Cuentas del API Bancario

API 1.0.0

Una herramienta del MCP envuelve esta operación: API bancario (BaaS).

El grupo Accounts cubre la cuenta como recurso: validar una cuenta destino antes de transferir, listar las cuentas accesibles, consultar saldos y pedir estados de cuenta.

POST /api/public/v1/accounts/validate
GET  /api/public/v1/accounts
GET  /api/public/v1/accounts/balances
GET  /api/public/v1/accounts/balance
POST /api/public/v1/accounts/statements
GET  /api/public/v1/accounts/statements/{request_id}

Reglas del recurso#

Alcance. El listado devuelve sólo las cuentas que autoriza el token; no se envía tenant_id ni owner_id como parámetro.

Validación previa. Validá la cuenta destino antes de crear un pago: la operación confirma que la cuenta existe y es apta, y devuelve los datos del titular que el servicio expone.

Estados de cuenta asincrónicos. La generación se solicita con un POST que acepta Idempotency-Key y devuelve un request_id; después consultás ese request_id hasta que el resultado esté disponible. Ver reintentos seguros.

Paginación. GET /api/public/v1/accounts y GET /api/public/v1/accounts/balances usan limit y offset, y devuelven pagination con limit, offset y total.

Operaciones#

List balances for accessible accounts

GET /api/public/v1/accounts/balances

Host: https://api-baas-sandbox.tilopay.com requiere Authorization: Bearer <access_token>.

Returns paginated account balances (account, amounts, as_of). This endpoint checks the current balance in real time and may respond more slowly than GET /accounts. For account attributes without amounts, use GET /accounts.

Optional filters use the public account identification standard: type + value (identifier scheme + value). type is not the internal account classification.

Parámetros

ParámetroEnTipoObligatorioDescripción
X-Correlation-IdheaderstringOptional client-supplied correlation id for end-to-end tracing. Echoed back as correlation_id in the response envelope. If omitted, the API generates one and still returns it.
limitqueryinteger
offsetqueryinteger
typequerystringOptional filter by account identifier scheme (e.g. IBAN). Not the internal account classification.
valuequerystringOptional filter by account identifier value (partial match supported for list endpoints).

Respuesta 200

The request was processed successfully.

response_code: OK

CampoTipoObligatorioDescripción
itemsarray<object>
items[].accountobject
items[].account.currencystring
items[].account.typestring
items[].account.valuestring
items[].amountsobject
items[].amounts.availablestring
items[].amounts.inbound_in_transitstring
items[].amounts.outbound_in_transitstring
items[].amounts.postedstring
items[].as_ofstring
paginationobject
pagination.limitinteger
pagination.offsetinteger
pagination.totalinteger

Respuestas de error

HTTPresponse_codeDescripción
400INVALID_REQUESTInvalid request. Check the required fields and try again.
401UNAUTHORIZEDUnauthorized. Verify your session or credentials.
403FORBIDDEN, ACCOUNT_ACCESS_DENIEDYou do not have permission to perform this action.
404NOT_FOUNDThe requested resource was not found.
429TOO_MANY_REQUESTSToo many requests. Please retry after a short delay.
500INTERNAL_ERRORAn unexpected error occurred. Please try again later.
502Dependency error
503SERVICE_UNAVAILABLEA required service is temporarily unavailable. Please try again later.

List accessible accounts without balances

GET /api/public/v1/accounts

Host: https://api-baas-sandbox.tilopay.com requiere Authorization: Bearer <access_token>.

Returns paginated accessible accounts without querying current balances. Each item is account attributes only (account.type, account.value, account.currency). amounts and as_of are not included; use GET /accounts/balances or POST /accounts/balance.

Optional filters use the public account identification standard: type + value (identifier scheme + value). type is not the internal account classification.

Parámetros

ParámetroEnTipoObligatorioDescripción
X-Correlation-IdheaderstringOptional client-supplied correlation id for end-to-end tracing. Echoed back as correlation_id in the response envelope. If omitted, the API generates one and still returns it.
limitqueryinteger
offsetqueryinteger
typequerystringOptional filter by account identifier scheme (e.g. IBAN). Not the internal account classification.
valuequerystringOptional filter by account identifier value (partial match supported for list endpoints).

Respuesta 200

The request was processed successfully.

response_code: OK

CampoTipoObligatorioDescripción
itemsarray<object>
items[].accountobject
items[].account.currencystring
items[].account.typestring
items[].account.valuestring
paginationobject
pagination.limitinteger
pagination.offsetinteger
pagination.totalinteger

Respuestas de error

HTTPresponse_codeDescripción
400INVALID_REQUESTInvalid request. Check the required fields and try again.
401UNAUTHORIZEDUnauthorized. Verify your session or credentials.
403FORBIDDENYou do not have permission to perform this action.
404NOT_FOUNDThe requested resource was not found.
429TOO_MANY_REQUESTSToo many requests. Please retry after a short delay.
500INTERNAL_ERRORAn unexpected error occurred. Please try again later.
502Dependency error
503SERVICE_UNAVAILABLEA required service is temporarily unavailable. Please try again later.

Get account balance

POST /api/public/v1/accounts/balance

Host: https://api-baas-sandbox.tilopay.com requiere Authorization: Bearer <access_token>.

Returns a single account snapshot with amounts and as_of. For account attributes without balances, use GET /accounts.

