Monzo Bank Limited

OB Standards

Implement Open Data v2.2
Implement Read/Write API Specification v3.1
Implement Customer Experience Guidelines v1.1
Implement App-to-App Redirection
Implement OB Security Profile Implementer's Draft v1.1.2
Implement FAPI Profile Implementers Draft 2
Implement CIBA Profile Implementers Draft 1
Implement Dynamic Client Registration v1.1
Implement Dynamic Client Registration v3.1
Decommission Read/Write API Specification v1.x/2.x
Decommission OB Security Profile Implementer's Draft v1.x
Article 10 SCA Exemption (for 90 days)		Resources covered (delete as appropriate): Accounts, Balances, Transactions, Beneficiaries, Direct Debits, Standing Orders, Products, Offers, Parties, Scheduled Payments, Statements

Method of Identification

Commence support for eIDAS QWAC certificates
Commence support for eIDAS QSEAL certificates
Commence support for OBIE QWAC-like certificates
Commence support for OBIE QSEAL-like certificates
Cease support for OBIE non eIDAS-like certificates for transport
Cease support for OBIE non eIDAS-like certificates for signing
Support for MTLS token endpoint authentication
Support for private_key_jwt token endpoint authentication
Cease support for client id and client secret token endpoint authentication

Implementation

Directory?	Open Banking
Location of Well Known Endpoints?	Dev Portal (see Notes)	https://api.monzo.com/open-banking/.well-known/openid-configuration https://docs.monzo.com/#pisp-access
API Standard Implemented?	Open Banking
Name of Account Holder Implementation Date?	Available on our legacy API. Planned on our V3.1 OB AIS API.
Supported identification method?	OB MTLS+JWS eIDAS support planned (via OB)
Major Milestones	Version 3.1 PISP+CBPII Version 3.1 AISP planned for July 2019	(Inc Other Products, API Updates, API Deprecations, etc)
FAPI Compliant?	No (planned)
CIBA	TBC
Using Open Banking as your eIDAS Trust Framework?
Are you caching the Directory?
Transaction IDs

Customer Journey

Implementing Customer Experience Guidelines?	Partial and Equivalent friction journeys due to Monzo customers having different authentication factors.
Implementing Bespoke User Journeys?	Yes
Implementing App to App?	Yes
App to App Implementation Date?	14 Sep 2019
Options on 90 day re-authentication?	No
Support Embedded Flow?	No

PSD2

Dispute Management System?	TBC
FCA Adjustment Period - Maintaining Screen Scraping?
Seeking Fallback Exemption?	Yes
Adjusted or Fallback Interface?	No
Adjusted or Fallback URL?	N/A
Contact Email or Phone Number?
Dev Portal URL?
Test Facility Implementation Date?	13 Mar 2019
Production Interface Implementation Date?	10 Aug 2019
Authentication Method - Open Banking Channel (Browser)?	Hybrid redirect with authentication happening on customers device.
Authentication Method - Open Banking Channel (APP)?	App2App planned.
Authentication Method - Private Channel (Browser)?	None
Authentication Method - Private Channel (APP)?	None
Authentication Method Implementation Date (Open Banking Channel)?
Authentication Method Implementation Date (Private Channel)?
SCA Implementation Date?	14 Sep 2019
SCA Scope? (will it inhibit non PSD2 accounts)