Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/fiskil:fiskil-auth-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Fiskil Auth API
version: '2026-08-22'
summary: Consumer-permissioned banking, lending and energy data for Australia and New Zealand, through one API.
description: Fiskil is the market leader in open data infrastructure, providing open banking, open finance and energy-data connectivity.
contact:
name: Fiskil
url: https://www.fiskil.com/contact
termsOfService: https://www.fiskil.com/legal/terms-of-service
servers:
- url: https://api.fiskil.com
description: Production
security:
- bearerAuth: []
tags:
- name: Auth
description: Consent authorisation sessions.
paths:
/auth/session:
post:
tags:
- Auth
summary: Create auth session
description: Create an auth session before auth process.
operationId: create-auth-session
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/CreateAuthSessionRequestBody'
example:
arrangement_id: 94549a73-a554-4b76-b824-d96898829751
cancel_uri: https://acme.com/cancel
end_user_id: eu_2yRHN2ag2y4p8kCtm5DOeccZEXB
institution_id: '10'
redirect_uri: https://acme.com/success
responses:
'200':
description: OK response.
content:
application/json:
schema:
$ref: '#/components/schemas/AddAuthSessionInConsoleResponseBody'
example:
auth_url: auth-session.com/redirect-url
expires_at: 1213467
id: 5qcql2s0bn9qfh1m5qd1sl4gth
session_id: ea564d-56012s4-6ds4564
'400':
description: 'invalid_arrangement_id: Bad Request response.'
content:
application/vnd.goa.error:
schema:
$ref: '#/components/schemas/Error'
'401':
description: 'unauthorized: Unauthorized response.'
content:
application/vnd.goa.error:
schema:
$ref: '#/components/schemas/Error'
'404':
description: 'end_user_not_found: Not Found response.'
content:
application/vnd.goa.error:
schema:
$ref: '#/components/schemas/Error'
security:
- bearerAuth: []
externalDocs:
description: Reference page for this operation
url: https://docs.fiskil.com/data-api/api-reference/create-auth-session
components:
schemas:
Error:
type: object
properties:
fault:
type: boolean
description: Is the error a server-side fault?
example: true
id:
type: string
description: ID is a unique identifier for this particular occurrence of the problem.
example: 123abc
message:
type: string
description: Message is a human-readable explanation specific to this occurrence of the problem.
example: parameter 'p' must be an integer
name:
type: string
description: Name is the name of this class of errors.
example: bad_request
temporary:
type: boolean
description: Is the error temporary?
example: true
timeout:
type: boolean
description: Is the error a timeout?
example: false
example:
fault: true
id: 123abc
message: parameter 'p' must be an integer
name: bad_request
temporary: true
timeout: false
required:
- name
- id
- message
- temporary
- timeout
- fault
CreateAuthSessionRequestBody:
type: object
properties:
arrangement_id:
type: string
description: Existing CDR arrangement ID to amend/update
example: 94549a73-a554-4b76-b824-d96898829751
cancel_uri:
type: string
description: Where the end user will be redirected on cancellation or failure. Required for redirect flows.
example: https://acme.com/cancel
end_user_id:
type: string
description: The end_user that will be consenting with an external provider
example: eu_2yRHN2ag2y4p8kCtm5DOeccZEXB
institution_id:
type: string
description: The institution id selected for the auth session. The user will not be able to select another institution during the consent flow.
example: '10'
redirect_uri:
type: string
description: Where the end user will be redirected to on success. Required for redirect flow.
example: https://acme.com/success
example:
arrangement_id: 94549a73-a554-4b76-b824-d96898829751
cancel_uri: https://acme.com/cancel
end_user_id: eu_2yRHN2ag2y4p8kCtm5DOeccZEXB
institution_id: '10'
redirect_uri: https://acme.com/success
required:
- end_user_id
AddAuthSessionInConsoleResponseBody:
type: object
properties:
auth_url:
type: string
description: The computed auth URL.
example: auth-session.com/redirect-url
expires_at:
type: integer
description: The computed auth URL expires at.
example: 1213467
format: int64
id:
type: string
description: The client id.
