RecargaPay API integration & Open Finance Brasil data services

Authentication & session

OAuth 2.0 / OIDC-based login mapping, CPF/CNPJ identification, MFA challenge handling (SMS/email/device), and long-lived refresh flow. We document the mobile app's authorization sequence and wrap it into a stable service-to-service token exchange, including device binding and session rotation for long-running jobs.

Pix statement & receipts

Query sent and received Pix by date range, key type (CPF/email/phone/EVP), QR code, or counterparty bank. Each record is normalized into endToEndId, payer/payee, bank ISPB, value, status, and raw receipt blob for audit storage and tax reporting.

Card transaction feed

Stream authorizations, captures, refunds, and installment plans for Guaranteed / Platinum / Black cards. Includes cashback accrual (1.5% on all purchases), merchant MCC, currency for international purchases, and 3DS/contactless flags for fraud review.

CDB & wallet yield sync

Daily snapshots of CDB positions (daily liquidity at 107% CDI, 24-month at 120% CDI up to R$5,000), wallet balance yields (110% of CDI), FGC coverage flags, and maturity schedules. Ideal for PFM and wealth dashboards that aggregate Brazilian fixed-income products.

Bill, boleto & top-up history

Pull payment receipts for utility bills, telecom top-ups (Vivo, TIM, Claro, Claro Nxt, Correios, Surf), and transport recharges across São Paulo, Recife, Vitória, São Luís, Maceió, Salvador and Curitiba. Enables spend-categorization engines and loyalty back-offices.

Merchant PJ & Tap-to-Pay

For the PJ account line: 0.75% debit / 3.09% credit acceptance via Tap-to-Pay, installment collection, and settlement events. We expose the merchant POV so marketplaces and ERP tools can book sales, fees, and 110% CDI balance growth on settled funds.

1. Accounting & Receita Federal reporting

Context: SMBs and accountants that need to close books monthly. Data involved: Pix statement, card invoices, boleto payments, PJ sales. Mapping: we pull the full /statements feed, tag each row with LGPD-minimized fields, and emit SPED / e-Financeira-friendly CSV so bookkeepers feed ContaAzul or Omie without manual screenshots.

2. PFM aggregation alongside Nubank & Inter

Context: a personal finance app consolidating Brazilian accounts. Data involved: RecargaPay wallet balance, CDB positions, card transactions. Mapping: our adapter normalizes payloads into the Open Finance Brasil v2 resource model (accounts, credit-cards-accounts, investments/bank-fixed-incomes) so one pipeline serves multiple institutions.

3. Credit decisioning & affordability checks

Context: a lender evaluating a borrower who uses RecargaPay as primary account. Data involved: inflow/outflow Pix, recurring bill payments, BNPL "Parcelar Pix" history. Mapping: we compute 3/6/12-month income stability and debt-to-income indicators and expose them as scoring features, aligning with BCB credit-information sharing rules.

4. Merchant reconciliation for Tap-to-Pay sellers

Context: a franchise receiving payments on multiple RecargaPay PJ accounts. Data involved: sales events, 0.75%/3.09% fee deductions, daily 110% CDI accruals, settlement windows. Mapping: we emit a settlement ledger webhook matching Pix receipt endToEndId to each order in the POS, eliminating end-of-day blind spots.

5. Compliance audit & consent lifecycle

Context: a regulated institution that needs to justify every data pull. Data involved: consent IDs, scopes, expiry (max 365 days under Open Finance Brasil), and revocation events. Mapping: we persist consent records, emit ANPD-ready access logs, and support user-initiated portability or deletion requests under LGPD Article 18.

