Caixadirecta API integration services (PSD2 / SIBS / MB WAY)

Authorization & consent

OAuth2 redirect flow that mirrors Caixadirecta's authentication pattern: the customer is sent to the bank's hosted consent screen, signs in with their Caixadirecta credentials, performs SCA via biometric or PIN, then returns with an access token bound to the granted account scope. We implement consent renewal (90-day PSD2 limit) and silent re-auth where eligible.

Account information service (AIS)

Read endpoints for account details, balances and transactions. Includes the cross-bank account view that Caixadirecta exposes when users add external Portuguese accounts, so a single token can pull a unified balance sheet across Multibanco-connected institutions.

Payment initiation service (PIS)

SEPA Credit Transfer, future-dated and standing orders, MB WAY money sends, and state/utility payments. Each payment includes an explicit SCA step; webhooks deliver status transitions (RCVD → ACTC → ACSC) for reliable settlement tracking.

Confirmation of funds (CAF)

Yes/no funds availability checks for card-issuer use cases — useful when a third-party wallet needs to confirm a Caixa account can cover a debit before authorizing a stored-value top-up.

Card & Google Pay events

Capture push events for in-app card validation (3-D Secure step-up), tokenized Google Pay add-to-wallet confirmations and contactless payment confirmations driven by the Caixadirecta NFC stack.

Voice & assistant logs

Where the customer enables Caixadirecta's AI Digital Assistant for voice commands, we surface command transcripts and triggered-action receipts so enterprise audit trails stay complete.

1. Accounting sync for SMEs

Context: Portuguese small businesses using cloud accounting suites need daily booking imports from their CGD operating account. Data & APIs: AIS endpoints fetch the previous day's transactions filtered by booking date; we map MCC and counterparty IBAN to a chart-of-accounts ruleset. OpenFinance mapping: Berlin Group NextGenPSD2 GET /accounts/{id}/transactions, replayed nightly with consent renewal automation.

2. PFM & net-worth dashboards

Context: A retail PFM app aggregates the user's CGD accounts plus any institutions the user has linked inside Caixadirecta's multi-bank screen. Data & APIs: AIS account list + balance + categorized transactions; webhook on balance change. OpenFinance mapping: Account Information Service Provider (AISP) role under PSD2; one consent covers the user's whole financial picture.

3. MB WAY-driven micro-merchant collection

Context: A marketplace lets gig workers receive payouts via MB WAY phone alias. Data & APIs: PIS-initiated MB WAY send from the marketplace's CGD operating account, with webhook confirmation and ledger entry. OpenFinance mapping: Payment Initiation Service Provider (PISP) role; SCA performed inside the customer-facing Caixadirecta app.

4. Lender affordability scoring

Context: A consumer lender needs 90 days of transaction history to score affordability before approving a loan. Data & APIs: 90-day AIS transaction pull + categorization model; CAF check before disbursement to confirm the source account can hold standing-order debits. OpenFinance mapping: AISP plus CAF endpoints; data minimization enforced at consent grant.

5. Treasury reconciliation for enterprises

Context: A multi-entity corporate treasury wants intraday balance polling across CGD operating accounts plus supplier SEPA payouts. Data & APIs: Intraday AIS balance polls every 15 minutes; bulk PIS submissions for supplier batches; status webhooks reconciled into the ERP. OpenFinance mapping: SIBS API Market Berlin Group endpoints with corporate consent flows and audit-log export.

Consent & OAuth handshake

// 1. Create AIS consent (Berlin Group NextGenPSD2)
POST /v1/consents
X-Request-ID: 9f7b4e44-...-c8e6
PSU-IP-Address: 198.51.100.7
TPP-Redirect-URI: https://your-app.example/cb

{
  "access": {
    "balances": [{"iban": "PT50003500000000000000000"}],
    "transactions": [{"iban": "PT50003500000000000000000"}]
  },
  "recurringIndicator": true,
  "validUntil": "2026-07-26",
  "frequencyPerDay": 4
}

// 2. SCA redirect → user authorises in Caixadirecta app
// 3. Exchange consent for access token, then call AIS endpoints

Statement query

GET /v1/accounts/{accountId}/transactions
  ?bookingStatus=booked
  &dateFrom=2026-03-01
  &dateTo=2026-03-31
Authorization: Bearer <ACCESS_TOKEN>
Consent-ID: 12a8b3...

200 OK
{
  "transactions": {
    "booked": [
      {
        "transactionId": "T-2026...",
        "bookingDate": "2026-03-14",
        "valueDate": "2026-03-14",
        "transactionAmount": {"amount": "-42.10", "currency": "EUR"},
        "creditorName": "EDP Comercial",
        "remittanceInformationUnstructured": "Fatura 4567"
      }
    ]
  }
}

MB WAY initiation & webhook

POST /v1/payments/instant-sepa-credit-transfers
{
  "debtorAccount": {"iban": "PT50003500000000000000000"},
  "instructedAmount": {"amount": "25.00", "currency": "EUR"},
  "creditorAccount": {"msisdn": "+351912345678"},
  "creditorName": "Joana M.",
  "remittanceInformationUnstructured": "Splitting dinner"
}

// Webhook → your service
POST /webhooks/payment-status
{
  "paymentId": "P-...",
  "status": "ACSC",
  "scaStatus": "finalised",
  "timestamp": "2026-04-28T10:14:22Z"
}

About our studio

We are an independent technical service studio specializing in App interface integration and authorized API integration for global clients. The team combines years of hands-on work in mobile applications, fintech, OpenBanking and protocol analysis, with engineers who have shipped production AISP and PISP integrations across the EU.

• Protocol analysis, OpenData / OpenFinance / OpenBanking integration
• Compliant interface implementations under PSD2, GDPR and local rules
• Both Android and iOS coverage; ready-to-use API source code, documentation and test plans
• Source code delivery from $300 — runnable API code, OpenAPI docs; pay after delivery upon satisfaction
• Pay-per-call API billing — access our hosted endpoints and pay only for what you use

Contact

For a quote on a Caixadirecta or any other Portuguese / EU OpenBanking integration, send your target app and concrete requirements through our contact page.

Contact page

Deliverables checklist

• OpenAPI 3 / Swagger spec for the integrated endpoints
• Protocol & auth flow report (OAuth2, consent lifecycle, SCA)
• Runnable source for login, statement, MB WAY and SEPA payment APIs (Python / Node.js)
• Automated integration tests against SIBS sandbox
• Compliance guidance: PSD2 RTS, GDPR data-minimization, retention

Engagement workflow

1. Scope confirmation: which Caixadirecta capabilities (login, statements, MB WAY, SEPA) and volumes.
2. Protocol analysis & API design (2–5 business days).
3. Build and internal validation against SIBS sandbox (3–8 business days).
4. Docs, samples, and end-to-end test cases (1–2 business days).
5. Typical first delivery: 5–15 business days; TPP licensing or sandbox approval may extend timelines.

FAQ

What do you need from me?

How long does delivery take?

Do I need a PSD2 TPP licence?

How do you handle compliance?

Recent context (2024–2026)

Caixadirecta has continued to expand its in-app capabilities, including ongoing improvements to MB WAY functionality, refinements to state and service payments, and an Artificial Intelligence-powered Digital Assistant that lets users execute actions through voice commands. In 2025, Revolut reached agreement with the operator of the Multibanco system, extending MB WAY usage to Revolut customers — a change that further increases the value of unified Portuguese OpenBanking integrations covering CGD plus EMIs in a single stack.