OpenAPI Specification
openapi: 3.0.3
info:
contact:
email: contact@dsb.gov.au
name: Data Standards Body
url: https://dsb.gov.au/
description: Specifications for resource endpoints applicable to data holders in the Banking sector.
license:
name: MIT License
url: https://opensource.org/licenses/MIT
title: CDR Banking Banking Account Balances Banking Accounts API
version: 1.36.0
servers:
- description: MTLS
url: https://mtls.dh.example.com/cds-au/v1
tags:
- description: Banking Account endpoints
name: Banking Accounts
x-shortName: Accounts
paths:
/banking/accounts:
get:
description: 'Obtain a list of accounts.
Obsolete versions: [v1](includes/obsolete/get-accounts-v1.html), [v2](includes/obsolete/get-accounts-v2.html).'
operationId: listBankingAccounts
parameters:
- description: Used to filter results on the _productCategory_ field applicable to accounts. Any one of the valid values for this field can be supplied. If absent then all accounts returned.
explode: true
in: query
name: product-category
required: false
schema:
$ref: '#/components/schemas/BankingProductCategoryV2'
style: form
- description: Used to filter results according to open/closed status. Values can be `OPEN`, `CLOSED` or `ALL`. If absent then `ALL` is assumed.
explode: true
in: query
name: open-status
required: false
schema:
default: ALL
enum:
- ALL
- CLOSED
- OPEN
type: string
style: form
- description: Filters accounts based on whether they are owned by the authorised customer. `true` for owned accounts, `false` for unowned accounts and absent for all accounts.
explode: true
in: query
name: is-owned
required: false
schema:
type: boolean
style: form
- description: Page of results to request (standard pagination).
explode: true
in: query
name: page
required: false
schema:
default: 1
type: integer
style: form
x-cds-type: PositiveInteger
- description: Page size to request. Default is 25 (standard pagination).
explode: true
in: query
name: page-size
required: false
schema:
default: 25
type: integer
style: form
x-cds-type: PositiveInteger
- description: Version of the API endpoint requested by the client. Must be set to a positive integer. The endpoint should respond with the highest supported version between [_x-min-v_](#request-headers) and [_x-v_](#request-headers). If the value of [_x-min-v_](#request-headers) is equal to or higher than the value of [_x-v_](#request-headers) then the [_x-min-v_](#request-headers) header should be treated as absent. If all versions requested are not supported then the endpoint **MUST** respond with a `406 Not Acceptable`. See [HTTP Headers](#request-headers).
explode: false
in: header
name: x-v
required: true
schema:
type: string
style: simple
- description: Minimum version of the API endpoint requested by the client. Must be set to a positive integer if provided. The endpoint should respond with the highest supported version between [_x-min-v_](#request-headers) and [_x-v_](#request-headers). If all versions requested are not supported then the endpoint **MUST** respond with a `406 Not Acceptable`.
explode: false
in: header
name: x-min-v
required: false
schema:
type: string
style: simple
- description: An **[[RFC4122]](#nref-RFC4122)** UUID used as a correlation id. If provided, the data holder **MUST** play back this value in the _x-fapi-interaction-id_ response header. If not provided a **[[RFC4122]](#nref-RFC4122)** UUID value is required to be provided in the response header to track the interaction.
explode: false
in: header
name: x-fapi-interaction-id
required: false
schema:
type: string
style: simple
- description: The time when the customer last logged in to the Data Recipient Software Product as described in **[[FAPI-1.0-Baseline]](#nref-FAPI-1-0-Baseline)**. Required for all resource calls (customer present and unattended). Not required for unauthenticated calls.
explode: false
in: header
name: x-fapi-auth-date
required: false
schema:
type: string
style: simple
x-conditional: true
- description: The customer's original IP address if the customer is currently logged in to the Data Recipient Software Product. The presence of this header indicates that the API is being called in a customer present context. Not to be included for unauthenticated calls.
