API Overview
The Lunar Open Banking API provides access to account information and payment initiation services. This section describes the main capabilities and concepts of each API domain.
Available APIs
The API is split into two main functional areas:
Account Information (AISP)
The Account Information Service Provider (AISP) APIs allow authorized third parties to access account data on behalf of users. This includes:
- Account listing — Retrieve details of all accounts accessible to the user
- Transaction history — Access historical transaction data with filtering and pagination
- Funds confirmation — Check if sufficient funds are available for a payment
Payment Initiation (PISP)
The Payment Initiation Service Provider (PISP) APIs enable authorized third parties to initiate payments from user accounts. Supported payment types include:
- Domestic Credit Transfers — National bank transfers within Denmark, Norway, or Sweden
- Standing Orders — Recurring scheduled payments
- Danish Payment Slips (GIRO/FI) — Traditional Danish payment slip payments
- SE Bank Giro — Swedish Bank Giro payments for invoices
- SE Plus Giro — Swedish Plus Giro payments for invoices
Authentication
All API endpoints require OAuth2 authentication. Before making API calls, you must:
- Register as a TPP with valid eIDAS certificates
- Obtain user authorization via the OAuth2 authorization code flow
- Include the access token in the
Authorizationheader
See the Access Tokens documentation for detailed authentication flows.
Required Headers
All API requests must include the following headers:
| Header | Required | Description |
|---|---|---|
Authorization | Yes | Bearer token from OAuth2 flow |
X-DeviceId | Yes | Device identifier of the calling client |
X-Os | Yes | Operating system of the calling client |
Additional optional headers are supported for tracing and diagnostics: X-RequestId, X-Language (default: en), X-OsVersion, X-DeviceModel, X-DeviceManufacturer, X-DeviceTime, X-AppVersion, and X-AppBuildNumber.
Scopes
The API uses OAuth2 scopes to control access to different resources:
| Scope | Description | Endpoints |
|---|---|---|
PSP_AI | Account Information — access accounts and transaction history | /accounts, /accounts/{id}/transactions, /accounts/{id}/transactions/{transactionId} |
PSP_PI | Payment Initiation — initiate payments and check funds availability | /payments/*, /funds-confirmation |
offline | Request a refresh token for long-lived access | — |
Request the appropriate scopes when initiating the OAuth2 authorization flow.
Base URL
All API requests should be made to:
https://openbanking.prod.lunar.app/aisp-pisp