Skip to main content

Security and Getting Access

Configure secure access to CommBank APIs

To access our APIs, you must complete three steps:

  1. Configure network access
  2. Set up authentication
  3. Request and use access tokens

Guides

Complete these guides in order:

Network Access (mTLS & IP)

Configure secure connectivity using:

  • mTLS certificates
  • IP whitelisting

Authentication (OAuth 2.0)

Set up authentication for your API requests by:

  • Generating signing keys
  • Registering your public key
  • Receiving your credentials (client_id, kid)

Using Access Tokens

Request access tokens and use them to call APIs:

  • Create a signed JWT client assertion
  • Request an access token
  • Include the token in API requests