# Klarna Kosma

**Canonical:** https://apis.io/providers/klarna-kosma/  
**Website:** https://www.klarna.com/kosma/  
**APIs profiled:** 6

Klarna Kosma is the Open Banking platform spun out of Klarna in March 2022 as a dedicated sub-brand and business unit. Built on the connectivity infrastructure Klarna originally created for SOFORT, Kosma offers a single PSD2 XS2A API that aggregates more than 15,000 banks across 27 European and UK markets with >95% per-market coverage. The platform exposes Account Information Services (AIS) and Payment Initiation Services (PIS) plus higher-level products — Kosma Insights (categorised transaction, income, and affordability data across 200+ categories), Kosma KYC (account ownership and identity verification), and Kosma Payments (white-labeled account-to-account bank transfers). Kosma serves banks, lenders, fintechs, merchants, SMEs, and freelancers, and also powers Klarna's own BNPL underwriting and SOFORT bank-transfer rails. The XS2A API is paired with an embeddable XS2A App / JS widget that handles consumer bank selection and Strong Customer Authentication (SCA), and a Consent API that exposes the full PSD2 consent lifecycle.

## Kin Score — 23.9 / 100 (emerging)

Scored 2026-08-24 under rubric 0.12.1. Trend: flat (+0.0 from 23.9).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 1.4 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 5.3 |
| Developer Ergonomics | 54.8 |
| Commercial Clarity | 21.1 |
| Access Clarity | 21.1 |

Regulatory layer — **Banking & Open Finance**: 32.9 (matched via tags).

## Agent readiness — 10.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | documented |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (6)

- **Klarna Kosma XS2A API** — The XS2A API is the server-side endpoint set used by TPPs and merchants to create and control Open Banking sessions and flows under PSD2. The XS2A API drives Account Information...
- **Klarna Kosma Auth API** — The Auth API is the client-session companion to the XS2A API. Whenever the Open Banking flow requires consumer interaction (bank selection, strong customer authentication, multi...
- **Klarna Kosma Consent API** — The Consent API exposes the PSD2 consent lifecycle so TPPs can list, inspect, refresh, and revoke the consents granted by Payment Service Users (PSU). PSD2 obliges Klarna Kosma ...
- **Klarna Kosma Insights API** — Kosma Insights turns raw Open Banking transaction data into categorised spend, income, and affordability signals. Insights covers 200+ spend categories and surfaces income strea...
- **Klarna Kosma KYC API** — Kosma KYC layers account ownership and identity verification on top of the Kosma AIS connectivity. It confirms that the consumer authenticating against their bank is the legitim...
- **Klarna Kosma Payments API** — Kosma Payments is the white-labeled PSD2 Payment Initiation Service (PIS) product. It lets merchants and platforms trigger account-to-account bank transfers directly from a cons...

## Security (2)

- **Klarna Kosma Domain Security** — TLSv1.3 · HSTS · DMARC
- **Klarna Kosma Vulnerability Disclosure** — Hackerone

## Tags

Open Banking, PSD2, AIS, PIS, Account Information, Payment Initiation, KYC, Identity Verification, Categorization, Insights, Embedded Finance, BNPL, Lending, Fintech, Banking

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/klarna-kosma/). Scores are computed from the provider's own public artifacts under a published rubric.