Endpoints for discovering available payment rails, banks, and providers for a given country and currency corridor.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/lightspark:lightspark-discoveries-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Grid Discoveries API
description: API for managing global payments on the open Money Grid. Built by Lightspark. See the full documentation at https://docs.lightspark.com/.
version: '2025-10-13'
contact:
name: Lightspark Support
email: support@lightspark.com
license:
name: Proprietary
url: https://lightspark.com/terms
servers:
- url: https://api.lightspark.com/grid/2025-10-13
description: Production server
security:
- BasicAuth: []
- AgentAuth: []
tags:
- name: Discoveries
description: Endpoints for discovering available payment rails, banks, and providers for a given country and currency corridor.
paths:
/discoveries:
get:
summary: List available receiving institution names
description: 'Retrieve available payment institution names for a given country and currency. Use this endpoint
to look up supported banks and payment providers for a specific corridor.
If no country and currency parameter are provided, all payment institutions will be returned
The `bankName` field in each result is the value to pass as `bankName` when
creating an external account via `POST /customers/external-accounts`.'
operationId: getDiscoveries
tags:
- Discoveries
security:
- BasicAuth: []
parameters:
- name: country
in: query
description: ISO 3166-1 alpha-2 country code (e.g. PH)
required: false
schema:
type: string
example: PH
- name: currency
in: query
description: ISO 4217 currency code (e.g. PHP)
required: false
schema:
type: string
example: PHP
responses:
'200':
description: Successful operation
content:
application/json:
schema:
$ref: '#/components/schemas/DiscoveryListResponse'
examples:
philippinesBanks:
summary: Payment rails for Philippines (PHP)
value:
data:
- bankName: Bank of the Philippine Islands (BPI)
displayName: Bank of the Philippine Islands (BPI)
country: PH
currency: PHP
- bankName: BDO Network Bank
displayName: BDO Network Bank / One Network Bank
country: PH
currency: PHP
'400':
description: Bad request - Invalid parameters
content:
application/json:
schema:
$ref: '#/components/schemas/Error400'
'401':
description: Unauthorized
content:
application/json:
schema:
$ref: '#/components/schemas/Error401'
'500':
description: Internal service error
content:
application/json:
schema:
$ref: '#/components/schemas/Error500'
components:
schemas:
PaymentDocumentRequirementId:
type: string
description: 'A stable identifier for one required document within a purpose''s requirements. The same ID means the same requirement across quotes. It is separate from `PaymentDocumentType`. The requirement ID names the document to supply, and the document type names what a file is. The two differ where a requirement accepts alternatives. For example, a file declared as either `PURCHASE_ORDER` or `DELIVERY_SLIP` fills the `SUPPORTING_PROOF` requirement.
[Supporting Documents](https://docs.lightspark.com/payouts-and-b2b/payment-flow/send-payment#supporting-documents) lists the IDs each purpose requires.
Treat the ID as an opaque value, not a member of a fixed list. Grid may add new IDs as requirements change.'
example: SUPPORTING_PROOF
FieldError:
type: object
required:
- field
description: One field-level validation failure. Field-validation errors on submit endpoints (e.g. `POST /customers`, `PATCH /customers/{id}`) emit an array of these under `details.errors` so platforms can render form-field-level UX for every failure in a single round-trip.
properties:
field:
type: string
description: Dot-notation path to the offending field.
example: identifier
constraint:
$ref: '#/components/schemas/FieldConstraint'
message:
type: string
description: Human-readable explanation of what's wrong with this field.
example: Value is not one of the allowed enum members.
