openapi: 3.0.3
info:
  title: Xcel Energy Green Button Connect My Data ApplicationInformation DeviceCapability API
  summary: OAuth 2.0 authorized customer energy usage data based on the NAESB ESPI standard.
  description: 'Xcel Energy Green Button Connect My Data API based on the ESPI (Energy Services Provider Interface) standard developed by NAESB. Enables authorized third-party applications to access customer electricity and natural gas usage data captured by Xcel Energy smart meters. Resources are exposed as Atom feeds and entries containing UsagePoint, MeterReading, IntervalBlock, ReadingType, ElectricPowerUsageSummary, ElectricPowerQualitySummary, LocalTimeParameters, and customer information. Customer authorization is granted via OAuth 2.0 and follows the Green Button Connect specification used by utilities across North America.

    '
  version: 1.1.0
  contact:
    name: Xcel Energy Developer Portal
    url: https://developer-apim.aws.xcelenergy.com/
  license:
    name: Proprietary
    url: https://www.xcelenergy.com/privacy_policy
  x-generated-from: documentation
  x-last-validated: '2026-05-03'
  x-standards:
  - NAESB ESPI 1.1
  - Green Button Connect My Data
servers:
- url: https://api.xcelenergy.com/DataCustodian/espi/1_1/resource
  description: Xcel Energy Data Custodian (Production)
- url: https://developer-apim.aws.xcelenergy.com/DataCustodian/espi/1_1/resource
  description: Xcel Energy Developer Sandbox
tags:
- name: DeviceCapability
  description: Root resource that lists the function sets supported by the meter.
paths:
  /dcap:
    get:
      operationId: getDeviceCapability
      summary: Get the device capability index
      description: 'Returns the DeviceCapability resource — the root of the IEEE 2030.5 link graph. Clients use this resource to discover the URIs of all supported function sets on the meter.

        '
      tags:
      - DeviceCapability
      security:
      - mtls: []
      responses:
        '200':
          description: DeviceCapability resource.
          content:
            application/sep+xml:
              schema:
                $ref: '#/components/schemas/DeviceCapability'
            application/sep-exi:
              schema:
                $ref: '#/components/schemas/DeviceCapability'
        '401':
          $ref: '#/components/responses/Unauthorized'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  schemas:
    Link:
      type: object
      description: Link to another resource in the IEEE 2030.5 graph.
      properties:
        href:
          type: string
    Resource:
      type: object
      description: Base IEEE 2030.5 Resource type that all resources inherit from.
      properties:
        href:
          type: string
          description: Stable URI of the resource.
    DeviceCapability:
      allOf:
      - $ref: '#/components/schemas/Resource'
      - type: object
        properties:
          pollRate:
            type: integer
            example: 900
            description: Recommended poll rate in seconds.
          EndDeviceListLink:
            $ref: '#/components/schemas/Link'
          SelfDeviceLink:
            $ref: '#/components/schemas/Link'
          TimeLink:
            $ref: '#/components/schemas/Link'
          MirrorUsagePointListLink:
            $ref: '#/components/schemas/Link'
          UsagePointListLink:
            $ref: '#/components/schemas/Link'
          DERProgramListLink:
            $ref: '#/components/schemas/Link'
          DemandResponseProgramListLink:
            $ref: '#/components/schemas/Link'
          MessagingProgramListLink:
            $ref: '#/components/schemas/Link'
          ResponseSetListLink:
            $ref: '#/components/schemas/Link'
  responses:
    Unauthorized:
      description: TLS authentication failed or the client certificate is not authorized.
  securitySchemes:
    accessToken:
      type: oauth2
      description: Customer-scoped access token issued via the OAuth 2.0 authorization-code grant.
      flows:
        authorizationCode:
          authorizationUrl: https://api.xcelenergy.com/DataCustodian/oauth/authorize
          tokenUrl: https://api.xcelenergy.com/DataCustodian/oauth/token
          refreshUrl: https://api.xcelenergy.com/DataCustodian/oauth/token
          scopes:
            FB=4_5_15;IntervalDuration=900;BlockDuration=monthly;HistoryLength=34128000: Standard ESPI scope string for 15-minute electric usage data with 13 months of history.
    clientAccessToken:
      type: oauth2
      description: Application-scoped client access token used for management endpoints (Authorization list, Bulk, ServiceStatus).
      flows:
        clientCredentials:
          tokenUrl: https://api.xcelenergy.com/DataCustodian/oauth/token
          scopes:
            DataCustodian_Admin_Access: Administrative scope used for application-level operations.
    registrationAccessToken:
      type: http
      scheme: bearer
      bearerFormat: Registration Access Token
      description: Token issued at application registration; used to read or update ApplicationInformation.