Mastercard Open Finance (Finicity)

Drive the product through a documented public API G

Agent access

Connect an agent via an official MCP server G

Agent access

Plug MCP servers into this product so it can use their tools G

Agent access

Delegate tasks to a built-in AI assistant inside the product G

Agentic features

Download a machine-readable API spec (OpenAPI or equivalent) G

Api quality

Point an agent at llms.txt or agent-oriented docs G

Agent access

Subscribe to events via webhooks G

Agent access

Run the product headlessly / in CI for automation G

Agent access

Operate the product with natural-language commands G

Agentic features

Build against official SDKs G

Agent access

Explore an interactive API reference with runnable examples G

Api quality

Get AI-generated insights and suggestions from my data inside the product G

Agentic features

Issue scoped/least-privilege API credentials for an agent G

Agent access

Set up automations that run autonomously in the background G

Agentic features

Rely on versioned APIs with a documented deprecation policy G

Api quality

Use an official CLI G

Agent access

Test against a sandbox environment without touching production data G

Api quality

Fetch a real-time balance for a connected account before initiating a payment — a documented balance endpoint intended for NSF and risk checks C

Balances

A sandbox with test institutions and documented test credentials lets me exercise linking, data retrieval, and error states end-to-end before touching a real bank account C

Sandbox

An agent can operate the platform — create link sessions, retrieve balances and transactions, and manage connections through the API or an MCP surface with scoped credentials C

Agent operations

Obtain verified account and routing numbers (or tokenized equivalents) from a linked account to fund ACH or bank-debit payments without micro-deposits C

Ach details

Pull transaction history for a connected account through the API — paginated, with documented history depth and a sync pattern for fetching only what changed C

Transactions

Let a user connect their bank with a drop-in hosted flow — create a session server-side, open the widget, and get back a token for the connected account — without building institution UI myself C

Hosted flows

Define rules that trigger actions automatically on events G

Export all of my data in open formats and leave G

Prevent my data from being used to train AI models G

Self-host the core product G

The platform documents how many institutions it reaches and where — published coverage numbers and geographies I can check against where my users actually bank C

Coverage

Retrieve account-holder details — names, addresses, contact data on file at the bank — to match the account owner against my customer C

Ownership

Data changes arrive as signed webhooks — new transactions, balance updates, connection state changes — so my system stays current without polling C

Webhooks

Do everything through the API that I can do in the UI G

The data comes back agent-consumable — clean structured JSON, documented schemas, and enrichment an automated financial workflow can reason over without heuristic parsing C

Agent data

The platform derives income and cash-flow signals from connected accounts — recurring streams, payroll detection, or documented income verification products built on the same data C

Cashflow

Go from signup to my first linked sandbox account fast — self-serve API keys, a runnable quickstart, and client libraries in my language C

Quickstart

Linked accounts plug into my payment processor — documented integrations or token exchange that hand verified account credentials to third-party processors and platforms C

Processor tokens

I request only the data scopes I need — product-scoped consents and documented data-minimization controls, not an all-or-nothing grant C

Scopes

Raw bank transactions come back enriched — cleaned merchant names, categories, and logos — documented as a capability of the platform, not left as an exercise for me C

Enrichment

Broken connections are repairable — expired or revoked links surface as documented statuses, and users can re-authenticate in an update flow without starting over C

Repair

Connections to major institutions use bank-hosted OAuth rather than screen-scraped credentials — the platform documents its OAuth coverage and how legacy credential flows are being retired C

Oauth

Initiate a bank payment from a connected account — a documented pay-by-bank or payment-initiation product with its live geographies stated honestly C

Pay by bank

Trigger an on-demand refresh of a connected account's data through the API when my use case needs now-fresh data, with the refresh semantics documented C

Refresh

Choose where my data is stored (region/residency) G

Control data retention and deletion G

End users can see and revoke what they've shared — a documented consent surface or portal where a user manages which apps hold access to their bank data C

Consent

One link session can power multiple data products — auth, balances, transactions, identity — without forcing the user through separate connection flows per product C

Multi product

Opt out of telemetry and usage tracking G

Per-institution health is visible — documented institution statuses, outage or degradation signals, and error codes that distinguish a bank problem from my problem C

Status

Perform bulk operations across many items at once G

Read the product's source under an open license G

Recurring bank payments are supported — variable recurring payments, standing consents, or documented recurring debit flows built on the connection C

Recurring

Schedule recurring jobs or workflows G

Sever and clean up — a documented way to delete a connection or user and have the platform stop collecting and purge held data C

Deletion

Version, review, and roll back my automations G