Error500:
type: object
required:
- reason
- code
properties:
code:
type: string
description: '| Error Code | Description |
|------------|-------------|
| GRID_SWITCH_ERROR | Grid switch error |
| INTERNAL_ERROR | Internal server or UMA error |
'
enum:
- GRID_SWITCH_ERROR
- INTERNAL_ERROR
reason:
type: string
description: Error message
details:
type: object
description: Additional error details
additionalProperties: true
Error400:
type: object
required:
- reason
- code
properties:
code:
type: string
description: '| Error Code | Description |
|------------|-------------|
| INVALID_INPUT | Invalid input provided |
| END_USER_TERMS_VERSION_NOT_FOUND | The submitted version is not supported for the agreement it was sent for |
| MISSING_MANDATORY_USER_INFO | Required customer information is missing |
| INVITATION_ALREADY_CLAIMED | Invitation has already been claimed |
| INVITATIONS_NOT_CONFIGURED | Invitations are not configured |
| INVALID_UMA_ADDRESS | UMA address format is invalid |
| INVITATION_CANCELLED | Invitation has been cancelled |
| INVALID_RECEIVER | Receiver is invalid |
| PARSE_PAYREQ_RESPONSE_ERROR | Error parsing receiver PayReq response |
| CERT_CHAIN_INVALID | Counterparty certificate chain is invalid |
| CERT_CHAIN_EXPIRED | Counterparty certificate chain has expired |
| INVALID_PUBKEY_FORMAT | Counterparty Public key format is invalid |
| MISSING_REQUIRED_UMA_PARAMETERS | Counterparty required UMA parameters are missing |
| SENDER_NOT_ACCEPTED | The receiving institution declined this sender. Final; a retry returns the same answer |
| AMOUNT_OUT_OF_RANGE | Amount is out of range |
| INVALID_CURRENCY | Currency is invalid |
| INVALID_TIMESTAMP | Timestamp is invalid |
| INVALID_NONCE | Nonce is invalid |
| INVALID_REQUEST_FORMAT | Request format is invalid |
| INVALID_BANK_ACCOUNT | Bank account is invalid |
| SELF_PAYMENT | Self payment not allowed |
| PARSE_LNURLP_RESPONSE_ERROR | Error parsing LNURLP response |
| INVALID_AMOUNT | Amount is invalid |
| WEBHOOK_ENDPOINT_NOT_SET | Webhook endpoint is not set |
| WEBHOOK_DELIVERY_ERROR | Webhook delivery error |
| LOW_QUALITY | Document quality too low to process |
| DATA_MISMATCH | Document details don''t match provided information |
| EXPIRED | Document has expired |
| SUSPECTED_FRAUD | Document suspected of being forged or edited |
| UNSUITABLE_DOCUMENT | Document type is not accepted or not supported |
| INCOMPLETE | Document is missing pages or sides |
| EMAIL_OTP_CREDENTIAL_ALREADY_EXISTS | An EMAIL_OTP credential is already registered on the target internal account; only one email OTP credential is supported per internal account at this time |
| SMS_OTP_CREDENTIAL_ALREADY_EXISTS | An SMS_OTP credential is already registered on the target internal account; only one SMS OTP credential is supported per internal account at this time |
| PASSKEY_CREDENTIAL_ALREADY_EXISTS | A PASSKEY credential with the same WebAuthn credentialId is already registered on the target internal account |
| AUTH_CREDENTIAL_VERIFICATION_REQUIRED | The new email or phone number has no verified replacement credential |
| AUTH_CREDENTIAL_VERIFICATION_EXPIRED | The replacement credential''s verification has expired |
| STABLECOIN_PROVIDER_ACCOUNT_INVALID | The stablecoin provider account link is not usable |
| STABLECOIN_PROVIDER_ACCOUNT_REVOKED | The stablecoin provider account link has been revoked |
| STABLECOIN_PROVIDER_ACCOUNT_SELECTION_REQUIRED | Multiple active provider account links exist; pass `stablecoinProviderAccountId` to select one |
| CARDHOLDER_KYC_NOT_APPROVED | The cardholder''s KYC status is not `APPROVED`, so a card cannot be issued |
| ACCOUNTHOLDER_AGREEMENT_NOT_ACCEPTED | The customer create request omits an accountholder agreement its accounts require |
| TRANSACTION_SIZE_LIMIT_EXCEEDED | The requested amount exceeds the configured maximum single-transaction amount for this trade corridor or withdrawal currency |
| EXTERNAL_ACCOUNT_VERIFICATION_REQUIRED | The destination account''s ownership must be verified before this transfer can proceed |
