Description and Details
This API is used to create an Account Information Service Provider (AISP) consent. This consent allows regulated third-party providers to access account information from account servicing payment service providers (ASPSPs), as per open banking standards. Consent must be authorized by the customer after creation.
Endpoint
https://api-dev-isolution.xyz/aisp/v1/access-consent
Verb Method
POST
Headers Request Parameters
| Key | Value | Description | Required |
|---|---|---|---|
| Cache-Control | no-cache | Prevents caching of request | Yes |
| Postman-Token | <calculated when request is sent> | Auto-generated by Postman client | No |
| Content-Type | application/json | Request body content type | Yes |
| Content-Length | <calculated when request is sent> | Auto-generated | No |
| Host | <calculated when request is sent> | Auto-generated | No |
| User-Agent | PostmanRuntime/7.44.0 | Postman client version | No |
| Accept | / | Accepts any response content-type | Yes |
| Accept-Encoding | gzip, deflate, br | Compression types supported | Yes |
Body Request Parameters
| Parameter | Type | Description | Required |
|---|---|---|---|
| permissions | array | List of permissions requested | Yes |
| expirationDateTime | string | Consent expiration date-time (ISO8601 format) | Optional |
| transactionFromDateTime | string | Start date for transaction access (ISO8601 format) | Optional |
| transactionToDateTime | string | End date for transaction access (ISO8601 format) | Optional |
Response Parameters
| Parameter | Type | Description |
|---|---|---|
| data.consent_id | string | Unique identifier for created consent |
| data.status | string | Consent status (e.g. AwaitingAuthorisation) |
| data.statusUpdateDateTime | string | Last status update date-time (ISO8601) |
| data.creationDateTime | string | Consent creation date-time (ISO8601) |
| data.expirationDateTime | string | Consent expiration date-time (ISO8601) |
HTTP Codes
| HTTP Code | Description |
|---|---|
| 200 OK | Consent successfully created |
| 400 Bad Request | Invalid request format or parameters |
| 401 Unauthorized | Authentication failed |
| 403 Forbidden | Not authorized to create consent |
| 500 Internal Server Error | Server error |