Banco BPM API Access & Open Banking | open-banking.io

Banco BPM is Italy's third-largest banking group, and open-banking.io gives you a PSD2-compliant way to reach your Banco BPM accounts without the paperwork of building your own bank integration. There are no eIDAS certificates to buy, no regulatory sandbox to register for, and no servers that can read your data. open-banking.io is zero-knowledge: your bank data is decrypted locally with a key only you hold, so the platform only ever stores your public key and ciphertext.

Whether you run a business or a personal account, both are supported at Banco BPM (BIC BAPPIT22XXX), and a single access consent stays valid for up to 180 days before Banco BPM asks you to re-authorise.

How to connect Banco BPM

Connecting happens entirely inside the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up for open-banking.io and set your encryption passphrase. Your encryption keys are generated on your own device, so nobody else can unlock what you sync.
  2. In the dashboard, pick Banco BPM from the bank list and choose the account type you want to link — business or personal.
  3. You are redirected to Banco BPM's own secure login, where you approve the access request on the bank's PSD2 consent screen.
  4. Once Banco BPM confirms, your accounts and balances sync straight into your open-banking.io dashboard.

That's the whole flow. You never hand your credentials to open-banking.io — the approval always takes place on Banco BPM's side.

Access your data

After your Banco BPM connection is live, developers can optionally read it programmatically. From the Developers page, create an API key and export a credentials.json — this bundles the API key together with your private decryption key. From there use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API directly.

Every request authenticates with the X-Api-Key header, and each response is decrypted locally with your own key. An API key on its own only ever returns ciphertext — without your private key, the data stays unreadable, which is what keeps the whole pipeline zero-knowledge. Note the tooling only reads and syncs connections you've already approved; there is no connect command.

All of this runs on the standard ~EUR 3/month subscription, with 2,600+ banks covered across the EU and UK.

Does open-banking.io ever see my Banco BPM data?

No. It holds only your public key and encrypted blobs. Decryption happens on your device with a key only you control.

Do I need an eIDAS certificate for Banco BPM?

No. open-banking.io is certificate-free — you approve access on Banco BPM's consent screen and skip the regulatory onboarding entirely.

Up to 180 days per approval, after which Banco BPM prompts you to re-authorise the connection.

Ready to link your accounts? Start at open-banking.io.