# Northmill **Canonical:** https://apis.io/providers/northmill/ **Website:** https://www.northmill.com/ **APIs profiled:** 1 Northmill Bank AB is a Swedish technology-driven bank, founded in Stockholm in 2006 and licensed by Finansinspektionen in 2019, that serves roughly 600,000 private customers and 2,500 businesses across Sweden, Norway and Finland with savings accounts, cards, personal and business lending, business accounts, Swish and card acquiring. Through its Northmill Flo business unit (formerly MoreFlo, acquired and rebranded) it also ships point-of-sale, booking, checkout and e-commerce products for retail and hospitality merchants. Its public developer surface is the Flo API - a Swagger 2.0 REST contract published at api.moreflo.com with 199 operations over articles, stock, orders, receipts, customers, bookings, campaigns, vouchers, SMS and webhooks - alongside a PSD2 open-banking interface for third-party providers documented under the Northmill Bank brand and delivered on Token.io infrastructure. ## Kin Score — 55.9 / 100 (strong) Scored 2026-09-01 under rubric 0.17.2. Trend: flat (+0.0 from 55.9). | Facet | Score | |---|---| | Discoverability | 68.5 | | Contract Quality | 48.5 | | Governance | 4.5 | | Contract Governance | 4.5 | | Operational Transparency | 50.0 | | Developer Ergonomics | 54.2 | | Commercial Clarity | 84.2 | | Access Clarity | 84.2 | Regulatory layer — **Banking & Open Finance**: 45.6 (matched via tags). ## Agent readiness — 26.9 (agent-aware) | Dimension | Value | |---|---| | Spec Presence | yes | | Agentic Access | no | | Reversibility Documented | no | | MCP Server | documented | | Auth Clarity | bearer | | Idempotency | documented | | Error Semantics | documented | | OpenAPI Examples | no | | Rate Limit Signal | documented | | Event Surface Described | derived | | Agent Skills | derived | | Well Known Catalog | no | | Consent Identity | no | | Agent Card | no | | Dry Run Mode | no | | Delegated Identity | no | | Protected Resource Metadata | no | | Dynamic Client Registration | no | | Agentic Commerce | no | ## APIs (31) - **Northmill Bank Open Banking API for TPPs** — Northmill Bank's PSD2 third-party-provider interface, covering Account Information Services (AIS) and Confirmation of Available Funds (CBPII/CAF), with request signing via ES256... - **Northmill Account Codes API** — The AccountCodes API from Northmill — 4 operation(s) for accountcodes. - **Northmill Accounting Settings API** — The AccountingSettings API from Northmill — 6 operation(s) for accountingsettings. - **Northmill Articles API** — The Articles API from Northmill — 10 operation(s) for articles. - **Northmill Articles Availability API** — The ArticlesAvailability API from Northmill — 2 operation(s) for articlesavailability. - **Northmill Article Sets API** — The ArticleSets API from Northmill — 4 operation(s) for articlesets. - **Northmill Bookable Resource Event Instances API** — The BookableResourceEventInstances API from Northmill — 2 operation(s) for bookableresourceeventinstances. - **Northmill Bookable Resources API** — The BookableResources API from Northmill — 2 operation(s) for bookableresources. - **Northmill Booking Orders API** — The BookingOrders API from Northmill — 6 operation(s) for bookingorders. - **Northmill Brands API** — The Brands API from Northmill — 4 operation(s) for brands. - **Northmill Campaigns API** — The Campaigns API from Northmill — 4 operation(s) for campaigns. - **Northmill Cash Cards API** — The CashCards API from Northmill — 2 operation(s) for cashcards. - **Northmill Cashier Users API** — The CashierUsers API from Northmill — 2 operation(s) for cashierusers. - **Northmill Customers API** — The Customers API from Northmill — 8 operation(s) for customers. - **Northmill Groups API** — The Groups API from Northmill — 4 operation(s) for groups. - **Northmill Health API** — The Health API from Northmill — 1 operation(s) for health. - **Northmill Locations API** — The Locations API from Northmill — 4 operation(s) for locations. - **Northmill Online Solutions API** — The OnlineSolutions API from Northmill — 10 operation(s) for onlinesolutions. - **Northmill Orders API** — The Orders API from Northmill — 6 operation(s) for orders. - **Northmill Orders V3 API** — The OrdersV3 API from Northmill — 6 operation(s) for ordersv3. - **Northmill Receipts API** — The Receipts API from Northmill — 4 operation(s) for receipts. - **Northmill Sales API** — The Sales API from Northmill — 2 operation(s) for sales. - **Northmill Service Orders API** — The ServiceOrders API from Northmill — 4 operation(s) for serviceorders. - **Northmill Settings API** — The Settings API from Northmill — 4 operation(s) for settings. - **Northmill Sms API** — The Sms API from Northmill — 2 operation(s) for sms. - **Northmill Stores API** — The Stores API from Northmill — 2 operation(s) for stores. - **Northmill Suppliers API** — The Suppliers API from Northmill — 4 operation(s) for suppliers. - **Northmill Ticket Orders API** — The TicketOrders API from Northmill — 6 operation(s) for ticketorders. - **Northmill Vouchers API** — The Vouchers API from Northmill — 4 operation(s) for vouchers. - **Northmill Web Hook Categories API** — The WebHookCategories API from Northmill — 2 operation(s) for webhookcategories. - **Northmill Web Hooks API** — The WebHooks API from Northmill — 4 operation(s) for webhooks. ## MCP servers (1) - **Northmill MCP Server** — Northmill ships NO Model Context Protocol server, hosted or local. The tool list below is a CANDIDATE derived one-to-one from the merchant-wide operations of the Flo API Swagger... ## Security (3) - **Northmill Authentication** — http · 2 schemes - **Northmill Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC - **Northmill Vulnerability Disclosure** — security.txt · contact published ## Plans (1) - **Northmill Plans Pricing** ## Tags Banking, Payments, Point-of-Sale, Retail, Open Banking, Sweden, Fintech, Webhook, E-Commerce, Lending, Nordics --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/northmill/). Scores are computed from the provider's own public artifacts under a published rubric.