Commercial Banking APIs

The Commercial Banking Portal Landscape

Treasury and cash management for the largest businesses in the world runs through a handful of proprietary bank-operated portals: J.P. Morgan Access, Bank of America's CashPro, Wells Fargo Vantage (the platform replacing the legacy CEO portal), Citi's CitiDirect, HSBCnet, U.S. Bank SinglePoint, PNC PINACLE, BNY's NEXEN, KeyBank's KeyNavigator, Capital One Intellix, Truist One View, Santander Treasury Link, TD eTreasury, Comerica Business Connect, Citizens accessOPTIMA, and Fifth Third Direct — alongside global rails like Deutsche Bank Autobahn, Barclays iPortal, RBC Express, and Standard Chartered Straight2Bank.

These platforms hold every meaningful piece of operational financial data a corporate treasury team relies on: real-time and intraday balances, multi-currency positions, wire and ACH origination, lockbox files, positive pay exception management, BAI2 / MT940 / CAMT.053 statement downloads, and FX execution. For mid-market and enterprise companies, they are the operational backbone of moving money.

The problem? Getting that data out programmatically is rarely straightforward.

The Commercial Banking API Challenge

Unlike consumer-bank aggregators like Plaid, MX, or Yodlee — which focus on retail checking and savings — commercial treasury portals were built for human treasurers logging in through a browser. Programmatic access is an afterthought:

• No public APIs: Most major bank treasury portals don't expose a public REST or GraphQL API. Where APIs exist, they're partner-only — gated by signed enterprise agreements, minimum balance thresholds, or ERP integration certifications.
• Partnership gates and fees: Even when documented channels exist (host-to-host SFTP, BAI2 file delivery, ISO 20022), enabling them typically requires implementation fees, monthly platform fees, and weeks of legal and ops paperwork before a single test transaction runs.
• Legacy data formats: When data is available, it usually arrives as BAI2, BAI, MT940, MT942, or CAMT.053 — formats older than most engineering teams. Parsing, normalizing, and reconciling them across banks consumes ongoing engineering bandwidth.
• Mobile-only and dashboard-only data: Several portals expose richer data — real-time wire status, positive pay queues, intraday cash sweeps, FX trade tickets — only inside their authenticated web UI or mobile app, with no parallel API surface.
• Enterprise authentication layers: Hard-token OTPs, soft tokens, IP allowlists, dual-control authorizations, and short session timeouts make scripted access intentionally difficult — even when an authorized treasury operator wants to automate.

These constraints aren't any single bank's fault — they're structural to commercial banking software. The result is the gap that has always existed in this category: enormous amounts of operational financial data that exist inside the bank's systems, but that a corporate finance or treasury team can't use without a human in the loop.

Where Plaid Stops, Supergood Picks Up

Plaid is excellent at aggregating consumer and small-business checking accounts across thousands of retail bank brands. What it isn't designed for is the commercial banking surface: multi-account treasury hierarchies, ACH origination with SEC codes, wire initiation with dual control, BAI2 statement parity, lockbox and remittance data, positive pay exception management, and FX. Those workflows live behind the proprietary corporate banking portals listed above — and they're where Supergood operates.

Supergood builds and maintains production-grade REST APIs against those portals directly. Our system handles enterprise authentication including hard-token OTPs, dual-control approvals, and active session management with automatic token refresh — and normalizes BAI2 / MT940 / CAMT.053 statement data into a consistent JSON shape so your integration code works the same across every bank you operate with.

We support integrations across the commercial banking ecosystem, working with the bank portals where your treasury data actually lives.

Common Endpoint Categories

The specific endpoints available depend on the bank portal being integrated. Below are the categories of data and operations Supergood typically supports:

Authentication & Session Management

Secure authentication including hard-token OTPs, soft tokens, SMS challenges, dual-control approvals, and IP-restricted sessions. Supergood manages credentials through both managed service accounts and customer-supplied treasury operator credentials.

