Regional Australia Bank OAuth Scopes

OAuth 2.0 derived

Regional Australia Bank publishes 5 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Regional Australia Bank API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingAustraliaCustomer-OwnedProduct Reference DataMutual Bank

Scopes: 5 Flows: authorizationCode Method: derived

Scopes (5)

Scope	Description	Flows
bank:accounts.basic:read	Read basic banking account information (account list and summary).	authorizationCode
bank:accounts.detail:read	Read detailed banking account information for a specific account.	authorizationCode
bank:transactions:read	Read banking transactions for authorised accounts.	authorizationCode
bank:regular_payments:read	Read scheduled payments and direct debits for authorised accounts.	authorizationCode
bank:payees:read	Read saved payees for authorised accounts.	authorizationCode

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes

Source

OAuth Scopes

generated: '2026-07-20'
method: derived
source: openapi/regional-australia-bank-cds-banking-products-openapi.yml
docs: https://consumerdatastandardsaustralia.github.io/standards/#authorisation-scopes
note: >-
  Regional Australia Bank participates in Australia's Consumer Data Right (CDR)
  as an accredited data holder. The public Product Reference Data (PRD) surface
  is unauthenticated and requires NO scope. The authenticated consumer data
  sharing operations defined by the shared CDS Banking API contract are secured
  under the CDR security profile (OAuth2 / OpenID Connect, FAPI-aligned) and are
  accessible only to accredited data recipients registered on the CDR Register.
  The scopes below are the CDR banking authorisation scopes carried as `x-scopes`
  extensions on the operations in the harvested CDS spec; they are the DSB
  standard scopes, not a Regional-Australia-Bank-proprietary set.
schemes:
  - name: CDR-OAuth2-OIDC
    type: oauth2
    profile: CDR security profile (FAPI 1.0 Advanced-aligned)
    source: https://consumerdatastandardsaustralia.github.io/standards/#security-profile
    flows:
      - flow: authorizationCode
        note: >-
          Authorization Code with PKCE; issuer/authorization/token endpoints are
          published per data holder via OIDC discovery at the data holder's
          CDR InfoSec baseURI (not exposed on the public PRD host).
scopes:
  - scope: bank:accounts.basic:read
    description: Read basic banking account information (account list and summary).
    flows: [authorizationCode]
    sources: [openapi/regional-australia-bank-cds-banking-products-openapi.yml]
  - scope: bank:accounts.detail:read
    description: Read detailed banking account information for a specific account.
    flows: [authorizationCode]
    sources: [openapi/regional-australia-bank-cds-banking-products-openapi.yml]
  - scope: bank:transactions:read
    description: Read banking transactions for authorised accounts.
    flows: [authorizationCode]
    sources: [openapi/regional-australia-bank-cds-banking-products-openapi.yml]
  - scope: bank:regular_payments:read
    description: Read scheduled payments and direct debits for authorised accounts.
    flows: [authorizationCode]
    sources: [openapi/regional-australia-bank-cds-banking-products-openapi.yml]
  - scope: bank:payees:read
    description: Read saved payees for authorised accounts.
    flows: [authorizationCode]
    sources: [openapi/regional-australia-bank-cds-banking-products-openapi.yml]