Online verify an issued consent token and record each purpose/field/account access decision
/open-banking/access-checksOriginal third_party token required. Verifies exact retained issuance, active bank binding, current enabled provider revision and credential generation, consent expiry/revocation, purpose/fields/account and transaction date bounds, and appends an immutable allow/refusal. allowed false carries no consent data. Identity permission alone does not satisfy current customer privacy permission.
Headers
Idempotency-KeystringOptionalSend on every write that creates or changes money or state; a replay with the same key returns the original result with 200.
Body parameters
account_idstringOptionalExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
fieldsarray of stringsRequiredfromstring · date-time or nullOptionalpurposestringRequiredthroughstring · date-time or nullOptionalReturns
200 OK
access_idstringRequiredallowedbooleanRequiredconsentobjectRequired11 child attributes
created_atstring · date-timeRequiredcustomer_idstringRequiredExample cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm
grantobjectRequired8 child attributes
disclosurestringRequireddisclosure_sha256stringRequiredfieldsarray of stringsRequiredhistory_daysintegerRequiredmax_consent_daysintegerRequiredprivacy_policy_idstringRequiredprivacy_rule_idstringRequiredpurposestringRequiredidstringRequiredprovider_namestringRequiredprovider_subjectstringRequiredrequestobjectRequired8 child attributes
account_idsarray of stringsRequiredconfirmedbooleanRequireddisclosure_sha256stringRequiredexpires_atstring · date-timeRequiredfieldsarray of stringsRequiredprovider_idstringRequiredprovider_versionintegerRequiredpurposestringRequiredrevoked_atstring · date-time or nullOptionalsession_idstringRequiredExample sess_2tVh8nqLxq4GbDe0K1F6S9zRcWm
user_idstringRequiredExample user_2tVh8nqLxq4GbDe0K1F6S9zRcWm
versionintegerRequiredreasonstringRequiredErrors
Every error is a problem document with a stable code. See Errors.
400401403404409412413422424429500503