Skip to main content
API docs by Redocly

The Griffin API

Download OpenAPI specification:Download

Introduction

The Griffin API is based on REST. It has resource-oriented URLs, accepts JSON-encoded request bodies, returns JSON-encoded responses, and uses standard HTTP response verbs and response codes.

Our API deviates from strict RESTful principles if it makes sense to do so, such as when we enforce tighter access controls around certain operations. For example, when closing a bank account: rather than send a PATCH request to the bank account resource to update it's status to "closed", we provide a dedicated account closure resource.

Anyone can create an account with Griffin and try out our API in sandbox mode.

New to Griffin? Check out our getting started guide.

Navigation

Our API is designed to be navigated programmatically. When you request any resource, you will find the URLs for related resources in the response body.

The API is structured as a tree with your organization at the top. Everything that you own will be a sub-resource of your organization.

To bootstrap the navigation process, request the index endpoint: the response will contain your organization-url.

For a walkthrough, see our getting started guide.

Pagination

Our list APIs support pagination (e.g. list bank accounts and list payments). By default, a list API returns up to 25 results. If there are more results available, the response payload will include links to the previous/next pages.

Change page size

You can request a different number of results (between 1 and 200, inclusive) by using the page[size] query parameter:

GET /v0/organizations/:id/bank/accounts?page[size]=100

List responses will include a links object with prev and next attributes, as shown below. Perform a GET request to the value of the attribute to fetch the previous/next page of results.

{
  "accounts": [
    // ...
  ],
  "links": {
    "prev": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/bank/accounts?page[before]=djE6WxSPxfYUTnCU9XtWzj9gGA",
    "next": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/bank/accounts?page[after]=djE6aw79PXZySUOL16LD8HRJ3A"
  }
}

If there is no previous or next page available, the value of the attribute will be null.

Any other query parameters included in the initial request will also be included in the response payload's links. If you want to change parameters (see filtering and sorting), request the first page and follow the links from there.

Filtering and sorting

Sort results

By default, resources will be listed in descending order, usually based on the created-at attribute. You can change the sorting behaviour of a list of results by using the sort query parameter.

For example, to list bank accounts in ascending order (oldest first):

GET /v0/organizations/:id/bank/accounts?sort=created-at

To explicitly sort in descending order (newest first), prefix the sort attribute with -:

GET /v0/organizations/:id/bank/accounts?sort=-created-at

Filter results

Some list APIs allow you to filter the results. Filters are expressed as nested data structures encoded into query parameters. For example, you can list bank accounts that are in either the opening or open state with:

GET /v0/organizations/:id/bank/accounts?filter[account-status][in][]=opening&filter[account-status][in][]=open

Similarly, you can list legal persons with a specific application-status:

GET /v0/organizations/:id/legal-persons?filter[application-status][eq]=accepted

Include resources

Some list APIs allow you to include associated resources in the response, reducing the number of requests needed to fetch related data. For instance, when listing bank accounts, you can include each bank account's beneficiary legal person by using the include query parameter:

GET /v0/organizations/:id/bank/accounts?include=beneficiary

The response returns the usual list of bank accounts, but it will also have an included object with a legal-persons attribute:

{
  "accounts": [
    // ...
  ],
  "links": {
    // ...
  }
  "included": {
    "legal-persons": [
      // ...
    ]
  }
}

Check the documentation for each list API to see all options for sorting and filtering

Request limits

Each organization is allowed up to 50 concurrent (in-flight) API requests. Exceeding this threshold results in a 429 - Too Many Requests response. Upon receiving a 429 response, you should implement a backoff strategy, pausing to allow your outstanding requests to complete before attempting new requests. To manage your request rate effectively and avoid surpassing this limit, consider using a controlled approach such as a finite pool of threads or workers.

Versioning

The Griffin API is versioned via a prefix in the URL. The current version is v0. An example endpoint is: https://api.griffin.com/v0/index.

We will not break your integration with a particular version for as long as we support that version. If we release a new version, you will have 12 months to upgrade to it.

API keys

The api-key-secret field is only shown once when you create an API key. We cannot recover the value, so you should store it securely.

Pass an Authorization header with GriffinAPIKey api-key-secret to authenticate.

Each API key is only valid for one organization. If you are a member of multiple organizations, you will need to create a new API key for each one. There is currently no limit on the number of API keys you can create.

Get API key

Returns the API key without api-key-secret.

Authorizations:
api-key-auth
path Parameters
api-key-id
required
string

Responses

Response samples

Content type
application/json
{
  • "api-key-url": "/v0/api-keys/ak.ICAgICAgYXBpLWtleS1pZA",
  • "api-key-name": "buildserver",
  • "api-key-live?": true,
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "user-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "created-at": "2019-08-24T14:15:22Z"
}

Delete API key

Deletes the API Key. This operation cannot be undone.

Authorizations:
api-key-auth
path Parameters
api-key-id
required
string

Responses

List API keys

List all active API keys in your organization.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "api-keys": [
    ],
  • "links": {
    },
  • "included": null
}

Create API Key

Create a new API key. This is the only time api-key-secret is shown.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
api-key-name
required
string (api-key-name) non-empty

The name of the API Key. Cannot contain whitespace.

Responses

Request samples

Content type
application/json
{
  • "api-key-name": "string"
}

Response samples

Content type
application/json
{
  • "api-key-url": "/v0/api-keys/ak.ICAgICAgYXBpLWtleS1pZA",
  • "api-key-name": "buildserver",
  • "api-key-live?": true,
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "user-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "created-at": "2019-08-24T14:15:22Z",
  • "api-key-secret": "g-test-buildserver-RrUZ5fUG4pSKwYVVG1C3Ft1xrMRxy1T7KUIyTva5bTk"
}

List API keys

List all your active API keys.