| INSUFFICIENT_FUNDS | Insufficient funds for this operation |
| QUOTE_EXPIRED | The quote has expired; request a new quote |
| QUOTE_RATE_UNAVAILABLE | No exchange rate is available for this corridor right now |
| STABLECOIN_AMOUNT_NOT_REPRESENTABLE | The amount cannot be represented at the token''s precision |
| STABLECOIN_BURN_SOURCE_NOT_SUPPORTED | The burn source account cannot be used for this operation |
| STABLECOIN_EXTERNAL_ACCOUNT_LINK_FAILED | Linking the external account for stablecoin operations failed |
| STABLECOIN_EXTERNAL_ACCOUNT_LINK_METHOD_REQUIRED | The external account needs a link method before it can be used |
| STABLECOIN_EXTERNAL_ACCOUNT_NOT_LINKED | The external account is not linked for stablecoin operations |
| STABLECOIN_EXTERNAL_ACCOUNT_NOT_SUPPORTED | This external account type is not supported for stablecoin operations |
| STABLECOIN_EXTERNAL_ACCOUNT_PROVIDER_LINK_FAILED | The provider could not link the external account |
| STABLECOIN_EXTERNAL_ACCOUNT_PROVIDER_LINK_REQUIRED | The external account must be linked with the provider first |
| STABLECOIN_GRID_OPERATIONS_NOT_ENABLED | The stablecoin is not enabled for Grid operations |
| STABLECOIN_NOT_PROVISIONED | The stablecoin is not provisioned for issuer operations |
| STABLECOIN_OPERATION_NOT_SUPPORTED | The stablecoin does not support this operation |
| STABLECOIN_PROVIDER_ERROR | The stablecoin provider rejected the operation |
| STABLECOIN_PROVIDER_SOURCE_NOT_LINKED | The provider source account is not linked |
| STABLECOIN_VERIFICATION_FAILED | The stablecoin could not be verified with the provider |
| DOCUMENTS_REQUIRED | The destination requires supporting documents for the quote''s `purposeOfPayment` that the request did not supply. `details.missingRequirements` lists the requirement ID of each one |
'
enum:
- INVALID_INPUT
- END_USER_TERMS_VERSION_NOT_FOUND
- MISSING_MANDATORY_USER_INFO
- INVITATION_ALREADY_CLAIMED
- INVITATIONS_NOT_CONFIGURED
- INVALID_UMA_ADDRESS
- INVITATION_CANCELLED
- INVALID_RECEIVER
- PARSE_PAYREQ_RESPONSE_ERROR
- CERT_CHAIN_INVALID
- CERT_CHAIN_EXPIRED
- INVALID_PUBKEY_FORMAT
- MISSING_REQUIRED_UMA_PARAMETERS
- SENDER_NOT_ACCEPTED
- AMOUNT_OUT_OF_RANGE
- INVALID_CURRENCY
- INVALID_TIMESTAMP
- INVALID_NONCE
- INVALID_REQUEST_FORMAT
- INVALID_BANK_ACCOUNT
- SELF_PAYMENT
- PARSE_LNURLP_RESPONSE_ERROR
- INVALID_AMOUNT
- WEBHOOK_ENDPOINT_NOT_SET
- WEBHOOK_DELIVERY_ERROR
- LOW_QUALITY
- DATA_MISMATCH
- EXPIRED
- SUSPECTED_FRAUD
- UNSUITABLE_DOCUMENT
- INCOMPLETE
- EMAIL_OTP_CREDENTIAL_ALREADY_EXISTS
- SMS_OTP_CREDENTIAL_ALREADY_EXISTS
- PASSKEY_CREDENTIAL_ALREADY_EXISTS
- AUTH_CREDENTIAL_VERIFICATION_REQUIRED
- AUTH_CREDENTIAL_VERIFICATION_EXPIRED
- STABLECOIN_PROVIDER_ACCOUNT_INVALID
- STABLECOIN_PROVIDER_ACCOUNT_REVOKED
- STABLECOIN_PROVIDER_ACCOUNT_SELECTION_REQUIRED
- CARDHOLDER_KYC_NOT_APPROVED
- ACCOUNTHOLDER_AGREEMENT_NOT_ACCEPTED
- TRANSACTION_SIZE_LIMIT_EXCEEDED
- EXTERNAL_ACCOUNT_VERIFICATION_REQUIRED
- INSUFFICIENT_FUNDS
- QUOTE_EXPIRED
- QUOTE_RATE_UNAVAILABLE
- STABLECOIN_AMOUNT_NOT_REPRESENTABLE
- STABLECOIN_BURN_SOURCE_NOT_SUPPORTED
- STABLECOIN_EXTERNAL_ACCOUNT_LINK_FAILED
- STABLECOIN_EXTERNAL_ACCOUNT_LINK_METHOD_REQUIRED
- STABLECOIN_EXTERNAL_ACCOUNT_NOT_LINKED
- STABLECOIN_EXTERNAL_ACCOUNT_NOT_SUPPORTED
- STABLECOIN_EXTERNAL_ACCOUNT_PROVIDER_LINK_FAILED
- STABLECOIN_EXTERNAL_ACCOUNT_PROVIDER_LINK_REQUIRED
- STABLECOIN_GRID_OPERATIONS_NOT_ENABLED
- STABLECOIN_NOT_PROVISIONED
- STABLECOIN_OPERATION_NOT_SUPPORTED
- STABLECOIN_PROVIDER_ERROR
- STABLECOIN_PROVIDER_SOURCE_NOT_LINKED
- STABLECOIN_VERIFICATION_FAILED
- DOCUMENTS_REQUIRED
reason:
type: string
description: Error message
details:
type: object
description: Additional error details. Shape varies by `code`. For field-validation errors on submit endpoints (e.g. `POST /customers`, `PATCH /customers/{id}`), `details.errors[]` enumerates every invalid field so platforms can render form-field-level UX for the entire request in a single round-trip.