example: 5qcql2s0bn9qfh1m5qd1sl4gth
session_id:
type: string
description: Session Id
example: ea564d-56012s4-6ds4564
example:
auth_url: auth-session.com/redirect-url
expires_at: 1213467
id: 5qcql2s0bn9qfh1m5qd1sl4gth
session_id: ea564d-56012s4-6ds4564
required:
- id
- session_id
- expires_at
- auth_url
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: 'Exchange a client_id and client_secret at POST /v1/token for an access token, then send it as `Authorization: Bearer <token>`. See https://docs.fiskil.com/data-api/guides/getting-started/authentication'
externalDocs:
description: Fiskil API documentation
url: https://docs.fiskil.com
x-products:
- name: Data API
role: data recipient
summary: Consumer-permissioned access to banking, lending and energy data through one API.
audience: Fintechs, lenders, accounting and proptech platforms, energy retailers and comparison services.
surfaces:
- Banking API
- Energy API
selfServe: true
sandbox:
available: true
free: true
selfServe: true
note: Sandbox only. Production access starts on the Launch plan.
specification: Enumerated in the `paths` object of this document.
documentation: https://docs.fiskil.com/data-api
apiReference: https://docs.fiskil.com/data-api/api-reference
- name: Data Provider
role: data holder
summary: Managed platform for institutions to share customer and product data with consent and meet their regulatory obligations.
audience: Banks, non-bank lenders, energy retailers and enterprises.
surfaces:
- Consent management
- Product Portal
- Regulatory reporting
selfServe: false
specification: Published per regime — see `x-specifications`.
documentation: https://docs.fiskil.com/data-holder
x-specifications:
- name: Data Holder — CDR
description: 'Consumer Data Right data holder APIs for Australia: consent, authorisation, banking and energy resource endpoints.'
regime: AU CDR
url: https://docs.fiskil.com/openapi/holder-cdr.json
- name: Data Holder — Authentication
description: Authentication and authorisation for data holder surfaces.
regime: AU CDR
url: https://docs.fiskil.com/openapi/holder-auth.json
- name: Data Holder — Bring Your Own Data
description: Expose an existing internal API as a compliant data holder surface.
regime: Cross-regime
url: https://docs.fiskil.com/openapi/holder-byod.json
- name: Data Holder — FDX
description: Financial Data Exchange APIs, the standard used to meet CFPB Section 1033 in the United States.
regime: US Section 1033 / FDX
url: https://docs.fiskil.com/openapi/holder-fdx.json
- name: Data Holder — PSD2
description: PSD2 open banking APIs for the European Union.
regime: EU PSD2
url: https://docs.fiskil.com/openapi/holder-psd2.json
- name: Data Holder — Platform API
description: Platform administration and configuration.
regime: Cross-regime
url: https://docs.fiskil.com/openapi/holder-platform-api.json
- name: Data Holder — LATAM Colombia
description: Open finance data holder APIs for Colombia.
regime: CO open finance
url: https://docs.fiskil.com/openapi/holder-latam-colombia.json
- name: Data Holder — LATAM Chile
description: Open finance data holder APIs for Chile.
regime: CL open finance
url: https://docs.fiskil.com/openapi/holder-latam-chile.json
x-specifications-translated:
- name: Data Holder — Authentication (es)
url: https://docs.fiskil.com/openapi/holder-auth.es.json
- name: Data Holder — Platform API (es)
url: https://docs.fiskil.com/openapi/holder-platform-api.es.json
- name: Data Holder — LATAM Colombia (es)
url: https://docs.fiskil.com/openapi/holder-latam-colombia.es.json
- name: Data Holder — LATAM Chile (es)
url: https://docs.fiskil.com/openapi/holder-latam-chile.es.json
x-machine-readable:
llms: https://www.fiskil.com/llms.txt
llmsFull: https://www.fiskil.com/llms-full.txt
sitemapIndex: https://www.fiskil.com/sitemap-index.xml
docsIndex: https://docs.fiskil.com/llms.txt
agentSkill: https://docs.fiskil.com/skill.md
mcpServer: https://docs.fiskil.com/api/ai/mcp
dataApiReference: https://docs.fiskil.com/data-api/api-reference
specCatalogue: https://docs.fiskil.com/openapi/index.json
x-schema-source: Merged from the published Data API specifications at docs.fiskil.com/openapi.