iBanFirst API access & open banking in Bulgaria

Reaching your iBanFirst account data used to mean juggling PSD2 certificates and per-bank integrations. open-banking.io removes that friction: it links iBanFirst (BIC FXBBBEBBXXX) to a single dashboard, then lets you read the data programmatically only if and when you want to. Both business and personal iBanFirst accounts are supported, and a single approval keeps data flowing for up to 180 days before you re-confirm.

What makes it different is the trust model. open-banking.io is zero-knowledge: your encryption keys are generated on your own device from a passphrase you choose, and the service only ever holds your public key. It never sees your credentials, and it cannot read your account data. There are no eIDAS certificates to buy and no bank-by-bank paperwork to file.

How to connect iBanFirst

Connecting happens entirely inside the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up for open-banking.io and set your encryption passphrase. Your private key is derived locally and never leaves your device.
  2. In the dashboard, search for iBanFirst and choose the account type you hold (business or personal).
  3. You are redirected to iBanFirst's own secure login, where you approve access under PSD2 — you authenticate directly with the bank, never through us.
  4. Once you confirm, your iBanFirst accounts sync into the dashboard, and balances and transactions appear ready to use.

That consent stays valid for up to 180 days, after which iBanFirst prompts you to renew.

Access your data

Once iBanFirst is connected, developers can optionally read the data in code. On the Developers page, create an API key and export a credentials.json — this bundles your API key together with your private decryption key. From there, use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API directly. Every request carries the X-Api-Key header, and each response is decrypted locally with your own key. An API key on its own only ever returns ciphertext — without your private key, nobody, including our servers, can read it.

All of this runs for around EUR 3/month.

Does open-banking.io store my iBanFirst password?

No. You log in on iBanFirst's own consent screen, so your credentials are never shared with us.

Can I use both business and personal iBanFirst accounts?

Yes. iBanFirst supports both account types, and each is connected the same way in the dashboard.

Do I need a PSD2 certificate?

No. open-banking.io is certificate-free — connect iBanFirst without any eIDAS setup.

Start at open-banking.io.