {
"disableBodyPruning": true
},
"request": {
"auth": {
"type": "bearer",
"bearer": [
{
"key": "token",
"value": "{{bearerToken}}",
"type": "string"
}
]
},
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders/:standingOrderId",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders",
":standingOrderId"
],
"variable": [
{
"id": "bf8a2209-8ab6-403c-8b51-23a0b4514cdd",
"key": "accountId",
"value": "",
"description": "The system-generated, unique bank account id, which specifies the account for which the information is requested."
},
{
"id": "3c27bb6e-7bab-4aa5-8afb-c455db3c2e01",
"key": "standingOrderId",
"value": "",
"description": "(Required) "
}
]
},
"description": "The `GET /accounts/{accountId}/standing-orders/{standingOrderId}` endpoint retrieves information for a specific standing order in a given account, once consent has been given."
},
"response": [
{
"id": "077ef3ca-5daa-47df-b8f6-6bb1c3edd5c9",
"name": "Successful response",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders/:standingOrderId",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders",
":standingOrderId"
],
"variable": [
{
"key": "accountId"
},
{
"key": "standingOrderId"
}
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"standingOrder\": {\n \"createdAtMs\": \"\",\n \"creditorEndpoint\": {\n \"account\": {\n \"custom\": {\n \"bankId\": \"\",\n \"payload\": \"\"\n }\n },\n \"accountFeatures\": {\n \"supportsInformation\": false,\n \"supportsReceivePayment\": false,\n \"supportsSendPayment\": false\n },\n \"metadata\": {\n \"esse__\": \"\"\n },\n \"accountIdentifier\": {\n \"bankgiro\": {\n \"bankgiroNumber\": \"\"\n }\n },\n \"bankId\": \"\",\n \"bic\": \"\",\n \"customerData\": {\n \"address\": {\n \"city\": \"\",\n \"conscriptionNumber\": \"\",\n \"country\": \"\",\n \"district\": \"\",\n \"flats\": \"\",\n \"full\": \"\",\n \"hamlet\": \"\",\n \"houseName\": \"\",\n \"houseNumber\": \"\",\n \"place\": \"\",\n \"postCode\": \"\",\n \"province\": \"\",\n \"state\": \"\",\n \"street\": \"\",\n \"subdistrict\": \"\",\n \"suburb\": \"\"\n },\n \"legalNames\": [\n \"\",\n \"\"\n ]\n }\n },\n \"frequency\": \"\",\n \"id\": \"\",\n \"providerStandingOrderDetails\": {\n \"cma9StandingOrderDetails\": {\n \"creditorAccount\": {\n \"identification\": \"\",\n \"name\": \"\",\n \"schemeName\": \"\"\n },\n \"finalPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"finalPaymentDateTime\": \"\",\n \"firstPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"firstPaymentDateTime\": \"\",\n \"frequency\": \"\",\n \"nextPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"nextPaymentDateTime\": \"\",\n \"numberOfPayments\": \"\",\n \"reference\": \"\"\n }\n },\n \"status\": \"INVALID\",\n \"tokenId\": \"\",\n \"tokenSubmissionId\": \"\"\n },\n \"status\": \"INVALID_REQUEST\"\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-077ef3ca-5daa-47df-b8f6-6bb1c3edd5c9"
},
{
"id": "04942e1d-fc29-4504-9d7e-110d79182423",
"name": "The client specified an invalid argument",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders/:standingOrderId",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders",
":standingOrderId"
],
"variable": [
{
"key": "accountId"
},
{
"key": "standingOrderId"
}
]
}
},
"status": "Bad Request",
"code": 400,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-04942e1d-fc29-4504-9d7e-110d79182423"
}
],
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-973fd8a7-1397-48d7-87f0-18ab3daa1006"
}
],
"id": "53e5c572-7ee9-4d18-96d8-432dafd0b402",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-53e5c572-7ee9-4d18-96d8-432dafd0b402"
},
{
"name": "Get information for all standing orders",
"id": "8c0dcf70-3be7-4e7e-969e-6277cb0eff4b",
"protocolProfileBehavior": {
"disableBodyPruning": true
},
"request": {
"auth": {
"type": "bearer",
"bearer": [
{
"key": "token",
"value": "{{bearerToken}}",
"type": "string"
}
]
},
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"id": "5af35777-f399-4c44-87fb-8db392ac8719",
"key": "accountId",
"value": "",
"description": "The unique bank account id, which specifies the account for which the information is requested."
