CommBank Regular Payments API

Download OpenAPI specification:Download OpenAPI specification

Obtain the Regular Payment details authorised to be shared by the customer.

Regular Payments API is a consumer API. To access data you'll need the customer's consent.

Host URL

CommBank requests are passed to the URL https://secure.api.commbank.com.au/api/cds-au/v1/banking

CBA – CommBiz requests are passed to the URL https://secure.cdr.commbiz.api.commbank.com.au/cbzapi/cds-au/v1/banking

Get Direct Debits For Account

Obtain direct debit authorisations for a specific account.

path Parameters

accountId
required
string

ID of the account to get direct debit authorisations for.

query Parameters

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Responses

200

Success

400

Bad Request

406

Not Acceptable

422

Unprocessable Entity.

429

Too Many Requests.

500

Internal Server Error.

get /accounts/{accountId}/direct-debits
https://secure.api.commbank.com.au/api/cds-au/v1/banking/accounts/{accountId}/direct-debits

Response samples

application/json
{}

Get Bulk Direct Debits

Obtain direct debit authorisations for multiple, filtered accounts.

query Parameters

product-category
string
Enum:"BUSINESS_LOANS" "CRED_AND_CHRG_CARDS" "LEASES" "MARGIN_LOANS" "OVERDRAFTS" "PERS_LOANS" "REGULATED_TRUST_ACCOUNTS" "RESIDENTIAL_MORTGAGES" "TERM_DEPOSITS" "TRADE_FINANCE" "TRAVEL_CARDS" "TRANS_AND_SAVINGS_ACCOUNTS"

Used to filter results on the productCategory field applicable to accounts. If absent then all accounts returned.

open-status
string
Default: "ALL"
Enum:"OPEN" "CLOSED" "ALL"

Used to filter results according to open/closed status. If absent then ALL is assumed.

is-owned
boolean

Filters accounts based on whether they are owned by the authorised customer. True for owned accounts, false for unowned accounts and absent for all accounts.

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Responses

200

Success

400

Bad Request

406

Not Acceptable

422

Unprocessable Entity.

429

Too Many Requests

500

Internal Server Error

get /accounts/direct-debits
https://secure.api.commbank.com.au/api/cds-au/v1/banking/accounts/direct-debits

Response samples

application/json
{
  • "data":
    {
    },
  • "meta":
    {
    }
}

Get Direct Debits For Specific Accounts

Obtain direct debit authorisations for a specified list of accounts.

query Parameters

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Request Body schema: application/json

data
required
object (RequestAccountIds_data)
meta
object (Meta)

Responses

200

Success

400

Bad Request

406

Not Acceptable

422

Unprocessable Entity.

429

Too Many Requests.

500

Internal Server Error

post /accounts/direct-debits
https://secure.api.commbank.com.au/api/cds-au/v1/banking/accounts/direct-debits

Request samples

application/json
{
  • "data":
    {
    },
  • "meta": { }
}

Get Scheduled Payments for Account

Obtain scheduled, outgoing payments for a specific account.

path Parameters

accountId
required
string

ID of the account to get scheduled payments for.

query Parameters

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Responses

200

Success

400

Bad Request.

406

Not Acceptable

422

Unprocessable Entity.

429

Too Many Requests

500

Internal Server Error

get /accounts/{accountId}/payments/scheduled
https://secure.api.commbank.com.au/api/cds-au/v1/banking/accounts/{accountId}/payments/scheduled

Response samples

application/json
{
  • "data":
    {
    },
  • "meta":
    {
    }
}

Get Scheduled Payments Bulk

Obtain scheduled payments for multiple, filtered accounts that are the source of funds for the payments

query Parameters

product-category
string
Enum:"BUSINESS_LOANS" "CRED_AND_CHRG_CARDS" "LEASES" "MARGIN_LOANS" "OVERDRAFTS" "PERS_LOANS" "REGULATED_TRUST_ACCOUNTS" "RESIDENTIAL_MORTGAGES" "TERM_DEPOSITS" "TRADE_FINANCE" "TRAVEL_CARDS" "TRANS_AND_SAVINGS_ACCOUNTS"

Used to filter results on the productCategory field applicable to accounts. If absent then all accounts returned.

open-status
string
Default: "ALL"
Enum:"OPEN" "CLOSED" "ALL"

Used to filter results according to open/closed status. If absent then ALL is assumed.

is-owned
boolean

Filters accounts based on whether they are owned by the authorised customer. True for owned accounts, false for unowned accounts and absent for all accounts.

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Responses

200

Success

400

Bad Request.

406

Not Acceptable.

422

Unprocessable Entity.

429

Too Many Requests.

500

Internal Server Error.

get /payments/scheduled
https://secure.api.commbank.com.au/api/cds-au/v1/banking/payments/scheduled

Response samples

application/json
{
  • "data":
    {
    },
  • "meta":
    {
    }
}

Get Scheduled Payments For Specific Accounts

Obtain scheduled payments for a specified list of accounts.

query Parameters

page
integer
Default: 1

Page number being requested

page-size
integer [ 1 .. 1000 ]
Default: 25

Number of records to return with the page

header Parameters

x-v
integer
Example: 1

Version of the API end point being requested.

x-min-v
integer
Example: 1

Minimum version of the API end point you are requesting.

x-fapi-auth-date
string
Example: "2002-10-03T01:00:00+10:00"

The time when the customer last logged in to the data recipient.

x-fapi-interaction-id
string
Example: "f688ae24-9719-4975-9f58-f6b7e655c37d"

Reflects the value of the Interaction ID in the request.

x-fapi-customer-ip-address
string
Example: "192.168.1.1"

The customer's original IP address if the customer is currently logged in to the data recipient.

x-cds-client-headers
string
Example: "Q3VzdG9tZXJzRGV2OkN1c3RvbWVyc0Rldg=="

The customer's original standard http headers encoded, including the original User Agent header, if the customer is currently logged in to the data recipient.

Request Body schema: application/json

data
required
object (RequestAccountIds_data)
meta
object (Meta)

Responses

200

Success

400

Bad Request.

406

Not Acceptable.

422

Unprocessable Entity.

429

Too Many Requests.

500

Internal Server Error.

post /payments/scheduled
https://secure.api.commbank.com.au/api/cds-au/v1/banking/payments/scheduled

Request samples

application/json
{
  • "data":
    {
    },
  • "meta": { }
}