SumUp API Access via Open Banking | open-banking.io

Merchants running on SumUp hold a live stream of settlement and payout data, but pulling it into your own tools usually means wrestling with PSD2 certificates and bespoke integrations. open-banking.io removes that friction. It gives you a single, certificate-free way to reach your SumUp business account (BIC SUMUIE22) and read balances and transactions on your own terms — without ever handing your raw data to a third party.

Because open-banking.io is zero-knowledge, the service only ever holds your public key. Your account data is encrypted before it leaves and is decrypted locally, on your device, with a private key that only you possess. SumUp offers business accounts here, and a consent you approve stays valid for up to 180 days before a quick renewal.

How to connect SumUp

Connecting happens entirely in the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up for open-banking.io and set your encryption passphrase. Your key pair is generated right there on your own device.
  2. In the dashboard, choose SumUp from the supported institutions and select the business account type.
  3. You are redirected to SumUp's own secure login, where you approve access under PSD2 on the bank's consent screen.
  4. Once approved, your SumUp accounts sync straight into your dashboard, ready to view.

That's the whole flow: your credentials only ever touch SumUp's own pages, never open-banking.io.

Access your data

After a connection exists, developers can optionally read it programmatically. On the Developers page, create an API key and export a credentials.json — this bundles the API key together with your private decryption key. From there you can use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API directly.

Requests authenticate with the X-Api-Key header, and every response is decrypted locally with your own key. An API key on its own only ever returns ciphertext — without your private key, the data stays unreadable, which is exactly what zero-knowledge means in practice. Note the CLI and SDK only read and sync existing connections; the initial link is always made in the dashboard.

All of this runs for around EUR 3/month.

FAQ

Does open-banking.io need an eIDAS certificate to reach SumUp?

No. The service is certificate-free, so you skip the usual PSD2 onboarding entirely.

Can open-banking.io read my SumUp transactions?

No. It stores only your public key; decryption happens on your device with a private key you alone hold.

How long does SumUp access last before renewal?

Up to 180 days per consent, after which you re-approve on SumUp's screen.

Start at open-banking.io.