FINOS Application API
The Application API from FINOS — 4 operation(s) for application.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/finos-application-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
version: 20.17.1
title: Pod Application API
description: 'This document refers to Symphony API calls that do not need
encryption or decryption of content.
- sessionToken can be obtained by calling the
authenticationAPI on the symphony back end and the key manager
respectively. Refer to the methods described in authenticatorAPI.yaml.
- Actions are defined to be atomic, ie will succeed in their entirety
or fail and have changed nothing.
- If it returns a 40X status then it will have made no change to the
system even if ome subset of the request would have succeeded.
- If this contract cannot be met for any reason then this is an error
and the response code will be 50X.
'
servers:
- url: https://yourpodURL.symphony.com/pod
tags:
- name: Application
paths:
/v1/admin/app/create:
post:
summary: Creates a new app
parameters:
- name: sessionToken
description: Session authentication token.
in: header
required: true
schema:
type: string
tags:
- Application
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ApplicationDetail'
example:
applicationInfo:
appId: my-test-app
name: my-test-app
appUrl: https://joe.mydomain.com
domain: mydomain.com
publisher: Joe Smith
description: a test app
allowOrigins: mydomain.com
permissions:
- ACT_AS_USER
- SEND_MESSAGES
notification:
url: https://some.url
apiKey: 123456
cert: '-----BEGIN PUBLIC KEY-----\nMIICIANBgkqhw0BAQ...cCAwEAAQ==\n-----END PUBLIC KEY-----'
authenticationKeys: null
properties:
- key: port
value: 4000
- key: url
value: https://someother.url
'400':
description: Client error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 400
message: // Client error, see response body for further details.
'401':
description: 'Unauthorized: Invalid session token.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 401
message: Invalid session
'403':
description: 'Forbidden: Caller lacks necessary entitlement.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 403
message: The user lacks the required entitlement to perform this operation
'500':
description: Server error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 500
message: // Server error, see response body for further details.
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/ApplicationDetail'
description: Application detail to create the app with
required: true
/v1/admin/app/{id}/update:
post:
summary: Updates a app
parameters:
- name: sessionToken
description: Session authentication token.
in: header
required: true
schema:
type: string
- name: id
description: Id of the app
in: path
required: true
schema:
type: string
tags:
- Application
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ApplicationDetail'
example:
applicationInfo:
appId: my-test-app
name: my-test-app
appUrl: https://joe.mydomain.com
domain: mydomain.com
publisher: Joe Smith
description: a test app
allowOrigins: mydomain.com
permissions:
- ACT_AS_USER
- SEND_MESSAGES
notification:
url: https://some.url
apiKey: 123456
cert: '-----BEGIN PUBLIC KEY-----\nMIICIANBgkqhw0BAQ...cCAwEAAQ==\n-----END PUBLIC KEY-----'
authenticationKeys: null
properties:
- key: port
value: 4000
- key: url
value: https://someother.url
'400':
description: Client error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 400
message: // Client error, see response body for further details.
'401':
description: 'Unauthorized: Invalid session token.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 401
message: Invalid session
'403':
description: 'Forbidden: Caller lacks necessary entitlement.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 403
message: The user lacks the required entitlement to perform this operation
'500':
description: Server error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 500
message: // Server error, see response body for further details.
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/ApplicationDetail'
description: Details to update the app with
required: true
/v1/admin/app/{id}/delete:
post:
summary: Deletes a app
parameters:
- name: sessionToken
description: Session authentication token.
in: header
required: true
schema:
type: string
- name: id
description: The id of the app
in: path
required: true
schema:
type: string
tags:
- Application
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/SuccessResponse'
example:
format: TEXT
message: OK
'400':
description: Client error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 400
message: // Client error, see response body for further details.
'401':
description: 'Unauthorized: Invalid session token.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 401
message: Invalid session
'403':
description: 'Forbidden: Caller lacks necessary entitlement.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 403
message: The user lacks the required entitlement to perform this operation
'500':
description: Server error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 500
message: // Server error, see response body for further details.
/v1/admin/app/{id}/get:
get:
summary: Gets a app
parameters:
- name: sessionToken
description: Session authentication token.
in: header
required: true
schema:
type: string
- name: id
description: the id of the app to get
in: path
required: true
schema:
type: string
tags:
- Application
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/ApplicationDetail'
example:
applicationInfo:
appId: my-test-app
name: my-test-app
appUrl: https://joe.mydomain.com
domain: mydomain.com
publisher: Joe Smith
description: a test app
allowOrigins: mydomain.com
permissions:
- ACT_AS_USER
- SEND_MESSAGES
notification:
url: https://some.url
apiKey: 123456
cert: '-----BEGIN PUBLIC KEY-----\nMIICIANBgkqhw0BAQ...cCAwEAAQ==\n-----END PUBLIC KEY-----'
authenticationKeys: null
properties:
- key: port
value: 4000
- key: url
value: https://someother.url
'400':
description: Client error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 400
message: // Client error, see response body for further details.