}
]
},
"description": "The `GET /accounts/{accountId}/standing-orders` endpoint retrieves information for all standing orders in a given account, once consent has been given."
},
"response": [
{
"id": "03bc2319-3083-451f-8020-98957a186a89",
"name": "Successful response",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "OK",
"code": 200,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"offset\": \"\",\n \"standingOrders\": [\n {\n \"createdAtMs\": \"\",\n \"creditorEndpoint\": {\n \"account\": {\n \"custom\": {\n \"bankId\": \"\",\n \"payload\": \"\"\n }\n },\n \"accountFeatures\": {\n \"supportsInformation\": false,\n \"supportsReceivePayment\": false,\n \"supportsSendPayment\": false\n },\n \"metadata\": {\n \"adipisicing_057\": \"\",\n \"culpa_06\": \"\"\n },\n \"accountIdentifier\": {\n \"bankgiro\": {\n \"bankgiroNumber\": \"\"\n }\n },\n \"bankId\": \"\",\n \"bic\": \"\",\n \"customerData\": {\n \"address\": {\n \"city\": \"\",\n \"conscriptionNumber\": \"\",\n \"country\": \"\",\n \"district\": \"\",\n \"flats\": \"\",\n \"full\": \"\",\n \"hamlet\": \"\",\n \"houseName\": \"\",\n \"houseNumber\": \"\",\n \"place\": \"\",\n \"postCode\": \"\",\n \"province\": \"\",\n \"state\": \"\",\n \"street\": \"\",\n \"subdistrict\": \"\",\n \"suburb\": \"\"\n },\n \"legalNames\": [\n \"\",\n \"\"\n ]\n }\n },\n \"frequency\": \"\",\n \"id\": \"\",\n \"providerStandingOrderDetails\": {\n \"cma9StandingOrderDetails\": {\n \"creditorAccount\": {\n \"identification\": \"\",\n \"name\": \"\",\n \"schemeName\": \"\"\n },\n \"finalPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"finalPaymentDateTime\": \"\",\n \"firstPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"firstPaymentDateTime\": \"\",\n \"frequency\": \"\",\n \"nextPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"nextPaymentDateTime\": \"\",\n \"numberOfPayments\": \"\",\n \"reference\": \"\"\n }\n },\n \"status\": \"INVALID\",\n \"tokenId\": \"\",\n \"tokenSubmissionId\": \"\"\n },\n {\n \"createdAtMs\": \"\",\n \"creditorEndpoint\": {\n \"account\": {\n \"custom\": {\n \"bankId\": \"\",\n \"payload\": \"\"\n }\n },\n \"accountFeatures\": {\n \"supportsInformation\": false,\n \"supportsReceivePayment\": false,\n \"supportsSendPayment\": false\n },\n \"metadata\": {\n \"cillumb31\": \"\",\n \"Duis_\": \"\",\n \"enime\": \"\",\n \"quis_99\": \"\"\n },\n \"accountIdentifier\": {\n \"bankgiro\": {\n \"bankgiroNumber\": \"\"\n }\n },\n \"bankId\": \"\",\n \"bic\": \"\",\n \"customerData\": {\n \"address\": {\n \"city\": \"\",\n \"conscriptionNumber\": \"\",\n \"country\": \"\",\n \"district\": \"\",\n \"flats\": \"\",\n \"full\": \"\",\n \"hamlet\": \"\",\n \"houseName\": \"\",\n \"houseNumber\": \"\",\n \"place\": \"\",\n \"postCode\": \"\",\n \"province\": \"\",\n \"state\": \"\",\n \"street\": \"\",\n \"subdistrict\": \"\",\n \"suburb\": \"\"\n },\n \"legalNames\": [\n \"\",\n \"\"\n ]\n }\n },\n \"frequency\": \"\",\n \"id\": \"\",\n \"providerStandingOrderDetails\": {\n \"cma9StandingOrderDetails\": {\n \"creditorAccount\": {\n \"identification\": \"\",\n \"name\": \"\",\n \"schemeName\": \"\"\n },\n \"finalPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"finalPaymentDateTime\": \"\",\n \"firstPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"firstPaymentDateTime\": \"\",\n \"frequency\": \"\",\n \"nextPaymentAmount\": {\n \"currency\": \"\",\n \"value\": \"\"\n },\n \"nextPaymentDateTime\": \"\",\n \"numberOfPayments\": \"\",\n \"reference\": \"\"\n }\n },\n \"status\": \"INVALID\",\n \"tokenId\": \"\",\n \"tokenSubmissionId\": \"\"\n }\n ],\n \"status\": \"INVALID_REQUEST\"\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-03bc2319-3083-451f-8020-98957a186a89"
