Police Bank · OAuth Scopes

Police Bank OAuth Scopes

OAuth 2.0 derived

Police Bank publishes 5 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Police Bank API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingAustraliaMutual BankProduct Reference Data

Scopes: 5 Flows: authorizationCode Method: derived

Scopes (5)

Scope	Description	Flows
bank:accounts.basic:read	Basic account information - the list of a member's accounts plus balances.	authorizationCode
bank:accounts.detail:read	Detailed account information - account numbers, features, fees, rates and other account detail beyond the basic list.	authorizationCode
bank:transactions:read	Transactions - the ability to read a member's transactions for authorised accounts, including transaction detail.	authorizationCode
bank:regular_payments:read	Regular payments - direct debits, scheduled payments and instalment plans configured on a member's accounts.	authorizationCode
bank:payees:read	Saved payees - the member's stored domestic, international and BPAY payees.	authorizationCode

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes

Source

OAuth Scopes

generated: '2026-07-21'
method: derived
source: openapi/police-bank-cds-banking-products-openapi.yml
docs: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes
# CDR (Consumer Data Right) banking authorisation scopes required by Police Bank's
# authenticated CDR Banking operations. Derived from the x-scopes extension attached
# to each authenticated operation in the OpenAPI (the spec declares no formal
# securitySchemes block; scopes are carried as x-scopes). These are the standard
# Consumer Data Standards banking scopes - not Police Bank-proprietary. The public
# Product Reference Data operations (listBankingProducts / getBankingProductDetail)
# require NO scope and are unauthenticated.
schemes:
- name: CDR-OAuth2
  type: oauth2
  source: openapi/police-bank-cds-banking-products-openapi.yml
  note: >-
    Consumer Data Right authorisation follows the CDS security profile (FAPI 1.0
    Advanced): OpenID Connect authorization-code flow with PKCE, PAR, and
    MTLS-bound tokens. Authorization/token endpoints are per-data-holder and
    resolved from Police Bank's OIDC discovery document at authorisation time;
    they are not published on the public PRD surface.
  flows:
  - flow: authorizationCode
    authorizationUrl: null
    tokenUrl: null
scopes:
- scope: bank:accounts.basic:read
  description: >-
    Basic account information - the list of a member's accounts plus balances.
  flows: [authorizationCode]
  operations: [listBankingAccounts, getBankingBalance, listBankingBalancesBulk, listBankingBalancesSpecificAccounts]
  sources: [openapi/police-bank-cds-banking-products-openapi.yml]
- scope: bank:accounts.detail:read
  description: >-
    Detailed account information - account numbers, features, fees, rates and
    other account detail beyond the basic list.
  flows: [authorizationCode]
  operations: [getBankingAccountDetail]
  sources: [openapi/police-bank-cds-banking-products-openapi.yml]
- scope: bank:transactions:read
  description: >-
    Transactions - the ability to read a member's transactions for authorised
    accounts, including transaction detail.
  flows: [authorizationCode]
  operations: [listBankingTransactions, getBankingTransactionDetail]
  sources: [openapi/police-bank-cds-banking-products-openapi.yml]
- scope: bank:regular_payments:read
  description: >-
    Regular payments - direct debits, scheduled payments and instalment plans
    configured on a member's accounts.
  flows: [authorizationCode]
  operations: [listDirectDebits, listDirectDebitsBulk, listDirectDebitsSpecificAccounts, listScheduledPayments, listScheduledPaymentsBulk, listScheduledPaymentsSpecificAccounts, listInstalmentPlans, listInstalmentPlansBulk]
  sources: [openapi/police-bank-cds-banking-products-openapi.yml]
- scope: bank:payees:read
  description: >-
    Saved payees - the member's stored domestic, international and BPAY payees.
  flows: [authorizationCode]
  operations: [listBankingPayees, getBankingPayeeDetail]
  sources: [openapi/police-bank-cds-banking-products-openapi.yml]