properties:
errors:
type: array
description: One entry per invalid field. Present on field-validation errors from submit endpoints.
items:
$ref: '#/components/schemas/FieldError'
missingRequirements:
type: array
description: The requirement ID of each required document that the quote request did not supply. Present on `DOCUMENTS_REQUIRED`.
items:
$ref: '#/components/schemas/PaymentDocumentRequirementId'
additionalProperties: true
Error401:
type: object
required:
- reason
- code
properties:
code:
type: string
description: '| Error Code | Description |
|------------|-------------|
| UNAUTHORIZED | Issue with API credentials |
| INVALID_SIGNATURE | Signature header is invalid |
| WALLET_SIGNATURE_MISSING | The `Grid-Wallet-Signature` header is required for this Embedded Wallet action but was not supplied |
| WALLET_SIGNATURE_MALFORMED | The `Grid-Wallet-Signature` header could not be parsed (bad encoding, structure, or fields) |
| WALLET_SIGNATURE_BODY_MISMATCH | The `Grid-Wallet-Signature` was computed over a different request body than the one received |
| WALLET_SIGNATURE_INVALID | The `Grid-Wallet-Signature` failed cryptographic verification against the registered credential |
| REQUEST_ID_MISSING | The `Request-Id` header is required on the signed retry but was not supplied (paired with `Grid-Wallet-Signature`) |
'
enum:
- UNAUTHORIZED
- INVALID_SIGNATURE
- WALLET_SIGNATURE_MISSING
- WALLET_SIGNATURE_MALFORMED
- WALLET_SIGNATURE_BODY_MISMATCH
- WALLET_SIGNATURE_INVALID
- REQUEST_ID_MISSING
reason:
type: string
description: Error message
details:
type: object
description: Additional error details
additionalProperties: true
DiscoveryListResponse:
type: object
properties:
data:
type: array
description: List of payment rails matching the filter criteria
items:
type: object
required:
- bankName
- displayName
- country
- currency
properties:
bankName:
type: string
description: 'Canonical name for this payment rail. Pass this value as `bankName` when creating an external account.
'
displayName:
type: string
description: Human-friendly display name for this payment rail.
country:
type: string
description: ISO 3166-1 alpha-2 country code.
currency:
type: string
description: ISO 4217 currency code.
FieldConstraint:
type: object
description: Machine-readable validator hint accompanying a 400 `INVALID_INPUT` error. Consumers use it to drive form UI (input types, dropdowns, masking, length limits) and to pre-validate the field client-side before re-submitting. Fields are additive.
properties:
format:
type: string
description: Named format the value must satisfy — HTML5 input type names (`email`, `tel`, `url`, `date`, ...) or semantic slugs (`iso3166-1-alpha-2`, `bcp47-language-tag`, `us-ssn`, `e.164`).
example: email
pattern:
type: string
description: Regular expression the value must match (JavaScript-flavor).
example: ^\d{5}(-\d{4})?$
enum:
type: array
items:
type: string
description: Allowed values when the field is drawn from a fixed set.
example:
- SSN
- ITIN
- NON_US_TAX_ID
minLength:
type: integer
description: Minimum length in characters.
example: 1
maxLength:
type: integer
description: Maximum length in characters.
example: 500
securitySchemes:
BasicAuth:
type: http
scheme: basic
description: API token authentication using format `<api token id>:<api client secret>`
AgentAuth:
type: http
scheme: bearer
description: 'Bearer token authentication for agent-scoped endpoints. The token is the `accessToken` returned when redeeming a device code via `POST /agents/device-codes/redeem`. Agent credentials are user-scoped: all requests are automatically bound to the agent''s associated customer and subject to the agent''s policy.'
WebhookSignature:
type: apiKey
in: header
name: X-Grid-Signature
description: 'Secp256r1 (P-256) asymmetric signature of the webhook payload, which can be used to verify that the webhook was sent by Grid.
To verify the signature:
1. Get the Grid public key provided to you during integration
2. Decode the base64 signature from the header
3. Create a SHA-256 hash of the request body
4. Verify the signature using the public key and the hash
If the signature verification succeeds, the webhook is authentic. If not, it should be rejected.
'
x-provenance:
method: harvested
publisher: Lightspark
source: https://docs.lightspark.com/openapi.yaml
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)