'401':
description: 'Unauthorized: Invalid session token.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 401
message: Invalid session
'403':
description: 'Forbidden: Caller lacks necessary entitlement.'
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 403
message: The user lacks the required entitlement to perform this operation
'500':
description: Server error, see response body for further details.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
example:
code: 500
message: // Server error, see response body for further details.
components:
schemas:
Error:
type: object
properties:
code:
type: integer
format: int32
example: 401
message:
type: string
example: Invalid session
AppAuthenticationKey:
description: App RSA key information.
type: object
properties:
key:
description: Application RSA public key.
type: string
example: '-----BEGIN PUBLIC KEY-----\nMIICIANBgkqhw0BAQ...cCAwEAAQ==\n-----END PUBLIC KEY-----'
expirationDate:
description: RSA key expiration date. This value is set just for rotated keys.
type: integer
format: int64
example: 1700815176000
action:
description: "Action to be performed on the RSA key.\nThe following actions can be performed onto the app's active RSA key:\n - SAVE\n - REVOKE\nThe following actions can be performed onto the app's rotated RSA key:\n - REVOKE\n - EXTEND\n"
type: string
example: SAVE
ApplicationDetail:
description: Detailed record of application.
type: object
properties:
applicationInfo:
$ref: '#/components/schemas/ApplicationInfo'
iconUrl:
description: Url to a icon to use for app. Must start with "https://".
type: string
example: https://myiconUrl.com
description:
description: Description of the application.
type: string
example: a test app
allowOrigins:
description: 'The permitted domains to send or receive a request from.
The field is for the purpose of CORS which set the app specific "ALLOW-ORIGIN-DOMAINS" header in HTTP.
'
type: string
example: mydomain.com
permissions:
description: "List of application permissions provisioned for the application.\nIn addition to the known ones, custom permissions are accepted.\nA custom permission should only contain upper case alphanumeric characters and underscore.\nIt should not be empty or only contain spaces and its length is limited to 64 characters.\n\nKnown permissions:\n - SEND_MESSAGES\n - GET_USER_CONNECTIONS\n - REQUEST_USER_CONNECTIONS\n - SET_PRESENCE\n - GET_PRESENCE\n - GET_BASIC_USER_INFO\n - GET_EXTENDED_USER_INFO\n - GET_BASIC_CONTACT_INFO\n - GET_EXTENDED_CONTACT_INFO\n - ACT_AS_USER\n - MANAGE_SIGNALS\n - MANAGE_USER_FOLLOWING\n - TRUST_APP\n"
type: array
items:
type: string
maxLength: 64
minLength: 1
example:
- ACT_AS_USER
- SEND_MESSAGES
cert:
description: The app public certificate in pem format.
type: string
example: '-----BEGIN PUBLIC KEY-----\nMIICIANBgkqhw0BAQ...cCAwEAAQ==\n-----END PUBLIC KEY-----'
authenticationKeys:
$ref: '#/components/schemas/AppAuthenticationKeys'
notification:
$ref: '#/components/schemas/AppNotification'
properties:
$ref: '#/components/schemas/AppProperties'
AppProperties:
type: array
description: Application configuration properties that are shared with the extension application, client side. Do not store sensitive information here. Since SBE 20.14.
x-since: 20.14
items:
$ref: '#/components/schemas/AppProperty'
example:
- key: port
value: 4000
- key: url
value: https://someother.url
AppNotification:
type: object
description: Application callback information
properties:
url:
type: string
description: callback URL
example: https://some.url
apiKey:
type: string
description: apiKey sent into every callback request, using the X-API-KEY header
example: test123456
AppAuthenticationKeys:
description: App RSA keys information.
type: object
properties:
current:
$ref: '#/components/schemas/AppAuthenticationKey'
previous:
$ref: '#/components/schemas/AppAuthenticationKey'
ApplicationInfo:
description: 'Required information for creating an application.
'
type: object
properties:
appId:
description: An unique id for the application.
type: string
maxLength: 256
minLength: 1
name:
description: User defined name for the application.
type: string
appUrl:
description: The url for the app. Must start with "https://".
type: string
domain:
description: Domain for app, that must match app url domain.
type: string
publisher:
description: The publisher for this application.
type: string
example:
appId: my-test-app
name: my-test-app
appUrl: https://joe.mydomain.com
domain: mydomain.com
publisher: Joe Smith
AppProperty:
type: object
description: Application configuration property that is shared with the extension application, client side. Do not store sensitive information here.
properties:
key:
type: string
description: Name of an application configuration property. It cannot be null or empty and its length is limited to 1024 characters. Keys are unique.
value:
type: string
description: Value of an application configuration property. It cannot be null and its length is limited to 4096 characters. It can be empty.
example:
key: port
value: 4000
SuccessResponse:
type: object
properties:
format:
type: string
enum:
- TEXT
- XML
example: TEXT
message:
type: string
example: Success