- Home
- Bank Connectivity Software
- Token.io Data
Token.io Data
What it is
Token.io Data is an Account Information Service for sharing bank account information with a third party after a customer gives explicit consent under Open Banking protocols. Its API provides account details, balances, standing orders, and transactions, with on-demand refresh. Documented uses include creditworthiness assessment, account ownership verification, autofill, personal financial management, and balance display. Financial service companies such as payment gateways, banks, and acquirers are the intended customers. Teams can use Token.io Hosted Pages or an API-only flow and manage their own user experience. Redirect, embedded, and decoupled authentication flows are supported. Third-party providers can filter connected banks by country and supported features. Token.io states connectivity to over 567 million verified bank accounts in the UK and Europe and operation in 21 countries. Production API connections require JWT authentication; the Sandbox accepts JWT or an API key. Pricing is on request.
For and against
For
- Consent-based account data sharing
- Endpoints for balances and transactions
- Hosted Pages and API-only integration
- On-demand data refresh
- Bank filtering by country and features
Against
- Pricing is available on request
- Production connections require JWT authentication
- Banks may omit or reuse transaction IDs
- Token.io passes data without enrichment or analysis
The verdict
Token.io Data provides consent-based access to account information, balances, standing orders, and transactions through hosted or API integrations. Its documented coverage, authentication options, and financial-service focus make it suited to organizations building account-data workflows.
Who it suits
It suits financial service companies that need consent-based bank data access for verification, financial management, or payment-related workflows. It is designed for teams integrating through hosted pages or APIs.
On the record
- API authentication
- Token.io production requires JWT authentication; its sandbox accepts JWT authentication or an API key.docs.token.io · read 8 Oct 2026
- Authentication
- Production API connections require JWT authentication; the Sandbox accepts JWT authentication or an API key.docs.token.io · read 4 Oct 2026
- Authentication flows
- The API-only integration documentation describes redirect, embedded, and decoupled authentication flows.docs.token.io · read 8 Oct 2026
- Bank data limitation
- Token.io notes that banks may omit transaction IDs or reuse the same ID for different transactions, and says banks are not obligated to provide transaction IDs.support.token.io · read 8 Oct 2026
- Bank selection
- TPPs can filter the connected-bank list by country and bank-supported features.docs.token.io · read 4 Oct 2026
- Consent
- Under Open Banking protocols, the customer must explicitly consent before a bank shares account data with a third party.docs.token.io · read 8 Oct 2026
- Coverage
- Token.io's homepage states connectivity to over 567 million verified bank accounts in the UK and Europe.token.io · read 4 Oct 2026
- Data endpoints
- The API provides endpoints for account information, balances, standing orders, and transactions.docs.token.io · read 4 Oct 2026
- Data handling
- Token.io says it passes on bank data and does not provide AIS data amendment, enrichment, or analysis.support.token.io · read 8 Oct 2026
- Integration options
- AIS can be integrated through Token.io Hosted Pages or an API-only integration in which the TPP owns the full user experience.docs.token.io · read 8 Oct 2026
- Intended customers
- Token.io describes its platform as a toolkit for financial service companies including payment gateways, banks, and acquirers.support.token.io · read 4 Oct 2026
- Maker details
- LinkedIn lists Token.io's headquarters as London, England, and its founding year as 2015.linkedin.com · read 4 Oct 2026
- Markets
- Token.io's homepage states it operates in 21 countries.token.io · read 4 Oct 2026
- Product
- Token.io Data lets users consent to share bank account balances, transactions, and/or account details with a third party.docs.token.io · read 8 Oct 2026
- Rate limit
- The legacy AIS documentation states a maximum of 1,000 API requests per minute for each TPP member.developer.token.io · read 4 Oct 2026
- Regulation
- Token.io says it is regulated as a TPP in the UK and Germany and provides services to other regulated parties as a technical service provider.support.token.io · read 8 Oct 2026
- Security and compliance
- Token.io states it is ISO 27001:2013 certified, PCI-DSS Level 1 compliant, PSD2 compliant, and Cyber Essentials Certified.support.token.io · read 4 Oct 2026
- Security certifications
- Token.io states it is ISO 27001:2013 certified, PCI-DSS Level 1 compliant, PSD2 compliant, and Cyber Essentials Certified.support.token.io · read 8 Oct 2026