explode: false
in: header
name: x-fapi-customer-ip-address
required: false
schema:
type: string
style: simple
- description: The customer's original standard http headers [Base64](#common-field-types) encoded, including the original User-Agent header, if the customer is currently logged in to the Data Recipient Software Product. Mandatory for customer present calls. Not required for unattended or unauthenticated calls.
explode: false
in: header
name: x-cds-client-headers
required: false
schema:
type: string
style: simple
x-conditional: true
x-cds-type: Base64
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseBankingAccountListV3'
description: Successful response
headers:
x-v:
$ref: '#/components/headers/XV'
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'400':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[400 - Invalid Field](#error-400-field-invalid)</li><li>[400 - Missing Required Field](#error-400-field-missing)</li><li>[400 - Missing Required Header](#error-400-header-missing)</li><li>[400 - Invalid Version](#error-400-header-invalid-version)</li><li>[400 - Invalid Page Size](#error-400-field-invalid-page-size)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'406':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[406 - Unsupported Version](#error-406-header-unsupported-version)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'422':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[422 - Invalid Page](#error-422-field-invalid-page)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
summary: Get Accounts
tags:
- Banking Accounts
x-scopes:
- bank:accounts.basic:read
x-version: '3'
/banking/accounts/{accountId}:
get:
description: 'Obtain detailed information on a single account.
Obsolete versions: [v1](includes/obsolete/get-account-detail-v1.html), [v2](includes/obsolete/get-account-detail-v2.html), [v3](includes/obsolete/get-account-detail-v3.html), [v4](includes/obsolete/get-account-detail-v4.html).'
operationId: getBankingAccountDetail
parameters:
- description: The _accountId_ to obtain data for. _accountId_ values are returned by account list endpoints.
explode: false
in: path
name: accountId
required: true
schema:
$ref: '#/components/schemas/BankingAccountId'
style: simple
- description: Version of the API endpoint requested by the client. Must be set to a positive integer. The endpoint should respond with the highest supported version between [_x-min-v_](#request-headers) and [_x-v_](#request-headers). If the value of [_x-min-v_](#request-headers) is equal to or higher than the value of [_x-v_](#request-headers) then the [_x-min-v_](#request-headers) header should be treated as absent. If all versions requested are not supported then the endpoint **MUST** respond with a `406 Not Acceptable`. See [HTTP Headers](#request-headers).
explode: false
in: header
name: x-v
required: true
schema:
type: string
style: simple
- description: Minimum version of the API endpoint requested by the client. Must be set to a positive integer if provided. The endpoint should respond with the highest supported version between [_x-min-v_](#request-headers) and [_x-v_](#request-headers). If all versions requested are not supported then the endpoint **MUST** respond with a `406 Not Acceptable`.
explode: false
in: header
name: x-min-v
required: false
schema:
type: string
style: simple
- description: An **[[RFC4122]](#nref-RFC4122)** UUID used as a correlation id. If provided, the data holder **MUST** play back this value in the _x-fapi-interaction-id_ response header. If not provided a **[[RFC4122]](#nref-RFC4122)** UUID value is required to be provided in the response header to track the interaction.
explode: false
in: header
name: x-fapi-interaction-id
required: false
schema:
type: string
style: simple
- description: The time when the customer last logged in to the Data Recipient Software Product as described in **[[FAPI-1.0-Baseline]](#nref-FAPI-1-0-Baseline)**. Required for all resource calls (customer present and unattended). Not required for unauthenticated calls.
explode: false
in: header
name: x-fapi-auth-date
required: false
schema:
type: string
style: simple
x-conditional: true
- description: The customer's original IP address if the customer is currently logged in to the Data Recipient Software Product. The presence of this header indicates that the API is being called in a customer present context. Not to be included for unauthenticated calls.
explode: false
in: header
name: x-fapi-customer-ip-address
required: false
schema:
type: string
style: simple
- description: The customer's original standard http headers [Base64](#common-field-types) encoded, including the original User-Agent header, if the customer is currently logged in to the Data Recipient Software Product. Mandatory for customer present calls. Not required for unattended or unauthenticated calls.
