Token.io Data
Token.io Data is an Account Information Service that lets a customer consent to sharing bank account information with a third party.
What Token.io Data is
Token.io Data is an Account Information Service that lets a customer consent to sharing bank account information with a third party. Its API endpoints cover account details, balances, standing orders, and transactions. Documented uses include creditworthiness assessment, account ownership verification, autofill, personal financial management, and balance display. Teams can integrate through Token.io Hosted Pages or an API-only flow in which the third-party provider owns the user experience; redirect, embedded, and decoupled authentication flows are also described. Data refresh is on demand. Providers can filter the connected-bank list by country and bank-supported features. Token.io states that it connects to over 567 million verified bank accounts in the UK and Europe and operates in 21 countries. Token.io Limited is authorised by the UK FCA as an AISP and PISP; Token.io GmbH is authorised by BaFin as an AISP, with its licence passported to 27 other EEA countries. Token.io says it passes on bank data rather than amending, enriching, or analyzing AIS data. Pricing is available on request.
Good
- Endpoints cover account details, balances, and transactions.
- Supports Hosted Pages and API-only integration.
- Offers redirect, embedded, and decoupled authentication flows.
- Bank lists can be filtered by country and supported features.
Watch out
- Pricing is available on request.
- Bank data is passed through without amendment, enrichment, or analysis.
- Banks may omit transaction IDs or reuse them.
Who it suits
Token.io Data is intended for financial service companies such as payment gateways, banks, and acquirers that need consent-based access to bank data. Its API and Hosted Pages options support different integration approaches.
Verdict
Token.io Data provides consent-based bank information access through API endpoints and Hosted Pages, with on-demand refresh. Teams should account for variable transaction IDs and the service's pass-through approach to bank data.
The facts
Each one read from Token.io Data's own pages, with the date it was checked.
What it does
- API authentication
- Token.io production requires JWT authentication; its sandbox accepts JWT authentication or an API key.checked 8 Oct 2026
- Authentication
- Production API connections require JWT authentication; the Sandbox accepts JWT authentication or an API key.checked 4 Oct 2026
- Authentication flows
- The API-only integration documentation describes redirect, embedded, and decoupled authentication flows.checked 8 Oct 2026
- Bank data limitation
- Token.io notes that banks may omit transaction IDs or reuse the same ID for different transactions, and says banks are not obligated to provide transaction IDs.checked 8 Oct 2026
- Bank selection
- TPPs can filter the connected-bank list by country and bank-supported features.checked 4 Oct 2026
- Consent
- Under Open Banking protocols, the customer must explicitly consent before a bank shares account data with a third party.checked 8 Oct 2026
- Coverage
- Token.io's homepage states connectivity to over 567 million verified bank accounts in the UK and Europe.checked 4 Oct 2026
- Data endpoints
- The API provides endpoints for account information, balances, standing orders, and transactions.checked 4 Oct 2026
- Data handling
- Token.io says it passes on bank data and does not provide AIS data amendment, enrichment, or analysis.checked 8 Oct 2026
- Integration options
- AIS can be integrated through Token.io Hosted Pages or an API-only integration in which the TPP owns the full user experience.checked 8 Oct 2026
- Intended customers
- Token.io describes its platform as a toolkit for financial service companies including payment gateways, banks, and acquirers.checked 4 Oct 2026
- Markets
- Token.io's homepage states it operates in 21 countries.checked 4 Oct 2026
- Product
- Token.io Data lets users consent to share bank account balances, transactions, and/or account details with a third party.checked 8 Oct 2026
- Rate limit
- The legacy AIS documentation states a maximum of 1,000 API requests per minute for each TPP member.checked 4 Oct 2026
- Regulation
- Token.io says it is regulated as a TPP in the UK and Germany and provides services to other regulated parties as a technical service provider.checked 8 Oct 2026
- Security and compliance
- Token.io states it is ISO 27001:2013 certified, PCI-DSS Level 1 compliant, PSD2 compliant, and Cyber Essentials Certified.checked 4 Oct 2026
- Security certifications
- Token.io states it is ISO 27001:2013 certified, PCI-DSS Level 1 compliant, PSD2 compliant, and Cyber Essentials Certified.checked 8 Oct 2026
- Support
- Token.io's developer documentation directs users to [email protected] for feedback about the documentation.checked 8 Oct 2026
- Supported customers
- Token.io describes its platform as a toolkit for financial service companies, including payment gateways, banks, and acquirers.checked 8 Oct 2026
- Use cases
- The documentation lists creditworthiness assessment, account ownership verification, autofill, personal financial management, and balance display as example AIS use cases.checked 8 Oct 2026
The company
- Maker details
- LinkedIn lists Token.io's headquarters as London, England, and its founding year as 2015.checked 4 Oct 2026
Alternatives to Token.io Data
- 1
Trovata TMS
AndroidiOSWebAPI7.3From $24,000 a year - 2
CAMSfinserv Account Aggregator
Free planAndroidWebAPI7.1Free plan - 3
MX
Free planAndroidiOSWebAPI7.0Free plan - 4
GoCardless Bank Account Data
Free planWebAPI6.9Free plan - 5
Salt Edge Data Aggregation
AndroidiOSWebAPI6.9 - 6
TrueLayer Data API
Free planAndroidiOSWebAPI6.9Free plan