Skip to main content
The Business API supports 2 authentication methods: Depending on who will be using your integration and which endpoints you will be calling, you could need to use OAuth 2.0 (instead of the API key).

Which authentication method do I need?

To authenticate to the Business API with your own Qonto account, you have 2 options depending on the endpoints you will be calling (cf. the Scopes & endpoint access table to identify if you need to use an endpoint which is only accessible through OAuth).
Follow those steps.
  • Sign up to the Developer Portal to get your credentials (as well as an access to our Sandbox environment);
  • Implement the OAuth flow.

Methods at a glance

Each endpoint page shows which of these methods it accepts, and which OAuth scope(s) it requires, right below its method and URL. The full list is in Scopes & endpoint access.

Strong Customer Authentication (SCA)

Sensitive actions require SCA: available flows and how to test them in the Sandbox.

QSealC certificate

TPP identification through PSD2 QSeal certificate.

Make a transfer with PSD2

SCA, trusted beneficiaries and the PSD2 rules that apply to transfers.

Create my OAuth App

Get your OAuth 2.0 client credentials from the Developer Portal.