SumUp Open Banking & API Access via open-banking.io

Merchants and finance teams running money through SumUp often need a clean, programmatic view of settlements and balances. open-banking.io gives you exactly that: a certificate-free way to reach your SumUp (Latvia) account under PSD2, with every byte of data decrypted on your own machine using a key only you hold. There is no bank certificate to buy, no eIDAS onboarding, and no server that can read your statements.

SumUp is a business-account provider (BIC SUMUIE22), so open-banking.io treats it as a business connection. A single PSD2 consent stays valid for up to 180 days before SumUp asks you to re-approve, so you can keep syncing for months without babysitting the link.

How to connect SumUp

Connecting happens entirely inside the open-banking.io dashboard — never through an API, key, or line of code.

  1. Sign up for open-banking.io and set your encryption passphrase. Your key pair is generated locally on your device; only your public key ever leaves it.
  2. In the dashboard, pick SumUp from the bank list and choose the business account type.
  3. You are redirected to SumUp's own secure login, where you approve open-banking access on their consent screen.
  4. Control returns to your dashboard and your SumUp accounts and transactions begin syncing automatically.

That is the whole flow. open-banking.io stores only ciphertext plus your public key, so even its own servers cannot see your figures.

Access your data

Once SumUp is connected, reading it programmatically is an optional developer step. On the Developers page, create an API key and download a credentials.json — this bundles the API key together with your private decryption key. From there you can run the CLI (openbanking accounts, openbanking transactions, openbanking sync) or call the SDK / REST API. Every request carries the X-Api-Key header, and each response is decrypted locally with your private key. Without that key an API key alone returns only ciphertext — the zero-knowledge guarantee holds end to end. Note the CLI and SDK only read and sync existing connections; the SumUp link itself is always made in the dashboard.

All of this runs for around EUR 3/month.

Do I need a bank certificate for SumUp?

No. open-banking.io is certificate-free — the dashboard consent flow is all you need.

Can open-banking.io see my SumUp transactions?

No. Data is decrypted on your device with a key only you hold; the service stores ciphertext and your public key.

How long does the SumUp connection last?

Up to 180 days per consent, after which you re-approve on SumUp's login screen.

Start at open-banking.io.