# Halifax

**Canonical:** https://apis.io/providers/halifax/  
**Website:** https://www.halifax.co.uk/  
**APIs profiled:** 9

Halifax is a major British high-street banking brand serving personal and business customers with current accounts, savings, mortgages, credit cards, loans, and insurance. It operates as a trading division of Bank of Scotland plc, a wholly owned subsidiary of Lloyds Banking Group, and is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the PRA. As one of the UK Open Banking CMA9 mandated ASPSPs, Halifax publishes the full Open Banking Implementation Entity (OBIE) API surface: a set of PUBLIC, unauthenticated Open Data APIs (ATM and branch locators plus personal current account, business current account, unsecured SME loan, and commercial credit card product reference data) served live at api.halifax.co.uk, and the FAPI-secured OBIE Read/Write APIs for Account and Transaction Information (AIS), Payment Initiation (PIS), and Confirmation of Funds (CBPII). Read/Write access is delivered through the shared Lloyds Banking Group Developer Portal that also covers the Lloyds Bank and Bank of Scotland brands, secured with OAuth2/OIDC, PSD2 strong customer authentication, mutual-TLS, and OBIE/eIDAS certificates.

## Kin Score — 42.7 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 42.7).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 37.1 |
| Governance | 30.3 |
| Contract Governance | 30.3 |
| Operational Transparency | 5.3 |
| Developer Ergonomics | 56.5 |
| Commercial Clarity | 21.4 |
| Access Clarity | 21.4 |

Regulatory layer — **Banking & Open Finance**: 67.1 (matched via tags).

## Agent readiness — 33.9 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | na |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | na |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | na |

## APIs (9)

- **Halifax Open Data ATM Locator API** — Public, unauthenticated OBIE Open Data API returning the location and details of every Halifax cashpoint (ATM) in the UK. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Open Data Branch Locator API** — Public, unauthenticated OBIE Open Data API returning a directory of all Halifax branches in the UK. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Open Data Personal Current Accounts API** — Public, unauthenticated OBIE Open Data API publishing personal current account product reference data. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Open Data Business Current Accounts API** — Public, unauthenticated OBIE Open Data API publishing business current account product reference data. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Open Data Unsecured SME Loans API** — Public, unauthenticated OBIE Open Data API publishing unsecured SME loan product reference data. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Open Data Commercial Credit Cards API** — Public, unauthenticated OBIE Open Data API publishing commercial credit card product reference data. Confirmed live (HTTP 200, JSON) at the v2.2 base.
- **Halifax Account and Transaction Information API (AIS)** — OBIE Read/Write Account and Transaction Information (AIS) API for authorised AISPs. FAPI-secured (OAuth2/OIDC, PSD2 SCA, mTLS, OBIE/eIDAS certificates); onboarded via the Lloyds...
- **Halifax Payment Initiation API (PIS)** — OBIE Read/Write Payment Initiation (PIS) API for authorised PISPs. FAPI-secured (OAuth2/OIDC, PSD2 SCA, mTLS, OBIE/eIDAS certificates); onboarded via the Lloyds Banking Group De...
- **Halifax Confirmation of Funds API (CBPII)** — OBIE Read/Write Confirmation of Funds (CBPII) API for authorised CBPIIs. FAPI-secured (OAuth2/OIDC, PSD2 SCA, mTLS, OBIE/eIDAS certificates); onboarded via the Lloyds Banking Gr...

## MCP servers (1)

- **Halifax MCP Server**

## Security (2)

- **Halifax Authentication** — none/oauth2/mutualTLS · 4 schemes
- **Halifax Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Tags

Financial-Services, Banking, Open Banking, PSD2, OBIE, CMA9, United Kingdom, Payments, Account Information, Open Data

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/halifax/). Scores are computed from the provider's own public artifacts under a published rubric.