SumUp API Access & Open Banking — open-banking.io

Merchants running a SumUp business account in Norway often need their settlement balances and transaction history somewhere other than the SumUp app — a bookkeeping tool, a reconciliation script, or an internal dashboard. open-banking.io gives you that reach without certificates, eIDAS keys, or a PSD2 licence of your own. It is a zero-knowledge open-banking service covering 2,600+ European banks, and SumUp (BIC SUMUIE22) is one of them.

Because SumUp is a business-account provider, the connection you set up here is scoped to your company's account. Consent lasts up to 180 days before Norwegian PSD2 rules ask you to re-authorise — the dashboard reminds you before it lapses.

How to connect SumUp

Connecting happens entirely inside the open-banking.io dashboard — there is no API call, key, or code involved in this step.

  1. Sign up at open-banking.io and set an encryption passphrase. Your keys are generated locally on your own device; open-banking.io only ever stores your public key.
  2. In the dashboard, choose SumUp and select the business account type.
  3. You are redirected to SumUp's own secure login, where you approve the access request (the standard PSD2 consent screen). open-banking.io never sees your SumUp credentials.
  4. Once approved, your account and transactions sync back into the dashboard, ready to view.

Access your data

Working in the dashboard is enough for most people. If you want the data programmatically, that is an optional developer step you take after the connection exists.

From the Developers page, create an API key and export a credentials.json. That file bundles the API key and your private decryption key — the latter never leaves your machine. Then reach your data however suits you:

  • CLI: openbanking accounts, openbanking transactions, openbanking sync
  • An official SDK, or the plain REST API

Every request carries your API key in the X-Api-Key header. Responses arrive encrypted and are decrypted locally with your private key. An API key on its own returns only ciphertext — without your key, open-banking.io's servers (and anyone else) see nothing readable. There is no connect command: the CLI and SDK only read and sync connections you already made in the dashboard.

All of this runs at roughly EUR 3/month, with no certificate wrangling.

FAQ

Do I need a PSD2 licence or eIDAS certificate?

No. open-banking.io is certificate-free — you authorise access on SumUp's own consent screen and that is all.

Can open-banking.io read my SumUp transactions?

No. The service is zero-knowledge; it holds only your public key, so data is decrypted only on your device.

Which account types does SumUp support here?

Business accounts, with consent valid for up to 180 days before re-authorisation.

Ready to start? Head to open-banking.io.