Supported API Standards

Our PSD2 API services support well-known industry standards.

Czech Open Banking Standard (COBS)

The API is written in compliance with the Czech Open Banking Standard (COBS). This standard was introduced and published as a consensus format by the Czech Banking Association. The full specification of COBS standard is available at the Czech Banking Association website. Some of the additional development resources are also available at the official Github.

Supported Versions

We currently support the following versions of COBS standard:

VersionDate PublishedAPI Base URL
2.028.10.2018Production:
https://aboktpp.cnb.cz/psd2-cobs/cobs/2.0
5.0X.X.2022Production:
https://aboktpp.cnb.cz/psd2-cobs/cobs/5.0

Known Differences

We know about the following minor differences of API we publish from the COBS standard:

  • We use more common /oauth/authorize path instead of /oauth/auth for authorization URL.
  • We placed application registration services to /cobs/2.0/applications (same paths are also available for /cobs/5.0/) context so that they do not interfere with standard OAuth 2.0 service namespace.
    • POST /cobs/2.0/applications - Create a new application.
    • GET /cobs/2.0/applications - Get the list of all applications of given TPP.
    • GET /cobs/2.0/applications/{id} - Get the application details.
    • PUT /cobs/2.0/applications/{id} - Update application information.
    • POST /cobs/2.0/applications/{id}/renewSecret - Renew client secret.
    • DELETE /cobs/2.0/applications/{id} - Delete given application.
  • The standing order support is limited to
    • payment intervals: DAILY, WEEKLY, MONTHLY, QUARTERLY, HALFYEARLY and YEARLY
    • weekly interval: 1-5
    • payment execution modes: UNTIL_DATE and UNTIL_CANCELLATION
    • payment execution: DUE_DAY
  • The direct debit payments are not provided on accounts and thus are not supported by our API.

None of these differences concerns the format of account data in transit. Only application registration (usually done via manual calls) and OAuth 2.0 Authorization URL is affected.