BBVA Italy API Access & Open Banking Integration

BBVA runs a mobile-first digital bank in Italy, and its accounts fall squarely under PSD2 — which means you can grant a licensed third party read access to your own balances and transactions. open-banking.io turns that right into something usable: a single dashboard that keeps BBVA Italy in sync and, if you write code, an API to pull the data on your terms. It covers both business and personal BBVA accounts (BIC BBVAITMMXXX), with no eIDAS certificate, no bank-specific paperwork, and no servers that can read your money for you.

The privacy model is the whole point. When you sign up, your encryption keys are generated on your own device from a passphrase you choose. Everything open-banking.io stores is sealed against your public key, so the service is genuinely zero-knowledge — it never holds anything it could decrypt. Your BBVA data becomes readable only on a device that carries your private key.

How to connect BBVA

  1. Create an open-banking.io account and set your encryption passphrase — this generates your key pair locally.
  2. Open the dashboard and choose BBVA (Italy), then pick the account type you want to link (business or personal).
  3. You're redirected to BBVA's own secure login, where you approve the request directly on the bank's PSD2 consent screen. Your credentials stay with BBVA.
  4. Once approved, your accounts sync back into the dashboard automatically.

No API call, code, or key is involved in connecting — the whole handshake happens in the web app and on BBVA's side. Consent lasts up to 180 days, after which you simply re-approve to keep the sync alive.

Access your data

Reading BBVA data programmatically is an optional step after the connection exists. On the Developers page, generate an API key and export a credentials.json — it bundles that key with your private decryption key. From there use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Requests authenticate with the X-Api-Key header, and every response is decrypted locally with your own key. The API key alone only ever returns ciphertext; without your private key there's nothing readable to leak.

All of this runs for around EUR 3/month.

Does connecting BBVA need an API key?

No. Linking happens entirely in the dashboard via BBVA's own consent screen. API keys only matter later, if you want programmatic reads.

Can open-banking.io see my BBVA balances?

No. It stores only your public key and encrypted blobs; decryption happens on your device with a key only you hold.

How long does BBVA access last?

Up to 180 days per consent. Re-approve on BBVA's login to renew.

Start at open-banking.io.