},
{
"id": "92deac41-d674-4884-9eeb-a29ba1208e9d",
"name": "The client specified an invalid argument",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Bad Request",
"code": 400,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-92deac41-d674-4884-9eeb-a29ba1208e9d"
},
{
"id": "c87f9d84-21c4-404b-be7b-1bbd941dacd4",
"name": "The authorization information is missing or invalid",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Unauthorized",
"code": 401,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-c87f9d84-21c4-404b-be7b-1bbd941dacd4"
},
{
"id": "a7da6961-e2d1-41ba-912d-a2f6f988c727",
"name": "Permission to access this endpoint is denied",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Forbidden",
"code": 403,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"veniam ut\",\n \"message\": \"\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-a7da6961-e2d1-41ba-912d-a2f6f988c727"
},
{
"id": "131461d8-7e24-47b4-a2d0-4c499f43f54b",
"name": "The requested entity, such as a payment, was not found",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (i.e., the request is user-initiated; adding a `customer-initiated` = `true` header makes this explicit). For AIS calls, if the customer's IP address is not provided in the request, the bank assumes it is a TPP-initiated request and may limit the TPP to 4 TPP-initiated access attempts within a given 24-hour period.",
"key": "token-customer-ip-address",
"value": ""
},
{
"key": "Accept",
"value": "application/json"
},
{
"description": "Added as a part of security scheme: bearer",
"key": "Authorization",
"value": "Bearer "
}
],
"url": {
"raw": "{{baseUrl}}/accounts/:accountId/standing-orders?page.offset=&page.limit=1",
"host": [
"{{baseUrl}}"
],
"path": [
"accounts",
":accountId",
"standing-orders"
],
"query": [
{
"description": "The offset for the current page. If the offset has been provided in the request, this offset will be equal to the provided one. But if no offset was provided in the request (i.e. this is the first page) and the page is not empty, this field will be populated with a non-empty string. This may be helpful for loading the same page again, which might not always be possible with an empty offset due to a dynamic nature of the data.
The offset is not visible to a user and should not be parsed and/or understood in any way.",
"key": "page.offset",
"value": ""
},
{
"description": "(Required) The maximum number of records to return. This must be less than 200.",
"key": "page.limit",
"value": "1"
}
],
"variable": [
{
"key": "accountId"
}
]
}
},
"status": "Not Found",
"code": 404,
"_postman_previewlanguage": "json",
"header": [
{
"key": "Content-Type",
"value": "application/json"
}
],
"cookie": [],
"responseTime": null,
"body": "{\n \"error\": {\n \"errorCode\": \"aliqua\",\n \"message\": \"\",\n \"paymentId\": \"proident ad u\",\n \"tokenTraceId\": \"\"\n }\n}",
"createdAt": "2026-07-28T11:04:10.000Z",
"updatedAt": "2026-07-28T11:04:10.000Z",
"uid": "35240-131461d8-7e24-47b4-a2d0-4c499f43f54b"
},
{
"id": "0919dbfa-d866-4bff-aa23-cd6caf985f08",
"name": "Too many requests",
"originalRequest": {
"method": "GET",
"header": [
{
"description": "(Required) The `tokenId` represents the consent granted by the user (PSU).",
"key": "on-behalf-of",
"value": ""
},
{
"description": "The user's IP address if the user is currently logged in with the TPP. If the customer IP address is supplied (recommended), it is inferred that the user is present during the session (