Finicity API
Finicity, now Mastercard Open Banking, exposes a full REST API documented on the Mastercard developer portal: accounts, transactions, verification reports, and TxPush webhooks. Sandbox access is self-serve after signup; production requires a Mastercard contract.
Frequently asked questions
Finicity scores A+ on the API Report Card. Finicity, now Mastercard Open Banking, exposes a full REST API documented on the Mastercard developer portal: accounts, transactions, verification reports, and TxPush webhooks. Sandbox access is self-serve after signup; production requires a Mastercard contract.
Finicity has a workable official integration path. Most engineering teams can build against it directly. Open API: self-serve, documented, with SDKs
Finicity is a Salt Lake City-area open banking and financial data aggregation platform founded in 1999 by Steve Smith and Nick Thomas (originally as Mortgagebot/IT-related products, pivoting to financial data aggregation as Finicity in 2000s).
Vertical: Financial Services (open banking / data aggregation / verification infrastructure). Instant Account Verification (IAV) for ACH origination and account funding (Finicity Pay). Account ownership verification (AOV) and account details verification for NACHA Web-debit / WEB rule compliance.
Very high in US financial services infrastructure. Finicity is consistently named as a top-3 US data aggregator alongside Plaid and Envestnet Yodlee, with MX as the fourth major player.
End-user (consumer / SMB) consumer-permissioned FI credentials and OAuth tokens. Connected accounts: account numbers (masked), routing numbers (verified), account type, currency, owner name and address. Real-time and historical balances (current, available, ledger).
Finicity Corporation was founded in 1999 (~27 years old as of 2026) and has been operating its modern aggregation platform since the mid-2000s.
Grades measure one thing: can a customer's engineering team get their own data out programmatically? We check six things (whether a real API exists, how access is gated, data coverage, auth quality, docs and developer experience, and stability) and roll them into a letter grade. Grades get re-verified, and they only move on evidence.