BaaS Business API Reference
Banking-as-a-Service for corporate customers — company onboarding (KYC, directors, shareholders, UBOs, source-of-funds), corporate IBANs, multi-cardholder issuing, SEPA & SWIFT, FX and treasury.
Authentication
Every request is authenticated with HTTP Basic — the standard Authorization: Basic <base64(user:pass)> header. You receive a username, password, client key, secret key and whitelabel id after onboarding. To request credentials, contact [email protected].
Most JSON endpoints also need a web_token + user_id in the body, obtained from the Login endpoint. Each request must include the matching whitelabel_id.
updateLiveuser every minute — without it the session token expires.Errors
All responses return HTTP 200 with a JSON body. The status field is the machine-readable result (1 = success, anything else = failure) and message carries a human-readable reason.
| status | Meaning |
|---|---|
| 1 | Success |
| 0 | Validation failed / generic error — see message |
| 2 | OTP required — confirm via the matching confirm* endpoint |
| -1 | Auth failure (invalid Basic credentials, expired web_token, or missing whitelabel_id) |