Finstar API

Name: Finstar API API
Brand: Finstar API
Availability: InStock

★ Only Publicly Available OpenAPI DocumentFinanceBankingbearer9 EndpointsREST

For Agents

Initiate PSD2 payments, list accounts and transactions under XS2A consent, and manage Finstar-issued cards through a regulated Swiss open-banking API.

Connect the Finstar API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Finstar API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Finstar API API.

Authorize a PSD2 session and exchange consent for a bearer access token via /v1/authorize

Initiate Single Euro Payments Area (SEPA) and Swiss payment instructions through /v1/payments

Track payment status by paymentId until settlement or rejection

List XS2A accounts and inspect balances for a consented end user

GET STARTED

Start building with Finstar API API

Explore with Jentic

View OpenAPI Document

Jentic publishes the only available OpenAPI document for Finstar API, keeping it validated and agent-ready.

Jentic publishes the only available OpenAPI specification for Finstar API, keeping it validated and agent-ready. Finstar is a Swiss banking platform that provides PSD2-compliant open banking APIs for payment initiation (PIS), account information access (XS2A), card management, and digital onboarding for banks and fintechs. The 9-endpoint surface focuses on the highest-leverage operations a regulated agent or back-office system needs: authorize a session, initiate payments, list and inspect accounts, fetch transactions, and manage card settings.

Use Cases

Patterns agents use Finstar API API for, with concrete tasks.

★ PSD2 Payment Initiation

Initiate outbound payments under PSD2 PIS rules via /v1/payments and track lifecycle through /v1/payments/{paymentId}. Finstar handles strong customer authentication redirects and ASPSP routing, so the agent only manages the request, status polling, and reconciliation. A typical PIS integration is live in under a week.

POST to /v1/payments with debtor account, creditor IBAN, amount EUR 250, and reference 'INV-9081', then poll /v1/payments/{paymentId} until status is SETTLED

Account Aggregation under XS2A

Aggregate balances and transactions across consented accounts using /v1/accounts and /v1/accounts/{accountId}/transactions. The endpoints return PSD2-standard balance types and booked/pending transactions, suitable for treasury dashboards, cashflow forecasting, and AISP-licensed budgeting apps. Most teams ship a working aggregation prototype in 2-3 days.

List all accounts via GET /v1/accounts then fetch transactions for each account from the last 30 days and compute net cash flow

Card Lifecycle Management

Manage Finstar-issued cards through GET /v1/cards, GET /v1/cards/{cardId}, and PATCH /v1/cards/{cardId} to inspect cards and update status, limits, or controls. Useful for fraud response (immediate block on suspicious activity) and self-service card controls in a banking app. PATCH operations apply within seconds.

PATCH /v1/cards/card_42 with status=BLOCKED to immediately freeze a reported-stolen card

AI Agent Treasury Operations

Connect Finstar to an AI agent through Jentic so it can answer cashflow questions and initiate authorised payments using natural language. Jentic exposes /v1/payments and /v1/accounts as discoverable tools while keeping the bearer token in the vault, suitable for treasury copilots and finance assistants. Get started at https://app.jentic.com/sign-up

Through Jentic, search 'initiate a SEPA payment', load the /v1/payments schema, and execute a payment of EUR 100 from the operating account to a verified payee

Key Endpoints

9 endpoints — jentic publishes the only available openapi specification for finstar api, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/v1/authorize

Exchange PSD2 consent for an access token

POST

/v1/payments

Initiate a payment under PSD2 PIS

GET

/v1/payments/{paymentId}

Get payment status

GET

/v1/accounts

List XS2A accounts under consent

GET

/v1/accounts/{accountId}/transactions

Get account transactions

GET

/v1/cards

List issued cards

PATCH

/v1/cards/{cardId}

Update card settings

POST

/v1/authorize

Exchange PSD2 consent for an access token

POST

/v1/payments

Initiate a payment under PSD2 PIS

GET

/v1/payments/{paymentId}

Get payment status

GET

/v1/accounts

List XS2A accounts under consent

GET

/v1/accounts/{accountId}/transactions

Get account transactions

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Finstar bearer tokens are stored encrypted in the Jentic vault. Agents request execution; Jentic injects the Authorization header at call time so the token is never exposed to the model.

Intent-based discovery

Agents search by intent (e.g. 'initiate a SEPA payment' or 'get account transactions') and Jentic returns the matching Finstar operation with its parameters, removing the need to read the PSD2 spec.

Time to first call

Direct Finstar integration: 5-10 days including PSD2 consent flow, SCA handling, and reconciliation. Through Jentic: under 1 hour for the API surface — consent flow remains your responsibility.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Alternative

Fire Financial Services Business API

Irish business banking API with broader payment batch and webhook support

Choose when the agent needs Irish/UK business banking with payment batches; pick Finstar for Swiss XS2A and PSD2 PIS

Complementary

Firebase Auth REST API

Adds end-user authentication and identity to a banking app built on Finstar

Use Firebase Auth for end-user login alongside Finstar for the underlying banking operations

Complementary

Fintel API

Brings investment-side market intelligence to complement Finstar's banking primitives

Pair when an agent needs both transactional banking and equity ownership data

FAQs

Specific to using Finstar API API through Jentic.

Why is there no official OpenAPI spec for Finstar API?

Finstar does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Finstar API via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the Finstar API use?

Finstar uses HTTP bearer authentication. Clients first obtain a token via POST /v1/authorize, then send it in the Authorization header. Through Jentic, the bearer token is stored encrypted and injected at execution time.

Can I initiate SEPA payments with the Finstar API?

Yes. POST /v1/payments accepts SEPA and other supported payment types under PSD2 PIS rules and returns a paymentId for status tracking via GET /v1/payments/{paymentId}.

What are the rate limits for the Finstar API?

Finstar applies PSD2-standard rate limits at the consent level (typically four AISP polls per day per resource without user presence). Specific quotas depend on your contract; Jentic surfaces 429 responses as standard errors so agents can back off.

How do I aggregate accounts through Jentic?

Search Jentic for 'list bank accounts', load the /v1/accounts schema, and execute under a valid Finstar consent token. Then fan out to /v1/accounts/{accountId}/transactions for each returned account to build a cashflow view.

Can the Finstar API block a card immediately?

Yes. PATCH /v1/cards/{cardId} with a status change applies within seconds, making it suitable for fraud-response flows triggered by an agent or rules engine.