App Scotia (Scotia GO) API integration & OpenFinance services

Account & balance API

Read live balances and recent movements for cuenta corriente, cuenta vista, cuenta de ahorro a plazo and tarjeta de crédito. Output uses ISO 4217 currency codes (CLP, USD) and ISO 8601 timestamps so a finance ERP can post journal lines without extra normalization.

Statement export

Download cartolas (statements) for any date range with paging cursors. Returns merchant name, transaction reference, FX margin on international card spend, and posting vs. authorization timestamps — the fields that drive reconciliation and dispute handling.

ScotiaPass Digital authorization

Bridge the in-app KeyPass token flow into your backend. Use it for strong customer authentication on transfers, card payments and onboarding journeys. The flow follows OAuth 2.0 with PKCE and integrates with downstream MFA event logs.

Credit-card payment posting

Pay national or international Scotia credit cards from a linked Scotia account, with idempotency keys so retries do not duplicate. Suitable for payroll-driven card payment automations and treasury sweeps at the end of each billing cycle.

SMART investments

Read SMART portfolio holdings, mutual fund positions, time-deposit (depósito a plazo) confirmations and projection-chart data. Ideal for wealth tools that already aggregate Fintual or BCI investments and now want a Scotia view next to them.

Receipts & transfer evidence

Pull machine-readable receipts of recent transfers (comprobantes), so audit and AP systems can attach a verified PDF or JSON payload to each accounting record instead of asking customers to forward email screenshots.

1. SME accounting reconciliation

Context: A Chilean SME runs Defontana, Bsale or NetSuite and wants Scotia movements posted as journal lines automatically.
Data / API: account-balance + movements endpoints, polled every 15 minutes, plus webhook on new credits.
OpenFinance mapping: matches the “account information” service category in CMF General Regulation 514, equivalent to AISP under PSD2.

2. Wealth aggregation with SMART

Context: A wealth advisor app already aggregates Fintual and BCI Inversiones; the user wants to add SMART positions in one view.
Data / API: SMART holdings, time-deposit confirmations, projection charts.
OpenFinance mapping: investment-account information sharing under the Open Finance System, with consent revocation in line with Article 22 of Law 21,521.

3. Automated credit-card payment

Context: A payroll provider pays national and international Scotia cards on payday; the customer authorizes recurring transfers via ScotiaPass Digital.
Data / API: ScotiaPass auth flow, credit-card payment endpoint with idempotency key, transfer-receipt fetch.
OpenFinance mapping: payment-initiation service (PIS) equivalent, with strong customer authentication.

4. Expense management for international travel

Context: A corporate T&E platform needs USD card movements with FX margin to apply IFRS-compliant FX accounting.
Data / API: international credit-card transactions with FX rate and merchant category code.
OpenFinance mapping: cross-border transaction information in the OpenBanking Tracker Chile category.

5. Risk & lending decisioning

Context: A Chilean digital lender wants 12 months of cuenta corriente movements and credit-card cycles to score an applicant.
Data / API: historical movements + statements with cursor paging, normalized to a categorization layer (rent, payroll, leisure).
OpenFinance mapping: consented account information sharing + secondary-use logging required under CMF rule.

1. ScotiaPass-bridged login (OAuth 2.0 + PKCE)

POST /oauth2/token
Host: api.openfinance-lab.com
Content-Type: application/x-www-form-urlencoded

grant_type=authorization_code
&code=AUTHZ_CODE_FROM_SCOTIAPASS
&code_verifier=PKCE_VERIFIER
&client_id=of_lab_chile_client
&redirect_uri=https%3A%2F%2Fapp.example.cl%2Fcb

200 OK
{
  "access_token": "eyJhbGciOi...",
  "token_type": "Bearer",
  "expires_in": 1800,
  "refresh_token": "rt_3a1f...",
  "scope": "accounts:read statements:read cards:write smart:read"
}

2. Statement query

GET /v1/scotia-cl/accounts/CL12-34567890/movements
   ?from=2026-04-01&to=2026-04-30&limit=200&cursor=
Authorization: Bearer <ACCESS_TOKEN>
X-Idempotency-Key: 8f0e...

