Consumer API is specifically designed to protect the security of the user and protect the user experience.
As such, these are some restrictions to keep in mind as you build your app.
Permissions and Scope Enforcement
Consumer API protects access to user data via OAuth / OpenID Connect
The OAuth / OpenID Connect
scope required for a specific
Consumer API endpoint can be found in the endpoint’s definition in the API Reference.
See the Authentication topic for more details.
Consumer API data permissions are granted based on granular request
claims, which provide limited access to specific data on a per user basis.
See the Permissions Flow topic for more details.
Modifying Data on the Financial Core
Consumer API works with data from 4 major financial cores:
Consumer API does modify data on the core as part of its operations, it is not intended to be used as a generic ‘pass-through’ for modifying data on the core.
If you need such a solution, we recommend looking into integrating with jXchange.