These endpoints allow you to create and manage an Account on File from bank account details. The Account on File can then be used in other API requests instead of sending the full account details.
token-io Account on File API is one of 29 APIs that Token.io publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
This API exposes 3 JSON Schema definitions.
Tagged areas include Account on File. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, a getting-started guide, a JSON-LD context, and 3 JSON Schemas.
This API exposes
3 operations
across 2 paths,
and defines 38 schemas.
It is described by OpenAPI 3.2.0, at version 1.0.
Requests are made against a single base URL, https://api.token.io.
3 operations2 paths38 schemas1 DELETE1 GET1 POST
Metadata
The identity and technical contract details declared by the specification.
Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://api.token.io
Authentication
HTTP Bearer, API Key
Resource Areas
1
Authentication & Security 2
token-io Account on File API declares
2 security schemes
for authenticating requests.
It accepts HTTP bearer tokens (JWT) (Bearer).
An API key is passed in the header as Authorization (BasicAuth).
Bearer — For Production and Sandbox environments. When using curl samples the authorization header is given as -H 'Authorization: Bearer + JWT' Please substitute your B…
BasicAuth — For Sandbox environment only. When using curl samples the authorization header is given as -H 'Authorization: YOURAPIKEYHERE' Please substitute your Basic key…
Paths & Operations 3
Across 2 paths, the API surfaces 3 operations — 1 DELETE, 1 GET, 1 POST. Each is listed below with its method, path, parameters, and response codes.
Account on File 3
These endpoints allow you to create and manage an Account on File from bank account details. The Account on File can then be used in other API requests instead of sending the full…
The contract defines 38 schemas that model the data the API accepts and returns. The most detailed are Address (8 properties), SepaAccount (2 properties), ClearingNumberAccount (2 properties), PlusGiroAccount (2 properties). Each schema is shown below with its type and property counts.
NotImplementedError
object
The operation was not implemented, supported or enabled by the bank.
2 properties1 required
EUIbanAccount
object
Account details where the iban is required and the bic is optional.
2 properties1 required
PLIbanAccount
object
Polish account details where the iban is required and the bic is optional.
2 properties1 required
GetTokenizedAccountResponse
object
Contains the response of the get tokenized account request.
1 property
CreateTokenizedAccountRequest
object
2 properties1 required
EUDomesticNonEuroAccountDebtor
The payment system within a European country using that country's non-Euro domestic currency. An IBAN account will require an iban and an optional bic, a BBAN…
BankGiroAccount
object
Account details where the bankgiroNumber is required and the bic is optional.
2 properties1 required
FasterPaymentsAccount
object
A UK or Irish account where the sort code and account number are required.
2 properties2 required
DebtorAccountDetails
The raw debtor account identifiers. Exactly one format must be used, depending on the payment instrument and jurisdiction.
CreateTokenizedAccountResponse
object
Contains the response of the create a tokenized account request.
1 property
ElixirAccountDebtor
The Elixir debtor account details.
inline_response_500_internal
object
Returned when the server fails to complete the request due to an unexpected internal error.
1 property
ServiceUnavailableError
object
Service is unavailable, likely due to a transient condition; this is usually corrected with a retry.
2 properties1 required
inline_response_429
object
1 property1 required
PlusGiroAccount
object
Account details where the plusgiroNumber is required and the bic is optional.
2 properties1 required
ClearingNumberAccount
object
Account details where the bban is required and the clearing number is optional.
2 properties1 required
SepaAccount
object
SEPA account details where the iban is required and the bic is optional.
2 properties1 required
GatewayTimeoutError
object
The deadline expired before the operation could complete.
2 properties1 required
inline_response_503
object
1 property1 required
inline_response_403_1
object
1 property1 required
AccountInformation
The account information for the PSU or Business.
Address
object
Address
8 properties
EUDomesticNonEuroInstantAccountDebtor
The instant payment system within a European country using that country's non-Euro domestic currency. An IBAN account will require an iban and an optional bic,…
InternalServiceError
object
The server encountered an unexpected internal condition while processing the request.
2 properties
ResourceExhaustedError
object
Resource exhausted. Too many requests.
2 properties1 required
inline_response_501
object
1 property1 required
inline_response_401
object
1 property
Error
object
The request does not have valid authentication credentials needed to perform the operation.
2 properties
BbanAccount
object
Account details where the bban is required and the bic is optional.
2 properties1 required
TokenizedPermissionDeniedError
object
The error returned when the operation is not permitted for the tokenized account. Typically, this occurs when the member is not authorized to perform the given…
1 property
inline_response_504
object
1 property1 required
PaymentNotFoundError
object
The error object returned when given payment cannot be found: ResourceNotFound.
2 properties1 required
BadRequestError
object
The request contains invalid, missing, or improperly formatted parameters.
2 properties
ErrorWithCode
object
Error object providing details about the error.
2 properties2 required
inline_response_400_bad_request
object
Response returned when the request contains invalid, missing, or improperly formatted parameters.
1 property
SepaInstantAccount
object
SEPA Instant account details where the iban is required and the bic is optional.
2 properties1 required
DeleteTokenizedAccountResponse
object
No data returned in the successful response.
inline_response_404
object
1 property1 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.
Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.
MCP tools for apis
4 tools reach this content
search_api_evangelistSearch every content type across the network at once.
find_relatedThe shared-tag relevance graph — what else covers this.
get_tagEverything one tag labels, across all content types.
guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
A second provider on the same verified email joins the account you already have.
Your account
ⓘWhere this information came from
This is an independent, third-party profile of token-io Account on File API, published by
API Evangelist. We do not operate, host, resell, or
support these APIs, and we are not affiliated with or endorsed by the company unless stated above.
Everything here is built from publicly available information — the company's own site,
developer portal, documentation, public repositories, and the specifications it publishes for public use.
Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's
public API artifacts, scored against a published rubric. They are not certifications,
endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and
you do not need to justify the request. A removed company is recorded as unrated, never scored
zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy → On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
