aid: up-bank
url: https://raw.githubusercontent.com/api-evangelist/up-bank/refs/heads/main/apis.yml
name: Up
kind: company
description: Up is an Australian digital-only neobank founded in 2018 as a collaboration
  between Melbourne software company Ferocia and Bendigo and Adelaide Bank. Up is not
  a mutual and is not separately licensed; it operates as a brand of ASX-listed Bendigo
  and Adelaide Bank, which holds the Authorised Deposit-taking Institution (ADI) licence,
  provides the underlying deposit products, and acquired full ownership of Ferocia
  and Up in 2021. Marketed as Australia's first fully cloud-hosted bank, Up serves
  more than one million customers through a mobile-first app with no monthly account
  fees, high-interest savers, and rich transaction categorisation. Up has a strong
  public API posture for its size - it exposes both a documented personal-banking
  developer API (accounts, transactions, tags, webhooks) and, as required of every
  Australian data holder under the Consumer Data Right (CDR / Open Banking), a public,
  unauthenticated Product Reference Data (PRD) API conforming to the DSB Consumer Data
  Standards.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Financial
- Banks
- Open Banking
- CDR
- Consumer Banking
- Australia
- Neobank
- Product Reference Data
created: '2026-07-20'
modified: '2026-07-22'
specificationVersion: '0.19'
apis:
- aid: up-bank:up-cdr-product-reference-data-api
  name: Up CDR Product Reference Data API
  tags:
  - CDR
  - Open Banking
  - Product Reference Data
  - Banking
  - Australia
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://up.com.au/cdr-policy/
  baseURL: https://api.up.com.au/cds-au/v1/banking/products
  properties:
  - url: https://consumerdatastandardsaustralia.github.io/standards/#get-products
    type: Documentation
  - url: https://consumerdatastandardsaustralia.github.io/standards/#consumer-data-standards-banking-apis
    type: APIReference
  - url: openapi/up-bank-cds-banking-products-openapi.yml
    type: OpenAPI
  - url: overlays/up-bank-cds-banking-products-overlay.yaml
    type: Overlay
  description: Public, unauthenticated Product Reference Data (PRD) API mandated for
    all Australian data holders under the Consumer Data Right. Confirmed live at
    https://api.up.com.au/cds-au/v1/banking/products (HTTP 200, x-v 3) returning a
    data.products array (4 products - Up Everyday, Up Saver, Up Essentials Saver, Up
    Home Loan) with fees, rates, and eligibility. Covers the DSB CDS Banking Get
    Products and Get Product Detail operations; the harvested OpenAPI is the shared
    DSB Consumer Data Standards Banking API v1.36.0 contract, not an Up-proprietary
    spec.
- aid: up-bank:up-cdr-accounts-balances-api
  name: Up CDR Accounts & Balances API
  tags:
  - CDR
  - Open Banking
  - Accounts
  - Balances
  - Banking
  - Australia
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://up.com.au/cdr-policy/
  baseURL: https://api.up.com.au/cds-au/v1/banking/accounts
  properties:
  - url: https://consumerdatastandardsaustralia.github.io/standards/#get-accounts
    type: Documentation
  - url: https://consumerdatastandardsaustralia.github.io/standards/#consumer-data-standards-banking-apis
    type: APIReference
  - url: openapi/up-bank-cds-banking-products-openapi.yml
    type: OpenAPI
  description: Consumer-authorized CDR Banking surface covering Get Accounts, Get
    Bulk Balances, Get Account Balance, and Get Account Detail. Reached only through
    the accredited data recipient (ADR) model with an active customer consent and
    FAPI/mTLS - not public; probing https://api.up.com.au/cds-au/v1/banking/accounts
    without CDR auth returns HTTP 400. Up confirms account balances and detail are
    shareable per its CDR policy. Contract is the shared DSB Consumer Data Standards
    Banking API v1.36.0 (accounts and balances paths), not an Up-proprietary spec.
- aid: up-bank:up-cdr-transactions-api
  name: Up CDR Transactions API
  tags:
  - CDR
  - Open Banking
  - Transactions
  - Banking
  - Australia
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://up.com.au/cdr-policy/
  baseURL: https://api.up.com.au/cds-au/v1/banking/accounts/{accountId}/transactions
  properties:
  - url: https://consumerdatastandardsaustralia.github.io/standards/#get-transactions-for-account
    type: Documentation
  - url: https://consumerdatastandardsaustralia.github.io/standards/#consumer-data-standards-banking-apis
    type: APIReference
  - url: openapi/up-bank-cds-banking-products-openapi.yml
    type: OpenAPI
  description: Consumer-authorized CDR Banking surface covering Get Transactions For
    Account and Get Transaction Detail. Accessed only via the CDR accredited data
    recipient model under active customer consent (FAPI/mTLS) - not public. Up's CDR
    policy states shared transaction history dates back to account creation. Contract
    is the shared DSB Consumer Data Standards Banking API v1.36.0 (transaction paths),
    not an Up-proprietary spec, and is distinct from Up's own personal-banking
    transactions API.
