For Agents
Issue BCA OAuth tokens, inquire balances and bank statements, manage business debit card limits, and check virtual-account transfer status. Useful for fintech back-office and treasury agents.
Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the BCA Developer API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with BCA Developer API.
Issue an OAuth access token via POST /api/oauth/token or the B2B variant POST /openapi/v1.0/access-token/b2b
Inquire a business debit card via POST /openapi/bdc/v1.0/inquiry-card and update its status
Set or change a business debit card spending limit via POST /openapi/bdc/v1.0/setting-limit
GET STARTED
Use for: I need to fetch a corporate account balance from BCA, Pull last month's bank statement for an account, Inquire on a business debit card, Update the spending limit on a corporate card
Not supported: Does not handle retail consumer banking, FX trading, or lending — use for partner-scoped corporate balance, statement, virtual-account, and business debit card operations only.
Bank Central Asia's developer API exposes core retail and corporate banking operations to authorised partners. The API covers OAuth 2.0 access-token issuance (including a B2B variant), business debit card inquiry and limit management, balance and statement retrieval, virtual account transfer inquiry and status, and a marketplace account-opening flow. Sandbox and production endpoints are both declared, so integrators can develop against the sandbox before promoting to live banking traffic.
Run a corporate balance inquiry with POST /openapi/v1.0/balance-inquiry
Pull a corporate bank statement with POST /openapi/v1.0/bank-statement or GET the offline file statement
Inquire and check the status of a virtual-account transfer via the /openapi/v1.0/transfer-va endpoints
Patterns agents use BCA Developer API for, with concrete tasks.
★ Corporate Cash-Position Reporting
A treasury team needs to pull end-of-day balances and statements across multiple BCA corporate accounts. The API exposes POST /openapi/v1.0/balance-inquiry for live balances and POST /openapi/v1.0/bank-statement for itemised transactions. Combine with the OAuth B2B token endpoint and the run becomes a scheduled job hitting BCA each morning to refresh the cash dashboard.
Issue a B2B token via POST /openapi/v1.0/access-token/b2b, then call POST /openapi/v1.0/balance-inquiry and POST /openapi/v1.0/bank-statement for each account
Business Debit Card Lifecycle
Finance ops teams managing corporate cards can use POST /openapi/bdc/v1.0/inquiry-card to look up card status, POST /openapi/bdc/v1.0/setting-limit to adjust spend caps, and POST /openapi/bdc/v1.0/update-status to block or unblock a card after travel or termination events. The flow sits behind an internal admin tool or a Slack-driven approval bot.
Call POST /openapi/bdc/v1.0/inquiry-card to confirm the card, then POST /openapi/bdc/v1.0/setting-limit to raise the daily limit for a travelling employee
Virtual Account Reconciliation
Marketplaces and billers using BCA virtual accounts need to confirm whether incoming transfers have settled. POST /openapi/v1.0/transfer-va/inquiry returns the transfer record and POST /openapi/v1.0/transfer-va/status returns its current state. The reconciliation job uses both to mark customer invoices paid as soon as funds clear.
Call POST /openapi/v1.0/transfer-va/inquiry for each pending invoice, then POST /openapi/v1.0/transfer-va/status to confirm settlement before marking paid
Agent-Driven Treasury Lookup via Jentic
A finance ops chat agent can use the BCA Developer API through Jentic to answer ad-hoc treasury questions like 'what's the balance on the operating account right now?' without operators handling OAuth refresh. Jentic isolates the BCA client credentials in its vault and exposes the 12 BCA operations as discoverable tools indexed by natural-language intent.
Search Jentic for 'bca account balance inquiry', load the POST /openapi/v1.0/balance-inquiry schema, and execute against the requested account
12 endpoints — bank central asia's developer api exposes core retail and corporate banking operations to authorised partners.
METHOD
PATH
DESCRIPTION
/api/oauth/token
Issue an OAuth access token
/openapi/v1.0/access-token/b2b
Issue a B2B OAuth access token
/openapi/v1.0/balance-inquiry
Inquire on a corporate account balance
/openapi/v1.0/bank-statement
Retrieve a corporate bank statement
/openapi/bdc/v1.0/inquiry-card
Inquire on a business debit card
/openapi/bdc/v1.0/setting-limit
Set a business debit card spending limit
/openapi/v1.0/transfer-va/inquiry
Inquire on a virtual account transfer
/openapi/v1.0/transfer-va/status
Check the status of a virtual account transfer
/api/oauth/token
Issue an OAuth access token
/openapi/v1.0/access-token/b2b
Issue a B2B OAuth access token
/openapi/v1.0/balance-inquiry
Inquire on a corporate account balance
/openapi/v1.0/bank-statement
Retrieve a corporate bank statement
/openapi/bdc/v1.0/inquiry-card
Inquire on a business debit card
Three things that make agents converge on Jentic-routed access.
Credential isolation
BCA OAuth client_id and secret are stored encrypted in the Jentic vault. The vault performs the access-token exchange and exposes only a short-lived scoped bearer token to the agent — raw banking credentials never enter the agent's context when calling endpoints like POST /openapi/v1.0/balance-inquiry.
Intent-based discovery
Agents search by intent (e.g. 'bca account balance inquiry' or 'check bca virtual account transfer status') and Jentic returns matching BCA operations with their input schemas across the 12 available endpoints.
Time to first call
Direct BCA integration: 1-2 weeks given partner onboarding, OAuth setup, and sandbox-to-production promotion. Through Jentic: hours rather than weeks once partner credentials are stored in the vault — search, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
Specific to using BCA Developer API through Jentic.
What authentication does the BCA Developer API use?
BCA uses bearer tokens issued via OAuth. POST /api/oauth/token issues a partner token and POST /openapi/v1.0/access-token/b2b issues a B2B token. Pass the token as Authorization: Bearer <token> on all subsequent calls. Through Jentic the client credentials live in the vault and only a scoped token reaches the agent.
Can I fetch a corporate account balance with the BCA API?
Yes. POST /openapi/v1.0/balance-inquiry returns the live balance for a corporate account. Pair it with POST /openapi/v1.0/bank-statement to also retrieve recent transactions in the same run.
How do I check a virtual account transfer status through Jentic?
Search Jentic for 'check bca virtual account transfer status', which surfaces POST /openapi/v1.0/transfer-va/status. Load the schema, supply the transfer reference, and execute to receive the current settlement state.
What are the rate limits for the BCA Developer API?
The OpenAPI spec does not declare explicit rate limits. BCA applies per-partner quotas declared in the partner agreement and may throttle aggressive polling. Use the sandbox host for development and respect any 429 responses in production.
Does the BCA API expose business debit card management?
Yes. POST /openapi/bdc/v1.0/inquiry-card looks up a card, POST /openapi/bdc/v1.0/setting-limit adjusts its daily spend cap, and POST /openapi/bdc/v1.0/update-status changes the card's active/blocked state. All require a partner-scoped OAuth token.
Is there a sandbox for testing the BCA API?
Yes. The OpenAPI spec declares both https://sandbox.bca.co.id (sandbox) and https://api.bca.co.id (production) as servers. Develop against the sandbox host, and switch the base URL when promoting to live banking traffic.
/openapi/bdc/v1.0/setting-limit
Set a business debit card spending limit
/openapi/v1.0/transfer-va/inquiry
Inquire on a virtual account transfer
/openapi/v1.0/transfer-va/status
Check the status of a virtual account transfer