Allica Bank · OAuth Scopes

Allica Bank OAuth Scopes

OAuth 2.0 searched

Allica Bank publishes 17 OAuth 2.0 scopes via the clientCredentials and authorizationCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Allica Bank API on a user’s behalf.

Tokens are issued from https://as1.api.ob.allica.bank/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Financial ServicesBankingOpen BankingPSD2OBIEFAPIUnited KingdomPaymentsAccount InformationSMEBusiness BankingFintech
Scopes: 17 Flows: clientCredentials, authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://secure.allica.bank/open-banking
Token URL
https://as1.api.ob.allica.bank/token
Flows
clientCredentialsauthorizationCode

Scopes (17)

ScopeDescriptionFlows
openid OpenID Connect authentication; returns an id_token identifying the authenticated PSU consent. authorizationCode
accounts Read access to Account and Transaction Information (AIS) resources for Allica Business Rewards accounts. authorizationCode, clientCredentials
payments Initiate and read domestic payments, scheduled payments, and standing orders (PIS). authorizationCode, clientCredentials
fundsconfirmations Confirm availability of funds on an account (Confirmation of Funds / CBPII). authorizationCode, clientCredentials
consents Manage the consent lifecycle (account-access, payment, and funds-confirmation consents). clientCredentials
resources General OBIE resource-access scope covering account resource discovery. clientCredentials
credit-cards-accounts Access to credit-card account information resources (OBIE / Open Finance scope). authorizationCode
customers Access to customer/party identity resources. authorizationCode
loans Access to loan account resources (Open Finance scope). authorizationCode
financings Access to financing product resources (asset/commercial finance). authorizationCode
invoice-financings Access to invoice-financing product resources. authorizationCode
unarranged-accounts-overdraft Access to unarranged overdraft resources on accounts (Open Finance scope). authorizationCode
consumption Access to consumption/usage resources (Open Finance scope). authorizationCode
lg Bank guarantees (letters of guarantee) resource scope (Open Finance). authorizationCode
recurring-payments Recurring-payments resource scope. authorizationCode, clientCredentials
bank-fixed-incomes Access to fixed-income investment product resources (Open Finance scope). authorizationCode
recurring-consent Manage recurring/long-lived consent resources. clientCredentials

Source

OAuth Scopes

Raw ↑
generated: '2026-07-23'
method: searched
source: openapi/allica-bank-account-information-openapi.yaml, openapi/allica-bank-payment-initiation-openapi.yaml
docs: https://auth1.api.ob.allica.bank/.well-known/openid-configuration
note: |
  The OpenAPI specs declare OBIE oauth2 security schemes (TPP client-credentials +
  PSU authorization-code) with placeholder authserver.example URLs. Real flow
  endpoints and the full scope set were confirmed live from Allica's production
  FAPI OIDC discovery document (scopes_supported), captured verbatim in
  well-known/allica-bank-openid-configuration.json. These are OBIE Read/Write
  Open Banking scopes; access is FAPI/mTLS-gated and requires OBIE Directory
  onboarding.
schemes:
- name: TPPOAuth2Security
  type: oauth2
  source: openapi + OIDC discovery
  flows:
  - flow: clientCredentials
    tokenUrl: https://as1.api.ob.allica.bank/token
  description: TPP client-credentials authorisation flow with the ASPSP (grant for consent creation / non-PSU resources).
- name: PSUOAuth2Security
  type: oauth2
  source: openapi + OIDC discovery
  flows:
  - flow: authorizationCode
    authorizationUrl: https://secure.allica.bank/open-banking
    tokenUrl: https://as1.api.ob.allica.bank/token
  description: OAuth authorization-code flow requiring PSU strong customer authentication (SCA) to access PSU-owned ASPSP resources.
scopes:
- scope: openid
  description: OpenID Connect authentication; returns an id_token identifying the authenticated PSU consent.
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: accounts
  description: Read access to Account and Transaction Information (AIS) resources for Allica Business Rewards accounts.
  flows: [authorizationCode, clientCredentials]
  sources: [openapi/allica-bank-account-information-openapi.yaml, OIDC discovery]
- scope: payments
  description: Initiate and read domestic payments, scheduled payments, and standing orders (PIS).
  flows: [authorizationCode, clientCredentials]
  sources: [openapi/allica-bank-payment-initiation-openapi.yaml, OIDC discovery]
- scope: fundsconfirmations
  description: Confirm availability of funds on an account (Confirmation of Funds / CBPII).
  flows: [authorizationCode, clientCredentials]
  sources: [OIDC discovery]
- scope: consents
  description: Manage the consent lifecycle (account-access, payment, and funds-confirmation consents).
  flows: [clientCredentials]
  sources: [OIDC discovery]
- scope: resources
  description: General OBIE resource-access scope covering account resource discovery.
  flows: [clientCredentials]
  sources: [OIDC discovery]
- scope: credit-cards-accounts
  description: Access to credit-card account information resources (OBIE / Open Finance scope).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: customers
  description: Access to customer/party identity resources.
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: loans
  description: Access to loan account resources (Open Finance scope).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: financings
  description: Access to financing product resources (asset/commercial finance).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: invoice-financings
  description: Access to invoice-financing product resources.
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: unarranged-accounts-overdraft
  description: Access to unarranged overdraft resources on accounts (Open Finance scope).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: consumption
  description: Access to consumption/usage resources (Open Finance scope).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: lg
  description: Bank guarantees (letters of guarantee) resource scope (Open Finance).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: recurring-payments
  description: Recurring-payments resource scope.
  flows: [authorizationCode, clientCredentials]
  sources: [OIDC discovery]
- scope: bank-fixed-incomes
  description: Access to fixed-income investment product resources (Open Finance scope).
  flows: [authorizationCode]
  sources: [OIDC discovery]
- scope: recurring-consent
  description: Manage recurring/long-lived consent resources.
  flows: [clientCredentials]
  sources: [OIDC discovery]