NatWest Group · OAuth Scopes

NatWest Group OAuth Scopes

OAuth 2.0 searched

NatWest Group publishes 5 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the NatWest Group API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

BankingOpen BankingFinancial ServicesPaymentsPSD2FAPIFintechAccount Information

Scopes: 5 Flows: Method: searched

Scopes (5)

Scope	Description	Flows
openid	OpenID Connect authentication (required for the PSU authorization_code flow).	authorizationCode
accounts	Read account and transaction information (AISP).	authorizationCode, clientCredentials
payments	Initiate payments (PISP).	authorizationCode, clientCredentials
fundsconfirmations	Confirmation of funds entitlement (CBPII).	authorizationCode, clientCredentials
profile	PSU profile claims exposed via OIDC.	authorizationCode

📄 Provider scope reference: https://www.bankofapis.com/documentation/security

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: openapi/*; https://api.sandbox.natwest.com/.well-known/openid-configuration
docs: https://www.bankofapis.com/documentation/security
schemes:
- name: TPPOAuth2Security
  flow: clientCredentials
  tokenUrl: https://ob.sandbox.natwest.com/token
  description: TPP client-credentials flow with the ASPSP.
- name: PSUOAuth2Security
  flow: authorizationCode
  authorizationUrl: https://api.sandbox.natwest.com/authorize
  tokenUrl: https://ob.sandbox.natwest.com/token
  description: PSU authorisation-code flow with PSD2 SCA.
scopes:
- scope: openid
  description: OpenID Connect authentication (required for the PSU authorization_code flow).
  flows: [authorizationCode]
- scope: accounts
  description: Read account and transaction information (AISP).
  flows: [authorizationCode, clientCredentials]
  sources: [openapi/natwest-account-transaction-openapi.yml]
- scope: payments
  description: Initiate payments (PISP).
  flows: [authorizationCode, clientCredentials]
  sources: [openapi/natwest-payment-initiation-openapi.yml]
- scope: fundsconfirmations
  description: Confirmation of funds entitlement (CBPII).
  flows: [authorizationCode, clientCredentials]
  sources: [openapi/natwest-confirmation-of-funds-openapi.yml]
- scope: profile
  description: PSU profile claims exposed via OIDC.
  flows: [authorizationCode]
notes: >-
  Scope list confirmed against the live sandbox OIDC discovery document
  (scopes_supported: openid, payments, accounts, fundsconfirmations, profile). The
  spec token/authorization URLs are OBIE placeholders (authserver.example); the real
  sandbox endpoints are shown above.