Deliverables checklist

• OpenAPI 3.1 specification for every RecargaPay resource we expose
• Protocol analysis report: auth chain, device binding, header signing, TLS pinning
• Runnable source in Python or Node.js with retry, pagination, and rate-limit backoff
• Pluggy-compatible connector adapter for Open Finance Brasil pipelines
• Integration tests, Postman collection, and synthetic CPF test harness
• LGPD + Open Finance Brasil compliance checklist and DPO-ready evidence pack

Auth & session bootstrap (pseudocode)

POST /api/v1/recargapay/auth/login
Content-Type: application/json

{
  "document": "12345678901",          // CPF or CNPJ
  "password": "<hashed-client-side>",
  "device_id": "9e7c-...-41ab",
  "mfa": { "channel": "sms", "code": "482913" }
}

// 200 OK
{
  "access_token": "eyJhbGciOi...",
  "refresh_token": "rt_9af2...",
  "expires_in": 1800,
  "scopes": ["pix.read", "cards.read", "investments.read"]
}

Pix statement query (pseudocode)

POST /api/v1/recargapay/pix/statement
Authorization: Bearer <ACCESS_TOKEN>
Content-Type: application/json

{
  "account_id": "acc_01HZ...",
  "from_date": "2026-03-01",
  "to_date":   "2026-03-31",
  "direction": "all",   // in | out | all
  "page": 1,
  "page_size": 200
}

// 200 OK — normalized Open Finance Brasil schema
{
  "data": [{
    "transaction_id": "pix_01HZ...",
    "end_to_end_id": "E184085752026031512001abcd12345",
    "type": "PIX_OUT",
    "amount": { "currency": "BRL", "value": 189.90 },
    "counterparty": { "name": "Fornecedor X", "ispb": "60746948", "key_type": "CNPJ" },
    "booking_date": "2026-03-15",
    "status": "SETTLED"
  }],
  "pagination": { "page": 1, "total_pages": 4 }
}

Webhook: card authorization event

POST https://your-backend.example.com/webhooks/recargapay
X-Signature: sha256=6d8b...
Content-Type: application/json

{
  "event": "card.authorization",
  "occurred_at": "2026-04-18T14:22:07Z",
  "card": { "product": "PLATINUM", "last4": "4217" },
  "merchant": { "name": "Uber BR", "mcc": "4121" },
  "amount": { "currency": "BRL", "value": 36.80 },
  "cashback_bps": 150,
  "installments": 1,
  "status": "APPROVED"
}

// Expected 2xx within 5s, else retry with exponential backoff.

About us

We are an independent studio focused on fintech and open-data API integration, working primarily with overseas clients who need Brazilian data surfaces without operating local infrastructure themselves. The team includes engineers with background in Latin American banks, payment gateways, mobile protocol analysis, and cloud platforms.

• Payments, digital banking, investments, lending, and cross-border clearing
• Open Finance Brasil connectors and certification pre-checks
• Custom Python / Node.js / Go SDKs, test harnesses, and Pluggy-compatible adapters
• Full pipeline: protocol analysis → build → validation → LGPD-ready documentation
• Source code delivery from $300 — runnable API source code plus full documentation; pay after delivery upon satisfaction
• Pay-per-call API billing — access our hosted RecargaPay-compatible endpoints and pay only per call, no upfront cost

Contact

For a quote, NDA, or to share RecargaPay-specific requirements (scopes, volumes, region), open our contact page. We respond on business days within 24 hours.

Open contact page

Tell us: target scopes (Pix, cards, CDB, PJ), expected QPS, preferred delivery (source code vs. hosted API), and any existing sandbox credentials.

Engagement workflow

1. Scope confirmation: which RecargaPay surfaces (Pix statement, card invoices, CDB, PJ sales) and what SLA.
2. Protocol analysis and API design — 2 to 5 business days depending on complexity.
3. Build and internal validation — 3 to 8 business days, including synthetic CPF harness.
4. Docs, Postman collection, and automated test cases — 1 to 2 business days.
5. Handover with compliance pack; typical first delivery is 5 to 15 business days.

FAQ

What do you need from me?

How long does delivery take?

How do you handle compliance?

Can you bill per call instead of per project?