explode: false
in: header
name: x-cds-client-headers
required: false
schema:
type: string
style: simple
x-conditional: true
x-cds-type: Base64
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseBankingAccountByIdV5'
description: Successful response
headers:
x-v:
$ref: '#/components/headers/XV'
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'400':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[400 - Invalid Field](#error-400-field-invalid)</li><li>[400 - Missing Required Field](#error-400-field-missing)</li><li>[400 - Missing Required Header](#error-400-header-missing)</li><li>[400 - Invalid Version](#error-400-header-invalid-version)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'404':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[404 - Unavailable Banking Account](#error-404-authorisation-unavailable-banking-account)</li><li>[404 - Invalid Banking Account](#error-404-authorisation-invalid-banking-account)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
'406':
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseErrorListV2'
description: The following error codes **MUST** be supported:<br/><ul class="error-code-list"><li>[406 - Unsupported Version](#error-406-header-unsupported-version)</li></ul>
headers:
x-fapi-interaction-id:
$ref: '#/components/headers/XFAPIInteractionId'
summary: Get Account Detail
tags:
- Banking Accounts
x-scopes:
- bank:accounts.detail:read
x-version: '5'
components:
schemas:
CommonPAFAddress:
description: Australian address formatted according to the file format defined by the [PAF file format](https://auspost.com.au/content/dam/auspost_corp/media/documents/australia-post-data-guide.pdf). Mandatory if the _addressUType_ value is `paf`.
properties:
dpid:
description: Unique identifier for an address as defined by Australia Post. Also known as Delivery Point Identifier.
type: string
thoroughfareNumber1:
description: Thoroughfare number for a property (first number in a property ranged address).
type: integer
x-cds-type: PositiveInteger
thoroughfareNumber1Suffix:
description: Suffix for the thoroughfare number. Only relevant if _thoroughfareNumber1_ is populated.
type: string
thoroughfareNumber2:
description: Second thoroughfare number (only used if the property has a ranged address, e.g., 23-25).
type: integer
x-cds-type: PositiveInteger
thoroughfareNumber2Suffix:
description: Suffix for the second thoroughfare number. Only relevant if _thoroughfareNumber2_ is populated.
type: string
flatUnitType:
description: Type of flat or unit for the address.
type: string
flatUnitNumber:
description: Unit number (including suffix, if applicable).
type: string
floorLevelType:
description: Type of floor or level for the address.
type: string
floorLevelNumber:
description: Floor or level number (including alpha characters).
type: string
lotNumber:
description: Allotment number for the address.
type: string
buildingName1:
description: Building/Property name 1.
type: string
buildingName2:
description: Building/Property name 2.
type: string
streetName:
description: The name of the street.
type: string
streetType:
description: The street type. Valid enumeration defined by Australia Post PAF code file.
type: string
streetSuffix:
description: The street type suffix. Valid enumeration defined by Australia Post PAF code file.
type: string
postalDeliveryType:
description: Postal delivery type. (e.g., PO BOX). Valid enumeration defined by Australia Post PAF code file.
type: string
postalDeliveryNumber:
description: Postal delivery number if the address is a postal delivery type.
type: integer
x-cds-type: PositiveInteger
postalDeliveryNumberPrefix:
description: Postal delivery number prefix related to the postal delivery number.
type: string
postalDeliveryNumberSuffix:
description: Postal delivery number suffix related to the postal delivery number.
type: string
localityName:
description: Full name of locality.
type: string
postcode:
description: Postcode for the locality.
type: string
state:
description: State in which the address belongs. Valid enumeration defined by Australia Post PAF code file [State Type Abbreviation](https://auspost.com.au/content/dam/auspost_corp/media/documents/australia-post-data-guide.pdf). `NSW`, `QLD`, `VIC`, `NT`, `WA`, `SA`, `TAS`, `ACT`, `AAT`.
