Bank of Scotland website screenshot

Bank of Scotland

Bank of Scotland is a UK high-street retail and commercial bank, founded in 1695 and headquartered in Edinburgh, and is one of the oldest banks in the United Kingdom. It is a wholly owned subsidiary brand of Lloyds Banking Group (alongside Lloyds Bank and Halifax), authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the PRA. As one of the nine mandated CMA9 account-providers, Bank of Scotland participates in the UK Open Banking regime under PSD2, publishing PUBLIC, unauthenticated Open Data reference APIs (ATMs, branches, personal and business current accounts, unsecured SME loans, and commercial credit cards) conformant to the Open Banking Implementation Entity (OBIE) Open Data Standard, plus the OBIE Read/Write API family - Account and Transaction Information (AIS), Payment Initiation (PIS), and Confirmation of Funds (CBPII) - secured with FAPI-grade OAuth2/OIDC, mutual-TLS client authentication, and PSD2 strong customer authentication, accessed through the Lloyds Banking Group developer platform after eIDAS/OBIE certificate onboarding.

Bank of Scotland publishes 4 APIs on the APIs.io network, including Open Data API, Account and Transaction Information API (AIS), Payment Initiation API (PIS), and 1 more. Tagged areas include Financial Services, Banking, Open Banking, PSD2, and OBIE.

Bank of Scotland’s developer surface includes authentication, sandbox, documentation, and 15 more developer resources.

40.9/100 thin ▬ flat Agent 48/100 agent ready Full breakdown ↓
scored 2026-07-27 · rubric v0.5
4 APIs 1 MCP Servers
Financial ServicesBankingOpen BankingPSD2OBIECMA9United KingdomPaymentsAccount InformationOpen Data

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 40.9/100 · thin
Contract Quality 13.5 / 25
Developer Ergonomics 8.3 / 20
Commercial Clarity 4.2 / 20
Operational Transparency 0.0 / 13
Governance 0.0 / 12
Discoverability 8.8 / 10
Agent readiness — 48/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bank-of-scotland: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

Bank of Scotland Open Data API

PUBLIC, unauthenticated OBIE Open Data reference API for Bank of Scotland, exposing ATM locations, branch details, personal and business current account products, unsecured SME ...

Bank of Scotland Account and Transaction Information API (AIS)

OBIE Read/Write Account and Transaction Information (AIS) API - account details, balances, transactions, standing orders, direct debits, beneficiaries, statements, and products....

Bank of Scotland Payment Initiation API (PIS)

OBIE Read/Write Payment Initiation (PIS) API - domestic, scheduled, standing order, international, and file payment consents and orders. FAPI-secured (OAuth2/OIDC, mTLS, PSD2 SC...

Bank of Scotland Confirmation of Funds API (CBPII)

OBIE Read/Write Confirmation of Funds (CBPII) API - card-based payment instrument issuers confirm whether funds are available on an account. FAPI-secured (OAuth2/OIDC, mTLS, PSD...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bank Of Scotland Authentication

oauth2 · 2 schemes

SECURITY

Bank Of Scotland Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Bank Of Scotland Scopes

