Bank of Sydney · OAuth Scopes

Bank of Sydney OAuth Scopes

OAuth 2.0 derived

Bank of Sydney publishes 5 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Bank of Sydney API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingAustraliaProduct Reference DataADI

Scopes: 5 Flows: Method: derived

Scopes (5)

Scope	Description	Flows
bank:accounts.basic:read	Read basic account data - the list of accounts and their balances.	authorizationCode
bank:accounts.detail:read	Read detailed account data, including account numbers and product details for a specific account.	authorizationCode
bank:transactions:read	Read transaction data for authorised accounts.	authorizationCode
bank:payees:read	Read the consumer's saved payees.	authorizationCode
bank:regular_payments:read	Read regular payments - direct debits and scheduled payments.	authorizationCode

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#security-profile

Source

OAuth Scopes

generated: '2026-07-20'
method: derived
source: openapi/bank-of-sydney-cds-banking-products-openapi.yml (x-scopes extension per operation)
docs: https://consumerdatastandardsaustralia.github.io/standards/#security-profile
note: >-
  The harvested CDS banking spec declares scopes on each operation via the x-scopes
  extension (not an OpenAPI oauth2 securityScheme), so the standard derive-oauth-scopes
  pass yields nothing; these five CDR banking scopes are extracted from those x-scopes
  values. Product Reference Data operations are public and require no scope. Scopes are
  granted through the CDR authorisation server to Accredited Data Recipients under
  consumer consent.
schemes:
  - name: cdrOAuth2
    type: oauth2
    flow: authorizationCode
    source: openapi/bank-of-sydney-cds-banking-products-openapi.yml
scopes:
  - scope: bank:accounts.basic:read
    description: Read basic account data - the list of accounts and their balances.
    flows: [authorizationCode]
    sources: [openapi/bank-of-sydney-cds-banking-products-openapi.yml]
  - scope: bank:accounts.detail:read
    description: Read detailed account data, including account numbers and product details for a specific account.
    flows: [authorizationCode]
    sources: [openapi/bank-of-sydney-cds-banking-products-openapi.yml]
  - scope: bank:transactions:read
    description: Read transaction data for authorised accounts.
    flows: [authorizationCode]
    sources: [openapi/bank-of-sydney-cds-banking-products-openapi.yml]
  - scope: bank:payees:read
    description: Read the consumer's saved payees.
    flows: [authorizationCode]
    sources: [openapi/bank-of-sydney-cds-banking-products-openapi.yml]
  - scope: bank:regular_payments:read
    description: Read regular payments - direct debits and scheduled payments.
    flows: [authorizationCode]
    sources: [openapi/bank-of-sydney-cds-banking-products-openapi.yml]