type: string
required:
- localityName
- postcode
- state
type: object
BankingAccountDetailV5_allOf:
properties:
bsb:
description: The unmasked BSB for the account. Is expected to be formatted as digits only with leading zeros included and no punctuation or spaces.
type: string
accountNumber:
description: The unmasked account number for the account. Should not be supplied if the account number is a PAN requiring PCI compliance. Is expected to be formatted as digits only with leading zeros included and no punctuation or spaces.
type: string
bundleName:
description: Optional field to indicate if this account is part of a bundle that is providing additional benefit to the customer.
type: string
instalments:
$ref: '#/components/schemas/BankingProductInstalments'
specificAccountUType:
description: The type of structure to present account specific fields.
enum:
- creditCard
- loan
- termDeposit
type: string
termDeposit:
description: Mandatory if the _specificAccountUType_ value is `termDeposit`.
items:
$ref: '#/components/schemas/BankingTermDepositAccount'
type: array
creditCard:
allOf:
- $ref: '#/components/schemas/BankingCreditCardAccount'
description: Mandatory if the _specificAccountUType_ value is `creditCard`.
loan:
allOf:
- $ref: '#/components/schemas/BankingLoanAccountV3'
description: Mandatory if the _specificAccountUType_ value is `loan`.
depositRate:
description: Current rate to calculate interest earned being applied to deposit balances as it stands at the time of the API call.
type: string
x-cds-type: RateString
lendingRate:
description: The current rate to calculate interest payable being applied to lending balances as it stands at the time of the API call.
type: string
x-cds-type: RateString
depositRates:
description: Fully described deposit rates for this account based on the equivalent structure in Product Reference.
items:
$ref: '#/components/schemas/BankingProductDepositRateV2'
type: array
lendingRates:
description: Fully described lending rates for this account based on the equivalent structure in Product Reference.
items:
$ref: '#/components/schemas/BankingProductLendingRateV3'
type: array
features:
description: Array of features of the account based on the equivalent structure in Product Reference with the following additional field.
items:
allOf:
- $ref: '#/components/schemas/BankingProductFeatureV4'
- properties:
isActivated:
default: UNKNOWN
description: <ul><li>`ACTIVATED` if the feature has been activated by the customer or is a standard feature of the product</li><li>`NOT_ACTIVATED` if the feature is not activated but is available for activation</li><li>`UNKNOWN` or absent if the activation state is unknown.</ul>**Note:** This is an additional field appended to the feature structure defined in the Product Reference payload.
enum:
- ACTIVATED
- NOT_ACTIVATED
- UNKNOWN
type: string
type: object
type: object
type: array
fees:
description: Fees and charges applicable to the account based on the equivalent structure in Product Reference.
items:
$ref: '#/components/schemas/BankingProductFeeV2'
type: array
addresses:
description: The addresses for the account to be used for correspondence.
items:
$ref: '#/components/schemas/CommonPhysicalAddress'
type: array
type: object
x-conditional:
- termDeposit
- creditCard
- loan
BankingLoanAccountV3:
properties:
originalStartDate:
description: Optional original start date for the loan.
type: string
x-cds-type: DateString
originalLoanAmount:
description: Optional original loan value.
type: string
x-cds-type: AmountString
originalLoanCurrency:
default: AUD
description: If absent assumes `AUD`.
type: string
x-cds-type: CurrencyString
loanEndDate:
description: Date that the loan is due to be repaid in full.
type: string
x-cds-type: DateString
nextInstalmentDate:
description: Next date that an instalment is required.
type: string
x-cds-type: DateString
minInstalmentAmount:
description: Minimum amount of next instalment.
type: string
x-cds-type: AmountString
minInstalmentCurrency:
default: AUD
description: If absent assumes `AUD`.
type: string
x-cds-type: CurrencyString
maxRedraw:
description: Maximum amount of funds that can be redrawn. If not present redraw is not available even if the feature exists for the account.
