BPG API Access & Open Banking for Portugal

Reaching your Banco Português de Gestão (BPG) accounts used to mean wrestling with eIDAS certificates and a PSD2 sandbox. open-banking.io removes that overhead. It gives you a single, certificate-free route to your BPG data across Portugal — covering both business and personal accounts (BIC BPGPPTPLXXX) — and it stays private by design. Your bank data is encrypted with keys generated on your own device, so it is only ever decrypted locally, by you.

Because open-banking.io is zero-knowledge, its servers hold nothing more than your public key. They can relay ciphertext, but they can never read a single transaction. That is the difference between a service that stores your finances and one that simply routes them to you.

How to connect BPG

Connecting happens entirely inside the open-banking.io dashboard — there is no API call, code, or key involved at this stage:

  1. Sign up for open-banking.io and set your encryption passphrase. Your keys are created right there on your device.
  2. In the dashboard, choose Banco Português de Gestão and select the account type you need — business or personal.
  3. You are redirected to BPG's own secure login, where you approve access under PSD2. Your credentials go to the bank, never to open-banking.io.
  4. Once approved, your BPG accounts sync straight into your dashboard. Consent lasts up to 180 days, after which you simply re-approve on BPG's screen.

Access your data

Programmatic access is an optional step after your BPG connection is live. On the Developers page, create an API key and export a credentials.json — this bundles the API key with your private decryption key. From there, use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Every request carries the X-Api-Key header, and each response is decrypted locally with your own key. Without that private key, an API key alone returns only ciphertext — which is exactly what keeps the model zero-knowledge.

All of this runs for around EUR 3/month, with no certificate paperwork to renew.

FAQ

Do I connect BPG with an API key?

No. You connect BPG in the dashboard by approving access on the bank's own consent screen. API keys only come later, and only to read data you have already connected.

Can open-banking.io read my BPG transactions?

No. It holds only your public key. Decryption happens on your device with a private key that never leaves it.

How long does BPG access stay active?

Up to 180 days per consent. When it expires, re-approve on BPG's login to continue syncing.

Ready to start? Visit open-banking.io to connect your BPG accounts.