HSBC Netherlands API Access & Open Banking Data

Reaching HSBC business account data in the Netherlands usually means wrestling with eIDAS certificates, sandbox registrations and PSD2 developer portals. open-banking.io removes that friction: it is a certificate-free bridge to 2,600+ EU and UK banks where your financial data is decrypted on your own device with a key nobody else — not even open-banking.io — ever holds. HSBC (BIC HBUKGB4BXXX) is supported for business accounts, with consent that stays valid for up to 180 days before you re-approve.

How to connect HSBC

Connecting happens entirely inside the open-banking.io dashboard — there is no API call, code snippet or key involved in this step.

  1. Sign up and set an encryption passphrase. Your key pair is generated locally in your browser, so only your public key leaves the device.
  2. In the dashboard, choose HSBC (Netherlands) and select the business account type you want to link.
  3. You are redirected to HSBC's own secure login, where you approve access under PSD2 — your credentials go only to HSBC.
  4. Consent granted, your accounts and transactions sync back into your dashboard automatically.

Because the approval takes place on HSBC's own consent screen, open-banking.io never sees your banking password.

Access your data

Reading the data programmatically is an optional step you take after the connection exists. On the Developers page, create an API key and export a credentials.json — it bundles that API key together with your private decryption key. From there use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API directly. Every request carries the X-Api-Key header, and every response is decrypted locally with your own key. The API key alone only ever returns ciphertext — without your private key it stays unreadable, which is what makes the whole system zero-knowledge.

All of this runs for roughly EUR 3/month.

Can I connect HSBC using only the CLI or an API call?

No. The CLI, SDK and API only read or sync connections that already exist. The initial link is always made in the dashboard against HSBC's consent screen.

Business accounts are supported. Consent lasts up to 180 days, after which you re-authorise from the dashboard.

Can open-banking.io staff see my HSBC transactions?

No. Servers hold only your public key, so stored data is encrypted end to end and can be decrypted solely on your device.

Ready to start? Visit open-banking.io.