type: string
x-cds-type: AmountString
maxRedrawCurrency:
default: AUD
description: If absent assumes `AUD`.
type: string
x-cds-type: CurrencyString
minRedraw:
description: Minimum redraw amount.
type: string
x-cds-type: AmountString
minRedrawCurrency:
default: AUD
description: If absent assumes `AUD`.
type: string
x-cds-type: CurrencyString
offsetAccountEnabled:
description: Set to `true` if one or more offset accounts are configured for this loan account.
type: boolean
offsetAccountIds:
description: The _accountId_ values of the configured offset accounts attached to this loan. Only offset accounts that can be accessed under the current authorisation should be included. It is expected behaviour that _offsetAccountEnabled_ is set to `true` but the _offsetAccountIds_ field is absent or empty. This represents a situation where an offset account exists but details can not be accessed under the current authorisation.
items:
$ref: '#/components/schemas/BankingAccountId'
type: array
repaymentType:
description: Option in place for repayments.
enum:
- INTEREST_ONLY
- OTHER
- PRINCIPAL_AND_INTEREST
- UNCONSTRAINED
type: string
repaymentFrequency:
description: The expected or required repayment frequency. Formatted according to [ISO 8601 Durations](https://en.wikipedia.org/wiki/ISO_8601#Durations) (excludes recurrence syntax).
type: string
x-cds-type: ExternalRef
required:
- repaymentType
type: object
ResponseBankingAccountByIdV5:
properties:
data:
$ref: '#/components/schemas/BankingAccountDetailV5'
links:
$ref: '#/components/schemas/Links'
meta:
$ref: '#/components/schemas/Meta'
required:
- data
- links
type: object
Meta:
type: object
BankingAccountId:
description: A unique identifier for a Banking account, generated according to [CDR ID Permanence](#id-permanence) requirements.
type: string
x-cds-type: ASCIIString
ErrorV2:
properties:
code:
description: The code of the error encountered. Where the error is specific to the respondent, an application-specific error code, expressed as a string value. If the error is application-specific, the URN code that the specific error extends must be provided in the _meta_ object. Otherwise, the value is the error code URN.
type: string
title:
description: A short, human-readable summary of the problem that **MUST NOT** change from occurrence to occurrence of the problem represented by the error code.
type: string
detail:
description: A human-readable explanation specific to this occurrence of the problem.
type: string
meta:
$ref: '#/components/schemas/ErrorV2_meta'
required:
- code
- detail
- title
type: object
x-conditional:
- meta
LinksPaginated:
properties:
self:
description: Fully qualified link that generated the current response document.
type: string
x-cds-type: URIString
first:
description: URI to the first page of this set. Mandatory if this response is not the first page.
type: string
x-cds-type: URIString
prev:
description: URI to the previous page of this set. Mandatory if this response is not the first page.
type: string
x-cds-type: URIString
next:
description: URI to the next page of this set. Mandatory if this response is not the last page.
type: string
x-cds-type: URIString
last:
description: URI to the last page of this set. Mandatory if this response is not the last page.
type: string
x-cds-type: URIString
required:
- self
type: object
x-conditional:
- prev
- next
- first
- last
ResponseBankingAccountListV3_data:
properties:
accounts:
description: The list of accounts returned. If the filter results in an empty set then this array may have no records.
items:
$ref: '#/components/schemas/BankingAccountV3'
type: array
required:
- accounts
type: object
ResponseBankingAccountListV3:
properties:
data:
$ref: '#/components/schemas/ResponseBankingAccountListV3_data'
links:
$ref: '#/components/schemas/LinksPaginated'
meta:
$ref: '#/components/schemas/MetaPaginated'
required:
- data
- links
- meta
type: object
BankingFeeDiscountRate:
properties:
rateType:
description: Type of fee rate discount calculation.<ul><li>`BALANCE` A fee rate discount based on a balance</li><li>`FEE` A fee rate discount based on the fee to which the discount is attached</li><li>`INTEREST_ACCRUED` A fee rate discount based on interest accrued</li><li>`TRANSACTION` A fee rate discount based on a transaction.</li></ul>
enum:
- BALANCE
- FEE
- INTEREST_ACCRUED
- TRANSACTION
type: string
rate:
description: The fee rate discount calculated according to the _rateType_.
