Access SumUp (Malta) Data via Open Banking API

SumUp (Malta) powers card payments and merchant banking for businesses across Europe, and open-banking.io lets you reach that account data securely under PSD2. Whether you want a live view of settlements or a programmatic feed for reconciliation, open-banking.io links your SumUp business account (BIC SUMUIE22) without certificates, without storing your credentials, and without ever being able to read your data itself.

The service is zero-knowledge by design: your encryption keys are generated on your own device, and open-banking.io holds only your public key. Every figure that reaches you is decrypted locally, so the platform sees nothing but ciphertext.

How to connect SumUp

Connecting is done entirely in the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up at open-banking.io and set your encryption passphrase. Your private key is created locally at this moment and never leaves your device.
  2. In the dashboard, search for SumUp (Malta) and choose the business account type. SumUp supports business accounts on open banking.
  3. You are redirected to SumUp's own secure login, where you approve access on their consent screen. Your credentials stay with SumUp.
  4. Once approved, your accounts sync straight into your dashboard. The consent lasts up to 180 days, after which you simply re-approve on SumUp's screen.

That is the whole flow — pick the bank, approve on the bank's page, and your balances and transactions appear.

Access your data

Reading SumUp data programmatically is an optional step you take after connecting. Open the Developers page, create an API key, and export a credentials.json — this bundles the API key together with your private decryption key.

With that file in place, use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Requests authenticate with the X-Api-Key header, and each response is decrypted locally with your own key. The API key alone only ever returns ciphertext — without your private key, the data stays unreadable, which is exactly what keeps the model zero-knowledge.

All of this runs for around EUR 3/month.

Do I need a certificate or eIDAS setup?

No. open-banking.io is certificate-free — you only need an account and your passphrase.

Can open-banking.io see my SumUp balances?

No. Decryption happens on your device with a key only you hold; the servers store just your public key.

Does the CLI connect my SumUp account?

No. Connecting happens only in the dashboard. The CLI and SDK read and sync accounts you have already linked.

Start at https://open-banking.io.