Skip to content
Milos Sontak edited this page Dec 8, 2023 · 37 revisions

Product

The Account Direct Access API (ADAA) service provides secure access to information about:

  • Client’s transaction history
  • Bank account balance
  • Information about transaction history is provided in connection with current accounts of a client of Komerční banka.

more details is on website Direct Account Access API

Enviroments

  • For testing requests we recommend the application Postman

Sandbox

Production

  • Postman [Production](./postman/KB API - Production - API Business suite.postman_collection.json) collection
  • Register on production API portal

How to start

Process

Process flow

Actors

  • User - Client KB - User who give access to his account via API in Komercni banka
  • Developer - Developer who create app
  • KB - Komercni banka

1. Developer registers on production API portal

  • create application
  • subcribe to API (Client Registration, OAuth2, Adaa API)
  • create API key (apiKey)
how create API key (apiKey)

api portal - api key

2. Developer registers your application in KB

  • Software Statement with qualified certificate issued by a trusted certification authority (I.CA, PostSignum)

3. Developer calls Application Registration OAuth2 in browser

  • browser shows this page and gives control to KB

4. Client KB works in Bank - Register app

5. Developer processes the application registration information

6. Developer calls - Authorization code Tokens

7. Client KB works in Bank - Confirm apps scopes

8. Developer processes authorization code

9. Developer get - Accounts

Next endpoints

  1. Account Balances
  2. Transactions
  3. Notification of changes to your account (webhook)
  4. Account Statements - PDF

Recommendations for the user interface

  • support for flow registration of the application by the user (each user needs only 1 application)
  • support for token acquisition and renewal (once every 12 months or sooner)
  • our demo app