3 scopes · clientCredentials/authorizationCode

3 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Access & Security 3

Authentication, authorization, and security posture

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: bank-of-scotland
url: https://raw.githubusercontent.com/api-evangelist/bank-of-scotland/refs/heads/main/apis.yml
name: Bank of Scotland
kind: company
description: Bank of Scotland is a UK high-street retail and commercial bank, founded in 1695 and headquartered in Edinburgh,
  and is one of the oldest banks in the United Kingdom. It is a wholly owned subsidiary brand of Lloyds Banking Group (alongside
  Lloyds Bank and Halifax), authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority
  and the PRA. As one of the nine mandated CMA9 account-providers, Bank of Scotland participates in the UK Open Banking regime
  under PSD2, publishing PUBLIC, unauthenticated Open Data reference APIs (ATMs, branches, personal and business current accounts,
  unsecured SME loans, and commercial credit cards) conformant to the Open Banking Implementation Entity (OBIE) Open Data
  Standard, plus the OBIE Read/Write API family - Account and Transaction Information (AIS), Payment Initiation (PIS), and
  Confirmation of Funds (CBPII) - secured with FAPI-grade OAuth2/OIDC, mutual-TLS client authentication, and PSD2 strong customer
  authentication, accessed through the Lloyds Banking Group developer platform after eIDAS/OBIE certificate onboarding.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Financial Services
- Banking
- Open Banking
- PSD2
- OBIE
- CMA9
- United Kingdom
- Payments
- Account Information
- Open Data
created: '2026-07-23'
modified: '2026-07-23'
specificationVersion: '0.19'
apis:
- aid: bank-of-scotland:bank-of-scotland-open-data-api
  name: Bank of Scotland Open Data API
  description: PUBLIC, unauthenticated OBIE Open Data reference API for Bank of Scotland, exposing ATM locations, branch details,
    personal and business current account products, unsecured SME loans, and commercial credit card products. Confirmed live
    at https://api.bankofscotland.co.uk/open-banking/v2.2 (all six resource endpoints return HTTP 200 with Open-Licence JSON).
  humanURL: https://developer.lloydsbanking.com/open-data
  baseURL: https://api.bankofscotland.co.uk/open-banking/v2.2
  tags:
  - Open Data
  - ATMs
  - Branches
  - Products
  properties:
  - type: OpenAPI
    url: openapi/obie-opendata-swagger.json
  - type: Overlay
    url: overlays/bank-of-scotland-opendata-overlay.yaml
  - type: MCPServer
    url: mcp/bank-of-scotland-mcp.yml
  - type: AgentSkill
    name: Find Bank of Scotland branches and ATMs
    url: skills/bank-of-scotland-find-branches-atms.md
  - type: Documentation
    url: https://developer.lloydsbanking.com/open-data
  - type: APIReference
    url: https://github.com/OpenBankingUK/opendata-api-spec-compiled
- aid: bank-of-scotland:bank-of-scotland-account-information-api
  name: Bank of Scotland Account and Transaction Information API (AIS)
  description: OBIE Read/Write Account and Transaction Information (AIS) API - account details, balances, transactions, standing
    orders, direct debits, beneficiaries, statements, and products. FAPI-secured (OAuth2/OIDC, mTLS, PSD2 SCA); requires developer
    onboarding and eIDAS/OBIE certificates. Spec below is the shared OBIE Read/Write standard, not a bank-proprietary contract.
  humanURL: https://developer.lloydsbanking.com/
  tags:
  - Account Information
  - AIS
  - Read/Write
  properties:
  - type: OpenAPI
    url: openapi/obie-account-info-openapi.yaml
  - type: Overlay
    url: overlays/bank-of-scotland-account-info-overlay.yaml
  - type: AgentSkill
    name: Read Bank of Scotland account transactions (AIS)
    url: skills/bank-of-scotland-read-account-transactions.md
  - type: Documentation
    url: https://developer.lloydsbanking.com/
  - type: APIReference
    url: https://github.com/OpenBankingUK/read-write-api-specs
- aid: bank-of-scotland:bank-of-scotland-payment-initiation-api
  name: Bank of Scotland Payment Initiation API (PIS)
  description: OBIE Read/Write Payment Initiation (PIS) API - domestic, scheduled, standing order, international, and file
    payment consents and orders. FAPI-secured (OAuth2/OIDC, mTLS, PSD2 SCA); requires developer onboarding and eIDAS/OBIE
    certificates. Spec below is the shared OBIE Read/Write standard, not a bank-proprietary contract.
  humanURL: https://developer.lloydsbanking.com/
  tags:
  - Payment Initiation
  - PIS
  - Read/Write
  properties:
  - type: OpenAPI
    url: openapi/obie-payment-initiation-openapi.yaml
  - type: Overlay
    url: overlays/bank-of-scotland-payment-initiation-overlay.yaml
  - type: AgentSkill
    name: Initiate a Bank of Scotland domestic payment (PIS)
    url: skills/bank-of-scotland-initiate-domestic-payment.md
  - type: Documentation
    url: https://developer.lloydsbanking.com/
  - type: APIReference
    url: https://github.com/OpenBankingUK/read-write-api-specs
- aid: bank-of-scotland:bank-of-scotland-confirmation-of-funds-api
  name: Bank of Scotland Confirmation of Funds API (CBPII)
  description: OBIE Read/Write Confirmation of Funds (CBPII) API - card-based payment instrument issuers confirm whether funds
    are available on an account. FAPI-secured (OAuth2/OIDC, mTLS, PSD2 SCA); requires developer onboarding and eIDAS/OBIE
    certificates. Spec below is the shared OBIE Read/Write standard, not a bank-proprietary contract.
  humanURL: https://developer.lloydsbanking.com/
  tags:
  - Confirmation of Funds
  - CBPII
  - Read/Write
  properties:
  - type: OpenAPI
    url: openapi/obie-confirmation-funds-openapi.yaml
  - type: Overlay
    url: overlays/bank-of-scotland-confirmation-funds-overlay.yaml
  - type: Documentation
    url: https://developer.lloydsbanking.com/
  - type: APIReference
    url: https://github.com/OpenBankingUK/read-write-api-specs
common:
- type: DomainSecurity
  url: security/bank-of-scotland-domain-security.yml
- type: Authentication
  url: authentication/bank-of-scotland-authentication.yml
- type: OAuthScopes
  url: scopes/bank-of-scotland-scopes.yml
- type: Conventions
  url: conventions/bank-of-scotland-conventions.yml
- type: Idempotency
  url: conventions/bank-of-scotland-conventions.yml
- type: ErrorCatalog
  url: errors/bank-of-scotland-problem-types.yml
- type: Conformance
  url: conformance/bank-of-scotland-conformance.yml
- type: Lifecycle
  url: lifecycle/bank-of-scotland-lifecycle.yml
- type: DataModel
  url: data-model/bank-of-scotland-data-model.yml
- type: Sandbox
  url: sandbox/bank-of-scotland-sandbox.yml
- type: LLMsTxt
  url: llms/bank-of-scotland-llms.txt
- type: AgentSkill
  url: skills/_index.yml
- type: Website
  url: https://www.bankofscotland.co.uk/
- type: DeveloperPortal
  url: https://developer.lloydsbanking.com/
- type: Documentation
  url: https://www.bankofscotland.co.uk/aboutonline/security-and-privacy/open-banking-apis.html
- type: LinkedIn
  url: https://www.linkedin.com/company/bank-of-scotland
- type: TermsOfService
  url: https://www.bankofscotland.co.uk/legal.html
- type: PrivacyPolicy
  url: https://www.bankofscotland.co.uk/legal/privacy.html
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com