The State of UK Banking APIs

About this paper

I spent years holding up the United Kingdom as the place that did open banking right — it paired its specification with conformance testing and a delivery body, the Open Banking Implementation Entity, and it went past read-only data sharing to mandate payment initiation, giving the ecosystem something to do, not just something to read. I once maintained the six mandated UK Open Banking OpenAPIs across fifteen-odd banks myself. So the finding that frames this report is a disappointment I did the homework to earn: not one of the sixty providers in my catalog reaches the “Strong” band, let alone “Exemplar.” The whole sector tops out in “Developing,” and the highest score is 59.2. The gold-standard mandate produced the best-conformed banking APIs I have scored — and still not a good one.

I read every bank and building society the way an integrator or an agent would: not the marketing site, the machine-readable evidence — the OpenAPI, the scopes, the security posture, the discovery surface. This report is written for two readers: the person who runs one of these programs and needs to know where they actually stand against the field, and the investor or acquirer trying to tell a real platform from a compliance filing before writing a check. The mandate produced existence — a genuinely better existence than the read-only regimes, with real write surfaces and a conformance regime behind them — and it did not produce a product. The difference from Australia is the whole story: here the frontier beyond the mandate is genuinely occupied, seven or eight companies wide, which makes the gap between conformance and product both a bigger opportunity and a more contested one. This report is a map of it, scored provider by provider, with a punch-list any bank could execute to own it.

What's inside

1. Executive summary — the best mandate in the world, and the ceiling it still can't clear
2. The state of the sector — the mandate that did it right, and still couldn't do it all
3. The resource taxonomy — the mandated spine, and a frontier that is actually occupied
4. The composite Kin Score — and why it's the foundation
5. Agent-readiness — the paradox, and its two honest caveats
6. The blueprint — what the leaders satisfied, and what none of them have
7. Standards and artifacts — why this matters for the agentic turn
8. Security, auth, scopes, and consent — where the mandate earned its keep
9. Provider-by-provider intelligence — the leaders, the majors, and the caveats
10. The investable thesis — build, partner, or watch

What you get for $500.00