Parámetros

ParámetroEnTipoObligatorioDescripción
X-Correlation-IdheaderstringOptional client-supplied correlation id for end-to-end tracing. Echoed back as correlation_id in the response envelope. If omitted, the API generates one and still returns it.

Cuerpo del request

CampoTipoObligatorioDescripción
accountobject
account.typestringAccount identifier scheme. Only IBAN is supported here. This is not the internal account classification (e.g. operational).Valores: IBAN
account.valuestringIBAN (spaces allowed; normalized server-side)

Respuesta 200

The request was processed successfully.

response_code: OK

CampoTipoObligatorioDescripción
accountobject
account.currencystring
account.typestring
account.valuestring
amountsobject
amounts.availablestring
amounts.inbound_in_transitstring
amounts.outbound_in_transitstring
amounts.postedstring
as_ofstring

Respuestas de error

HTTPresponse_codeDescripción
400INVALID_REQUESTInvalid request. Check the required fields and try again.
401UNAUTHORIZEDUnauthorized. Verify your session or credentials.
403FORBIDDEN, ACCOUNT_ACCESS_DENIEDYou do not have permission to perform this action.
404ACCOUNT_NOT_FOUNDAccount not found.
422ACCOUNT_NOT_CONFIGURED, UNPROCESSABLE_ENTITYThis account is not mapped in the system. Please contact support to configure it correctly.
429TOO_MANY_REQUESTSToo many requests. Please retry after a short delay.
500INTERNAL_ERRORAn unexpected error occurred. Please try again later.
502PROVIDER_ERRORUnable to complete the request with the payment provider. Please try again later.
503SERVICE_UNAVAILABLEA required service is temporarily unavailable. Please try again later.

Request account statement generation

POST /api/public/v1/accounts/statements

Host: https://api-baas-sandbox.tilopay.com requiere Authorization: Bearer <access_token>. Acepta Idempotency-Key.

Creates an asynchronous account statement request for a date range (max 60 days). Identify the account with account.type + account.value (identifier scheme + value, e.g. IBAN). This follows the public account identification standard. account.type is not the internal account classification. Returns {request_id, status: PENDING} immediately. Poll GET /accounts/statements/{request_id} for status; when DONE, the response includes a signed download_url.

Parámetros

ParámetroEnTipoObligatorioDescripción
X-Correlation-IdheaderstringOptional client-supplied correlation id for end-to-end tracing. Echoed back as correlation_id in the response envelope. If omitted, the API generates one and still returns it.
Idempotency-Keyheaderstring

Cuerpo del request

CampoTipoObligatorioDescripción
accountobject
account.typestringAccount identifier scheme. Only IBAN is supported here. This is not the internal account classification (e.g. operational).Valores: IBAN
account.valuestringIBAN (spaces allowed; normalized server-side)
date_fromstring (date-time)RFC 3339 timestamp accepted on requests. UTC Z or a numeric offset is allowed. Optional fractional seconds are accepted and truncated to seconds.
date_tostringRFC 3339 (max 60 days after date_from)
notify_emailboolean

Respuesta 200

The request was processed successfully.

response_code: OK

CampoTipoObligatorioDescripción
request_idstring
statusstring

Respuesta 202

Statement request accepted.

CampoTipoObligatorioDescripción
request_idstring (uuid)
statusstringValores: PENDING, PROCESSING, DONE, ERROR

Respuestas de error

HTTPresponse_codeDescripción
400INVALID_REQUESTInvalid request. Check the required fields and try again.
401UNAUTHORIZEDUnauthorized. Verify your session or credentials.
403FORBIDDEN, ACCOUNT_ACCESS_DENIEDYou do not have permission to perform this action.
404NOT_FOUNDThe requested resource was not found.
409IDEMPOTENCY_CONFLICTIdempotency conflict: the same Idempotency-Key was reused with a different request body, or a previous request is still in progress.
429TOO_MANY_REQUESTSToo many requests. Please retry after a short delay.
500INTERNAL_ERRORAn unexpected error occurred. Please try again later.
502Dependency error
503SERVICE_UNAVAILABLEA required service is temporarily unavailable. Please try again later.

Get account statement request status

GET /api/public/v1/accounts/statements/{request_id}

Host: https://api-baas-sandbox.tilopay.com requiere Authorization: Bearer <access_token>.

Returns request status. When DONE, includes a GCS signed download_url (48h from generation) and expires_at. When ERROR, includes a generic message without internal details. Unknown or unauthorized request_id returns 404.

Parámetros

ParámetroEnTipoObligatorioDescripción
X-Correlation-IdheaderstringOptional client-supplied correlation id for end-to-end tracing. Echoed back as correlation_id in the response envelope. If omitted, the API generates one and still returns it.
request_idpathstring (uuid)

Respuesta 200

The request was processed successfully.

response_code: OK

CampoTipoObligatorioDescripción
download_urlstring
expires_atstring
messagestring
request_idstring
statusstring

Respuestas de error

HTTPresponse_codeDescripción
401UNAUTHORIZEDUnauthorized. Verify your session or credentials.
403FORBIDDENYou do not have permission to perform this action.
404NOT_FOUNDThe requested resource was not found.
429TOO_MANY_REQUESTSToo many requests. Please retry after a short delay.
500INTERNAL_ERRORAn unexpected error occurred. Please try again later.
503SERVICE_UNAVAILABLEA required service is temporarily unavailable. Please try again later.

Última verificación: 2026-09-02 · Responsable: equipo-integraciones

Ver como Markdown crudo