SumUp API Access via Open Banking | open-banking.io

Running your business on SumUp and need programmatic reach into your account? open-banking.io gives you a clean, PSD2-compliant path to your SumUp (Greece) data without wrestling with eIDAS certificates or bank-specific integrations. SumUp accounts here are business accounts (BIC SUMUIE22), and once linked they stream straight into your dashboard, ready to read whenever you need them.

The whole thing is zero-knowledge: your encryption keys are generated on your own device, and open-banking.io only ever holds your public key. Every figure you pull is decrypted locally, so the service literally cannot see your balances or transactions. No certificate hoops, no per-bank onboarding — just ~EUR 3/month for access to 2,600+ EU/UK banks.

How to connect SumUp

Connecting happens entirely in the open-banking.io dashboard — there is no API call or key involved in this step.

  1. Sign up for open-banking.io and set your encryption passphrase. Your keys are created right there on your device.
  2. In the dashboard, choose SumUp and select the business account type.
  3. You're redirected to SumUp's own secure login to approve access under PSD2. You authorise directly with the bank — open-banking.io never sees your credentials.
  4. Your SumUp accounts sync back into the dashboard. Consent stays valid for up to 180 days, after which you simply re-approve.

Access your data

Want the data in code? That's an optional step you take after connecting. On the Developers page, create an API key and export a credentials.json — it bundles the API key together with your private decryption key.

From there, use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Requests authenticate with the X-Api-Key header, and every response is decrypted locally with your own key. Without that private key an API key alone returns only ciphertext — which is exactly the point of a zero-knowledge design. Note the CLI and SDK only read and sync connections you've already made in the dashboard; they don't establish new ones.

Do I need an eIDAS certificate?

No. open-banking.io is certificate-free — you never touch a QWAC or QSEAL.

Can open-banking.io read my SumUp transactions?

No. It holds only your public key; decryption happens on your device with a key only you have.

SumUp consent lasts up to 180 days. When it lapses, reconnect from the dashboard and re-approve on SumUp's login screen.

Ready to link your SumUp account? Start at open-banking.io.