HypoVereinsbank API Access & Open Banking Data

HypoVereinsbank (UniCredit Bank GmbH) is one of Germany's largest banks, and open-banking.io gives you a clean, standardised way to reach your account data without wrestling with eIDAS certificates or a PSD2 developer programme. Whether you bank as a private customer or run a company, you can pull balances and transactions into one place and — if you write code — read them programmatically.

open-banking.io covers 2,600+ banks across the EU and UK. It is certificate-free and zero-knowledge: your data is decrypted on your own device with a key only you hold, so our servers never see it in the clear.

How to connect HypoVereinsbank

Connecting happens entirely in the open-banking.io dashboard — there is no API call, code, or key involved in this step:

  1. Sign up for an open-banking.io account.
  2. Set an encryption passphrase. Your keys are generated locally on your device; the passphrase never leaves it.
  3. Pick HypoVereinsbank in the dashboard and choose your account type — both business and personal accounts are supported (BIC HYVEDEMMXXX).
  4. Approve on HypoVereinsbank's own login. You are redirected to the bank's secure PSD2 consent screen to authorise access — you authenticate directly with HypoVereinsbank, never with us.
  5. Your accounts sync back into the dashboard. Each consent lasts up to 180 days, after which you simply re-approve.

Access your data

Reading data in code is an optional developer step you take after the connection exists. On the Developers page, create an API key and export a credentials.json — it bundles the API key with your private decryption key. From there use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Requests send the X-Api-Key header, and every response is decrypted locally with your own key. An API key alone only ever returns ciphertext — without your private key it stays unreadable, which is what zero-knowledge really means. Note there is no connect command: the CLI and SDK only read and sync connections you already made in the dashboard.

All of this runs on a simple subscription of roughly EUR 3/month.

Do I need an eIDAS certificate or developer account?

No. open-banking.io is certificate-free — the dashboard connection and bank consent handle everything.

Can open-banking.io read my HypoVereinsbank data?

No. We hold only your public key. Data is decrypted on your device, so we cannot see it.

How long does access last before I re-authorise?

HypoVereinsbank consent runs for up to 180 days, then you re-approve on the bank's login screen.

Ready to start? Visit open-banking.io.