Millennium BCP API Access & Open Banking Guide

Millennium BCP (Banco Comercial Português, BIC BCOMPTPL) is Portugal's largest privately owned bank, and open-banking.io gives you a clean, PSD2-compliant way to reach your account data without certificates, eIDAS seals, or a bank sandbox. Whether you hold a business or personal account, you can pull balances and transactions into a single dashboard and, if you code, read them programmatically afterwards.

The key difference: open-banking.io is zero-knowledge. Your encryption keys are generated on your own device from a passphrase you choose, so the service only ever stores your public key. Data syncs down as ciphertext and is decrypted locally — nobody at open-banking.io can read your Millennium BCP statements.

How to connect Millennium BCP

Connecting happens entirely in the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up at open-banking.io and set your encryption passphrase. This generates your personal key pair locally.
  2. In the dashboard, search for Millennium BCP and choose your account type (business or personal).
  3. You are redirected to Millennium BCP's own secure login, where you approve access on the bank's PSD2 consent screen.
  4. Your accounts sync back into the dashboard. Consent lasts up to 180 days, after which you simply re-approve.

That's it — no developer redirect, no client secret, no manual token handling.

Access your data

Once Millennium BCP is connected, developers can optionally read the data programmatically. On the Developers page, create an API key and export a credentials.json — this bundles the API key with your private decryption key. Then use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API. Requests authenticate with the X-Api-Key header, and every response is decrypted locally with your own key. Without that private key, an API key alone returns only ciphertext.

All of this runs for roughly EUR 3/month, covering 2,600+ EU/UK banks.

Do I need an eIDAS certificate for Millennium BCP?

No. open-banking.io handles the regulated connection, so you never provision certificates or register with a bank sandbox.

Can open-banking.io read my Millennium BCP transactions?

No. The service is zero-knowledge and holds only your public key; decryption happens on your device.

How do I refresh access after 180 days?

Return to the dashboard and re-approve on Millennium BCP's consent screen — the same quick flow as the initial connection.

Ready to start? Visit open-banking.io.