SumUp API Access via Open Banking | open-banking.io

SumUp powers card payments for millions of small merchants across Europe, and its Estonian banking arm (BIC SUMUIE22) holds the settlement accounts where that money lands. If you want programmatic sight of those balances and payouts, open-banking.io gives you PSD2 access to SumUp without EIDAS certificates, sandbox paperwork, or a bank-by-bank integration. You approve access once, and your SumUp data flows into a dashboard that only you can decrypt.

The service reaches 2,600+ EU and UK institutions. Your encryption keys are generated on your own device, so open-banking.io stores only your public key and can never read the account data it relays — genuinely zero-knowledge.

How to connect SumUp

Connecting happens entirely in the open-banking.io dashboard — there is no API call, key, or code involved in this step:

  1. Sign up for open-banking.io and set an encryption passphrase. Your private key is created locally and never leaves your device.
  2. In the dashboard, search for SumUp and choose the business account type (SumUp offers business accounts only).
  3. You are redirected to SumUp's own secure login to approve the connection under PSD2 — you authenticate directly with SumUp, never sharing credentials with us.
  4. Once approved, your SumUp accounts sync into your dashboard. The consent stays valid for up to 180 days, after which you simply re-approve on SumUp's screen.

Access your data

Reading the data programmatically is an optional developer step you take after the connection exists. On the Developers page, create an API key and export a credentials.json — this bundles the API key together with your private decryption key. From there:

  • CLI: openbanking accounts, openbanking transactions, openbanking sync
  • SDK or the REST API for your own tooling

Every request carries the X-Api-Key header, and each response is decrypted locally with your own key. The CLI and SDK only read and sync connections that already exist — they never create one. An API key on its own returns ciphertext; without your private key it is unreadable, even to us.

All of this runs for roughly EUR 3/month.

Does SumUp support personal accounts here?

No — SumUp is a merchant platform, so only business accounts are available for connection.

Can open-banking.io see my SumUp transactions?

No. Data is encrypted with a key held only by you and decrypted on your device. Our servers hold just your public key.

How often do I re-authorise?

SumUp consent lasts up to 180 days. When it lapses, reconnect through SumUp's own login in the dashboard.

Start at open-banking.io.