- aid: up-bank:up-cdr-direct-debits-scheduled-payments-api
  name: Up CDR Direct Debits & Scheduled Payments API
  tags:
  - CDR
  - Open Banking
  - Direct Debits
  - Scheduled Payments
  - Banking
  - Australia
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://up.com.au/cdr-policy/
  baseURL: https://api.up.com.au/cds-au/v1/banking/accounts/direct-debits
  properties:
  - url: https://consumerdatastandardsaustralia.github.io/standards/#get-direct-debits-for-account
    type: Documentation
  - url: https://consumerdatastandardsaustralia.github.io/standards/#consumer-data-standards-banking-apis
    type: APIReference
  - url: openapi/up-bank-cds-banking-products-openapi.yml
    type: OpenAPI
  description: Consumer-authorized CDR Banking surface covering Get Direct Debits For
    Account, Get Bulk Direct Debits, Get Scheduled Payments For Account, Get Scheduled
    Payments Bulk, and the payments scheduled/plans endpoints. Reached only through
    the CDR accredited data recipient model under active customer consent (FAPI/mTLS)
    - not public. Up's CDR policy lists scheduled payments among shareable data.
    Contract is the shared DSB Consumer Data Standards Banking API v1.36.0 (direct
    debits and scheduled payments paths), not an Up-proprietary spec.
- aid: up-bank:up-cdr-payees-api
  name: Up CDR Payees API
  tags:
  - CDR
  - Open Banking
  - Payees
  - Banking
  - Australia
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://up.com.au/cdr-policy/
  baseURL: https://api.up.com.au/cds-au/v1/banking/payees
  properties:
  - url: https://consumerdatastandardsaustralia.github.io/standards/#get-payees
    type: Documentation
  - url: https://consumerdatastandardsaustralia.github.io/standards/#consumer-data-standards-banking-apis
    type: APIReference
  - url: openapi/up-bank-cds-banking-products-openapi.yml
    type: OpenAPI
  description: Consumer-authorized CDR Banking surface covering Get Payees and Get
    Payee Detail (saved payee lists). Accessed only via the CDR accredited data
    recipient model under active customer consent (FAPI/mTLS) - not public. Contract
    is the shared DSB Consumer Data Standards Banking API v1.36.0 (payees paths), not
    an Up-proprietary spec.
- aid: up-bank:up-personal-banking-api
  name: Up Personal Banking API
  tags:
  - Banking
  - Transactions
  - Accounts
  - Webhooks
  - Personal Finance
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://developer.up.com.au/
  baseURL: https://api.up.com.au/api/v1
  properties:
  - url: https://developer.up.com.au/
    type: Documentation
  - url: https://developer.up.com.au/#welcome
    type: APIReference
  - url: openapi/up-bank-openapi.json
    type: OpenAPI
  - url: https://github.com/up-banking/api
    type: SourceCode
  - url: overlays/up-bank-openapi-overlay.yaml
    type: Overlay
  - url: asyncapi/up-bank-webhooks-asyncapi.yml
    type: AsyncAPI
  description: Up's own documented personal-banking developer API (v1, beta), giving
    account holders programmatic read access to accounts and transaction data plus
    management of categories, tags, attachments, and webhooks for real-time transaction
    events. Authenticated with a Personal Access Token (Bearer) obtained in the Up
    app or at api.up.com.au; currently scoped to personal use. The bank-specific
    OpenAPI 3.0.3 contract (17 paths) is published at github.com/up-banking/api and
    harvested verbatim.
common:
- type: AgenticAccess
  url: agentic-access/up-bank-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/up-bank-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/up-bank-domain-security.yml
- type: Website
  url: https://www.up.com.au/
- type: DeveloperPortal
  url: https://developer.up.com.au/
- type: Documentation
  url: https://developer.up.com.au/
- type: GettingStarted
  url: https://developer.up.com.au/#getting-started
- type: GitHubOrganization
  url: https://github.com/up-banking
- type: LinkedIn
  url: https://www.linkedin.com/company/upbanking/
- type: Blog
  url: https://up.com.au/blog/
- type: Pricing
  url: https://www.up.com.au/pricing/
- type: SignUp
  url: https://up.com.au/download/
- type: TermsOfService
  url: https://up.com.au/terms-and-information/
- type: PrivacyPolicy
  url: https://www.up.com.au/privacy/
- type: Support
  url: https://up.com.au/support/
- type: Security
  url: https://bugcrowd.com/engagements/bendigobank-vdp
- type: Authentication
  url: authentication/up-bank-authentication.yml
- type: OpenIDConnect
  url: well-known/up-bank-openid-configuration.json
- type: OAuthScopes
  url: scopes/up-bank-scopes.yml
- type: Conventions
  url: conventions/up-bank-conventions.yml
- type: ErrorCatalog
  url: errors/up-bank-problem-types.yml
- type: Lifecycle
  url: lifecycle/up-bank-lifecycle.yml
- type: Deprecation
  url: https://developer.up.com.au/
- type: Conformance
  url: conformance/up-bank-conformance.yml
- type: WellKnown
  url: well-known/up-bank-well-known.yml
- type: SecurityTxt
  url: well-known/up-bank-security.txt
- type: MCPServer
  url: mcp/up-bank-mcp.yml
- type: LLMsTxt
  url: llms/up-bank-llms.txt
- type: Packages
  url: packages/up-bank-packages.yml
- type: RateLimits
  url: rate-limits/up-bank-rate-limits.yml
- type: DataModel
  url: data-model/up-bank-data-model.yml
- type: AsyncAPI
  url: asyncapi/up-bank-webhooks-asyncapi.yml
- type: Webhooks
  url: asyncapi/up-bank-webhooks-asyncapi.yml
- type: AgentSkill
  url: skills/_index.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com