API reference
PreviewDORIC Banking API
Open and read accounts and initiate payments across the supported rails.
- Version
- 1.0.0-preview
- Endpoints
- 4
- Areas
- 2
Base address
The sandbox address and the OAuth endpoints are supplied with your DTcom environment.
Authentication
OAuth 2.0 client credentials. Request an access token with only the scopes the workload needs and send it as a Bearer token. Keep sandbox and production credentials separate.
How the API behaves
- Preview contract
- This contract is derived from the banking schemas and may change before the production contract is published.
- Money
- Amounts are whole numbers in the currency's minor unit, with a three-letter ISO 4217 currency code beside them.
- Retries
- Send
Idempotency-Keywhen creating a resource, so a retry does not create it twice. Payments require it. - Tracing
- Send
X-Request-Idor let the gateway generate one. It is returned in the response header and in every error body.
Headers on every request
Each endpoint page lists these again, with any header that is its own.
AuthorizationstringRequiredOAuth 2.0 client-credentials flow for machine workloads.
X-Request-IduuidOptionalUUID unique to this HTTP request. The gateway echoes a valid caller-supplied value or generates one when the header is omitted. The resulting value is returned in X-Request-Id and structured error responses.
Errors every endpoint can return
Every error carries an HTTP status. Where it also carries a code, branch on the code, not on the message.
- 400
INVALID_ARGUMENTThe request is malformed. - 401
UNAUTHENTICATEDAuthentication failed. - 403
PERMISSION_DENIEDThe principal is not authorized for this operation. - 429
RESOURCE_EXHAUSTEDA rate or concurrency limit was exceeded. - 503
UNAVAILABLEThe service is temporarily unavailable.