VST BANK JSC provides authorised third-party payment service providers (Third Party Providers) with access to dedicated Open API interfaces in accordance with the Law of Ukraine 'On Payment Services', regulations of the National Bank of Ukraine and the Berlin Group NextGenPSD2 standard
This page provides API technical documentation, Sandbox environment parameters, descriptions of integration scenarios and technical support contact details
Technical documentation
The full API specification and descriptions of methods, parameters, request models and response models are available in Swagger UI
Dedicated interfaces
Consent Management
The service is intended for creating and authorising user consents to account access, checking their status and revoking them
Available operations
| Method | Endpoint | Purpose |
|---|---|---|
| POST | /v2/consents/account-access | Create consent |
| PUT | /v2/consents/account-access/{consentId} | Authorise consent |
| GET | /v2/consents/account-access/{consentId}/status | Check status |
| DELETE | /v2/consents/account-access/{consentId} | Revoke consent |
Consent management features
- user authorisation is performed using the Redirect flow;
- a PSU consent granted to one TPP may cover multiple accounts;
- a consent for the same PSU account granted to one TPP is unique;
- a one-time consent supersedes the recurring consent for the relevant account/user;
- a recurring consent supersedes the previous recurring consent for the relevant account/user.
Supported PSU identifier types:
- telephone number;
- IBAN;
- taxpayer identification number (TIN).
Account Information Service (AISP)
The service provides access to information on a customer's accounts after obtaining the customer's consent
Available operations
| Method | Endpoint | Purpose |
|---|---|---|
| GET | /v2/accounts | Retrieve account list |
| GET | /v2/accounts/{accountId}/balances | Retrieve balances |
| GET | /v2/accounts/{accountId}/transactions | Retrieve transaction history |
Payment Initiation Service (PISP)
The service enables payment transactions to be initiated after the user has been authenticated
Available operations
| Method | Endpoint | Purpose |
|---|---|---|
| POST | /v2/payments/{payment-product} | Create payment instruction |
| POST | /v2/payments/{product-type}/{paymentId}/authorisations | Authorise payment |
| GET | /v2/payments/{product-type}/{paymentId}/status | Check status |
Sandbox
General parameters
| Parameter | Value |
|---|---|
| URL | https://openbanking.test.vstbank.ua/ |
| Consent management approach | Redirect |
| SCA | Supported |
Sandbox test credentials
| Parameter | Value |
|---|---|
| Username | +380990001015 |
| Password | Qwer1234 |
| OTP | 111111 |
Authorisation is performed through the Bank's web interface. The mobile application is not used in the test environment
Test accounts
| Currency | IBAN |
|---|---|
| UAH | UA813071230000026201995516524 |
| USD | UA363071230000026200995516592 |
| EUR | UA363071230000026205995516616 |
Testing programme
Testing of the dedicated interfaces is performed in the Sandbox environment and covers:
- creating and authorising consents, checking their status and revoking them;
- obtaining account, balance and transaction history information;
- initiating and authorising payment transactions and checking their status.
Detailed descriptions of the testing scenarios, request parameters and response models are available in Swagger UI