type: string
x-cds-type: RateString
amountRange:
$ref: '#/components/schemas/BankingFeeDiscountRange'
required:
- rate
- rateType
type: object
BankingProductLendingRateV3:
properties:
lendingRateType:
description: The type of rate (`FIXED`, `VARIABLE`, etc.) For further details, refer to [Product Lending Rate Types](#tocSproductlendingratetypedoc).
enum:
- BALANCE_TRANSFER
- BUNDLE_DISCOUNT_FIXED
- BUNDLE_DISCOUNT_VARIABLE
- CASH_ADVANCE
- DISCOUNT
- FIXED
- FLOATING
- INTRODUCTORY
- MARKET_LINKED
- PENALTY
- PURCHASE
- VARIABLE
example: FIXED
type: string
rate:
description: The rate to be applied.
type: string
x-cds-type: RateString
comparisonRate:
description: A comparison rate equivalent for this rate.
type: string
x-cds-type: RateString
calculationFrequency:
description: The period after which the rate is applied to the balance to calculate the amount due for the period. Calculation of the amount is often daily (as balances may change) but accumulated until the total amount is 'applied' to the account (see _applicationFrequency_). Formatted according to [ISO 8601 Durations](https://en.wikipedia.org/wiki/ISO_8601#Durations) (excludes recurrence syntax).
type: string
x-cds-type: ExternalRef
applicationType:
description: The type of approach used to apply the rate to the account.
enum:
- MATURITY
- PERIODIC
- UPFRONT
example: PERIODIC
type: string
applicationFrequency:
description: The period after which the calculated amount(s) (see _calculationFrequency_) are 'applied' (i.e. debited or credited) to the account. Formatted according to [ISO 8601 Durations](https://en.wikipedia.org/wiki/ISO_8601#Durations) (excludes recurrence syntax). Mandatory if the _applicationType_ value is `PERIODIC`.
type: string
x-cds-type: ExternalRef
interestPaymentDue:
description: When loan payments are due to be paid within each period. The investment benefit of earlier payments affect the rate that can be offered.
enum:
- IN_ADVANCE
- IN_ARREARS
type: string
repaymentType:
description: Option in place for repayments.
enum:
- INTEREST_ONLY
- OTHER
- PRINCIPAL_AND_INTEREST
- UNCONSTRAINED
type: string
loanPurpose:
description: The reason for taking out the loan.
enum:
- INVESTMENT
- OTHER
- OWNER_OCCUPIED
- UNCONSTRAINED
type: string
tiers:
description: Qualifying criteria or conditions relevant to the associated rate.
items:
$ref: '#/components/schemas/BankingProductRateTierV4'
type: array
applicabilityConditions:
description: Applicability conditions for the rate.
items:
$ref: '#/components/schemas/BankingProductRateConditionV2'
type: array
additionalValue:
description: Generic field containing additional information relevant to the [_lendingRateType_](#tocSproductlendingratetypedoc) specified. Whether mandatory or not is dependent on the value of [_lendingRateType_](#tocSproductlendingratetypedoc).
type: string
additionalInfo:
description: Display text providing more information on the rate.
type: string
additionalInfoUri:
description: Link to a web page with more information on this rate.
type: string
x-cds-type: URIString
required:
- applicationType
- lendingRateType
- loanPurpose
- rate
- repaymentType
type: object
x-conditional:
- additionalValue
- applicationFrequency
ErrorV2_meta:
description: Additional data for customised error codes.
properties:
urn:
description: The CDR error code URN which the applicati
# --- truncated at 32 KB (60 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/imb-bank/refs/heads/main/openapi/imb-bank-banking-accounts-api-openapi.yml