Czech Banking Association
Czech Open Banking Standard
Berlin Group-influenced but independently versioned, with a separate mandatory API for ATM and branch listings.
Security profile
- Client authentication
- mTLS with QWAC.
- Message signing
- Optional per ASPSP.
- Tokens
- OAuth2 authorization_code.
- Certificates
- eIDAS QWAC + QSealC.
SCA approaches
RedirectDecoupled
What bites integrators
- Transaction ids are not stable across pages for some banks — deduplicate on amount, date and reference.
APIs and endpoints
AISP
AISAccounts, balances, transactions.
- GET
/v3/accountsList accounts - GET
/v3/accounts/{id}/transactionsRead transactions