200 OK
{
  "account_id": "CL12-34567890",
  "currency": "CLP",
  "movements": [
    {
      "id": "mv_9b2...",
      "posted_at": "2026-04-29T14:08:11-04:00",
      "amount": -42990,
      "description": "Pago tarjeta credito Scotia",
      "category": "card_payment",
      "reference": "SCOTIA-CC-770122",
      "scotia_pass_auth_id": "sp_ab12cd"
    }
  ],
  "next_cursor": "eyJwYWdlIjoyfQ=="
}

3. Webhook: new ScotiaPass authorization

POST /your/webhook/scotia
X-OFLab-Signature: t=1715300000,v1=8e1f...
Content-Type: application/json

{
  "event": "scotia_pass.authorization.created",
  "occurred_at": "2026-05-10T09:42:00-04:00",
  "account_id": "CL12-34567890",
  "auth_id": "sp_77ab",
  "amount": 199990,
  "currency": "CLP",
  "channel": "credit_card_payment",
  "card_last4": "4421",
  "status": "approved"
}

# Verify with HMAC-SHA256(secret, t + "." + body)
# Reject if abs(now - t) > 300 seconds.

Chile Fintech Law (Law 21,521) and CMF Regulation 514

Chile’s Fintech Law was enacted in January 2023 (Ley 21.521). On 2024-07-19 the Comisión para el Mercado Financiero published General Regulation 514, which codifies the Open Finance System (Sistema de Finanzas Abiertas, SFA). Banks such as Scotiabank Chile must expose consented account information from 4 July 2026, with progressive scope through 2031. We design every Scotia integration to land cleanly inside that timeline so that what we ship today survives the regulatory turn-on.

Privacy & security controls

• Data minimization — only the fields the use case needs are stored.
• Consent records — granular per-scope, revocable, with audit log.
• Encryption — TLS 1.2+ in transit; AES-256 / KMS-backed at rest.
• Logging — append-only authorization log keyed by ScotiaPass auth_id.
• Retention — configurable to match Article 22 obligations under Law 21,521.

BancoEstado

Chile’s state-owned bank with the broadest reach — checking accounts, CuentaRUT, QR payments through Compraquí and Pasaje QR RED. Customers often ask for unified BancoEstado + Scotia transaction exports for SME accounting.

Santander Chile

Recognized as one of the country’s strongest digital banking apps. Holds checking, savings, mortgages, credit cards and investment products — a typical companion to Scotia data for Chilean treasury dashboards.

Bci

One of Chile’s top private banks, exposing accounts, cards, mortgages and Bci Inversiones positions. Pairing Bci and Scotia data is a frequent ask in wealth-aggregation integrations.

Banco de Chile

Holds large retail and corporate deposit volumes; statements, credit-card cycles and FX flows mirror the data shapes we already normalize for Scotia.

Banco Itaú Chile

Itaú’s Chilean subsidiary plus the “itu” neobank-style line offer current accounts, cards and digital wallets. Cross-bank movements are a natural part of any reconciliation pipeline.

Tenpo

Chile’s first neobank, Credicorp-backed, with provisional CMF banking-license authorization and over two million users. Wallet balances and card movements are common companions to Scotia data in finance-aggregation tools.

MACH

A BCI-owned digital wallet popular for peer-to-peer transfers and prepaid cards. Customers who hold MACH and a Scotia account often want one unified spend feed.

Fintual

A fully-digital asset manager with more than USD 2 billion under administration. Pairs naturally with Scotia SMART positions in any wealth aggregation flow.

Chek

A digital wallet from Banco Ripley targeting younger users; transfers, top-ups and card spending sit next to Scotia data in family-budgeting integrations.

Klap (ex-Multicaja)

A merchant-acquiring and bill-payment platform. Settlement reports complement Scotia’s receivable feed for Chilean SMEs that combine card acceptance with banking.

Deliverables checklist

• OpenAPI 3.1 specification for accounts, statements, cards, ScotiaPass and SMART endpoints
• Protocol & auth flow report (OAuth 2.0 / PKCE, ScotiaPass token chain, error taxonomy)
• Runnable source for login + statement APIs in Python and Node.js (also Go on request)
• Postman collection, fixture replay, and integration tests
• Compliance brief — CMF Regulation 514 mapping, consent record schema, retention defaults

About OpenFinance Lab

We are an independent technical studio focused on app protocol analysis and OpenFinance API integration for Latin America. Our team has shipped integrations for banks, payments, neobanks, and wealth platforms across Chile, Peru, Mexico, Colombia and Brazil, working under signed authorization or against documented public APIs only.

• Two engagement models: Source-code delivery from $300 (pay after delivery upon satisfaction) and Pay-per-call API billing (no upfront fee).
• Android & iOS coverage with reproducible test plans.
• NDAs, scoped data access, and consent records on day one.

Engagement workflow

1. Scope confirmation: which Scotia flows (login, statements, cards, SMART, ScotiaPass).
2. Protocol analysis & API design (2–5 business days, scope-dependent).
3. Build & internal validation against fixtures (3–8 business days).
4. Docs, samples, and test cases (1–2 business days).
5. Hand-off and pay-after-delivery acceptance, or switch to pay-per-call billing.

FAQ

What information do you need to start an App Scotia integration?

How long does delivery typically take?

How do you handle compliance under the Chilean Fintech Law?