Cash Position & Reporting

• Multi-bank, multi-account real-time and intraday balances
• Previous-day reconciled balances with BAI2-equivalent detail
• Account hierarchies, sub-account roll-ups, and multi-currency positions
• Statement retrieval (PDF, BAI2, MT940, CAMT.053) normalized into consistent JSON

Payments & Disbursements

• Domestic and international wire initiation with dual-control approval flows
• ACH origination with SEC codes (CCD, PPD, CTX, WEB) and same-day support where available
• Wire and ACH status tracking, including OFAC and beneficiary verification rejections
• Book transfers between affiliated accounts at the same bank

Reconciliation, Positive Pay, and Operations

• Transaction history with consistent typing across debits, credits, ACH, wires, lockbox, and fees
• Positive pay exception items, decisions, and issued-check uploads
• Lockbox file retrieval and remittance detail
• FX rate tickets and trade confirmations on supported platforms

Example: Authentication

curl -X POST https://api.supergood.ai/integrations/89e4dffe-4624-4ce9-bcf2-4e8686d157be/auth \
  -H "Content-Type: application/json" \
  -d '{ "bank": "jpm_access", "company_id": "YOUR_CORP_ID", "operator_id": "jdoe", "password": "your_password" }'

{
  "authToken": "abcdefg..."
}

Supergood automatically handles MFA challenges including hard-token OTPs, soft tokens, SMS, authenticator apps, and dual-control approval flows.

Example: Pulling Multi-Bank Balances

curl -X GET https://api.supergood.ai/integrations/89e4dffe-4624-4ce9-bcf2-4e8686d157be/sync \
  -H "Authorization: Bearer sg_live_abc123..."

{
  "as_of": "2026-05-13T14:30:00Z",
  "accounts": [
    {
      "bank": "jpm_access",
      "account_id": "123456789",
      "currency": "USD",
      "ledger_balance": 1284500,
      "available_balance": 1271200,
      "type": "operating"
    },
    {
      "bank": "cashpro",
      "account_id": "987654321",
      "currency": "USD",
      "ledger_balance": 542300,
      "available_balance": 542300,
      "type": "concentration"
    },
    {
      "bank": "citidirect",
      "account_id": "5544332211",
      "currency": "EUR",
      "ledger_balance": 412500,
      "available_balance": 412500,
      "type": "operating"
    }
  ]
}

Example: Initiating a Wire Transfer

curl -X POST https://api.supergood.ai/integrations/89e4dffe-4624-4ce9-bcf2-4e8686d157be/sync \
  -H "Authorization: Bearer ..." \
  -H "Content-Type: application/json" \
  -d '{ "action": "wire_initiate", "from_account": "123456789", "beneficiary_name": "Vendor LLC", "beneficiary_account": "00112233", "beneficiary_routing": "021000089", "amount": 25000.00, "currency": "USD", "reference": "INV-44918", "requires_approval": true }'

{
  "status": "pending_approval",
  "wire_id": "wire_8842",
  "approval_required_by": "2026-05-13T18:00:00Z"
}

Dual-control approvals route to the configured second approver inside the bank portal.

Example: Pulling Transaction Activity

curl -X GET 'https://api.supergood.ai/integrations/89e4dffe-4624-4ce9-bcf2-4e8686d157be/sync?account_id=123456789&since=2026-05-01' \
  -H "Authorization: Bearer ..."

{
  "account_id": "123456789",
  "transactions": [
    {
      "id": "txn_29301",
      "posted_at": "2026-05-12T16:20:00Z",
      "amount": -25000,
      "type": "wire_outbound",
      "counterparty": "Vendor LLC",
      "reference": "INV-44918"
    },
    {
      "id": "txn_29302",
      "posted_at": "2026-05-12T18:45:00Z",
      "amount": 142300,
      "type": "ach_credit",
      "counterparty": "Customer Corp",
      "reference": "REMIT-2238"
    }
  ]
}

Request and response shapes are consistent across portals. Supergood normalizes the underlying BAI2, MT940, and CAMT.053 streams so your integration code works the same whether you're pulling from CashPro, PINACLE, KeyNavigator, or HSBCnet.

Use Commercial Banking APIs with AI agents: Commercial Banking APIs MCP Server →

Getting Started

1. Schedule Integration Assessment

Book a 30-minute call to review the bank portals your treasury team operates with, the workflows you need to automate, and your dual-control and approval requirements. We'll assess integration feasibility for your specific portal mix.

2. Supergood Generates and Validates Your API

We'll create a production-ready API tailored to your bank portals, providing comprehensive access to balances, transactions, payments, reconciliation, and statement data.

3. Deploy with Monitoring

Launch to production with built-in monitoring and automatic adaptation to portal changes — including UI refreshes, MFA flow updates, and data format revisions.