BBVA API Access & Open Banking (Spain)

Reaching your BBVA data used to mean chasing PSD2 certificates, sandbox registrations and OAuth scopes. open-banking.io removes all of that. It links your BBVA (Spain) accounts — both business and personal — into one dashboard, then hands developers a clean, optional way to pull that data programmatically. BBVA operates under BIC BBVAESMMXXX, and a single access approval stays valid for up to 180 days before you renew it.

Everything is zero-knowledge and certificate-free. Your encryption keys are generated on your own device from a passphrase only you know, so account and transaction data is decrypted locally — open-banking.io's servers store only your public key and never see readable numbers.

How to connect BBVA

Connecting happens entirely in the open-banking.io dashboard — there is no API call, code snippet or key involved in this step:

  1. Sign up for open-banking.io and choose an encryption passphrase. Your private key is created locally at this moment and never leaves your device.
  2. In the dashboard, search for BBVA and select whether you're linking a business or personal account.
  3. You're redirected to BBVA's own secure login, where you approve access on the bank's official PSD2 consent screen.
  4. Once BBVA confirms, your accounts sync back into the dashboard and stay in view for the 180-day consent window.

No developer redirects the account holder anywhere — you approve access yourself, directly with BBVA.

Access your data

Once BBVA is connected, reading it programmatically is an optional developer step. Open the Developers page, create an API key and export a credentials.json — it bundles that API key together with your private decryption key. From there:

  • Use the CLI: openbanking accounts, openbanking transactions, openbanking sync.
  • Or call the REST API / SDK directly.

Every request authenticates with the X-Api-Key header, and each response is decrypted locally with your own key. The CLI and SDK only read and sync connections you've already made — they never establish a new one. An API key on its own returns nothing but ciphertext without your private key.

All of this runs for roughly EUR 3/month.

FAQ

Do I need a PSD2 certificate to access BBVA?

No. open-banking.io is certificate-free. You approve access on BBVA's consent screen and skip the entire eIDAS certificate process.

Can open-banking.io read my BBVA transactions?

No. The service is zero-knowledge and holds only your public key. Data is decrypted on your device with a key only you control.

How long does BBVA access last?

Up to 180 days per approval. When the window closes, simply re-approve in the dashboard to keep syncing.

Ready to start? Visit open-banking.io.