Authorizations:
api-key-auth
path Parameters
user-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "api-keys": [
    ],
  • "links": {
    }
}

Connectivity

Ping

Check your connection to the Griffin API.

Responses

Navigation

Index

Contains various global URL paths. Follow api-key-url to discover your organization-url.

Authorizations:
api-key-auth

Responses

Response samples

Content type
application/json
{
  • "organizations-url": "/v0/organizations",
  • "users-url": "/v0/users",
  • "roles-url": "/v0/roles",
  • "session-url": "/v0/session",
  • "api-key-url": "/v0/api-keys/ak.ICAgICAgYXBpLWtleS1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA"
}

Events

Get an event

The event-type may be one of:

account-status-created

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "account-status-created",
  "event-payload" : {
    "account-url" : "/v0/bank/accounts/ba.JZjyiHUbXEOqy6YWyaR_Jw",
    "account-status" : "open"
  },
  "created-at" : "2024-01-01T13:30:00.000Z"
}

account-status-updated

{
  "created-at" : "2024-01-01T17:55:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "account-status-updated",
  "event-payload" : {
    "account-url" : "/v0/bank/accounts/ba.JZjyiHUbXEOqy6YWyaR_Jw",
    "account-status" : "closed"
  }
}

admission-created

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "admission-created",
  "event-payload" : {
    "admission-status" : "processing",
    "admission-scheme-information" : {
      "payment-scheme" : "fps",
      "end-to-end-identification" : "FQ36X73Jb44ZyQE331GYuxLuWM8N85"
    },
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "created-at" : "2024-01-01T13:20:00.123Z",
    "admission-url" : "/v0/admissions/pa.oRFnmBymXIKoknlbwroj8g",
    "unique-scheme-identifier" : "AB123456789123456N1020220426826159900     ",
    "original-unique-scheme-identifier" : "ZZ123456789123456N1020220426826159900     ",
    "account-url" : "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA"
  },
  "created-at" : "2024-01-01T13:30:00.000Z"
}

admission-updated

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "admission-updated",
  "event-payload" : {
    "admission-status" : "delivered",
    "admission-scheme-information" : {
      "payment-scheme" : "fps",
      "end-to-end-identification" : "FQ36X73Jb44ZyQE331GYuxLuWM8N85"
    },
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "created-at" : "2024-01-01T18:40:00.014Z",
    "admission-url" : "/v0/admissions/pa.oRFnmBymXIKoknlbwroj8g",
    "unique-scheme-identifier" : "AB123456789123456N1020220426826159900     ",
    "original-unique-scheme-identifier" : "ZZ123456789123456N1020220426826159900     ",
    "account-url" : "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA"
  },
  "created-at" : "2024-01-01T18:45:00.000Z"
}

decision-created

{
  "created-at" : "2020-01-01T00:00:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "decision-created",
  "event-payload" : {
    "legal-person-url" : "/v0/legal-persons/lp.7oKVYzj1V-2Y4gXEvdowYA",
    "verification-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA",
    "decision-outcome" : "accepted",
    "decision-maker" : "system",
    "decision-notes" : "auto-accepted",
    "created-at" : "1900-01-01T00:00:00.130Z"
  }
}

onboarding-application-created

{
  "created-at" : "2020-01-01T00:00:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "onboarding-application-created",
  "event-payload" : {
    "onboarding-application-url" : "/v0/onboarding/applications/oa.frwOX_PxXnG6PDDp7n6jwQ",
    "created-at" : "1900-01-01T08:55:12.120Z",
    "workflow-url" : "/v0/workflows/wf.ESz-T8PUUfyzYDrxBIUjJg",
    "legal-person-url" : "/v0/legal-persons/lp.7oKVYzj1V-2Y4gXEvdowYA",
    "verification-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA",
    "onboarding-application-status" : "processing"
  }
}

onboarding-application-updated

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "onboarding-application-updated",
  "event-payload" : {
    "onboarding-application-url" : "/v0/onboarding/applications/oa.frwOX_PxXnG6PDDp7n6jwQ",
    "created-at" : "2024-02-03T10:00:00.000Z",
    "workflow-url" : "/v0/workflows/wf.ESz-T8PUUfyzYDrxBIUjJg",
    "legal-person-url" : "/v0/legal-persons/lp.7oKVYzj1V-2Y4gXEvdowYA",
    "verification-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA",
    "decision-outcome" : "accepted",
    "onboarding-application-status" : "complete"
  },
  "created-at" : "2020-01-01T00:00:00.000Z"
}

payment-created

{
  "created-at" : "2024-01-01T15:45:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "payment-created",
  "event-payload" : {
    "creditor" : {
      "account-url" : "/v0/bank/accounts/ba.JZjyiHUbXEOqy6YWyaR_Jw",
      "creditor-type" : "griffin-bank-account"
    },
    "payment-direction" : "inbound-payment",
    "created-at" : "2024-01-01T15:00:20.237Z",
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "payment-reference" : "Dinner",
    "payment-amount" : {
      "currency" : "GBP",
      "value" : "16.00"
    },
    "payment-type" : "credit-transfer",
    "payment-admissions-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ/admissions",
    "payment-submissions-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ/submissions",
    "debtor" : {
      "account-url" : "/v0/bank/accounts/ba.JZjyiHUbXEOqy6YWyaR_Jw",
      "account-holder" : "ZxB7REHskP2ghVt9Lh23I5",
      "account-number" : "92526719",
      "account-number-code" : "bban",
      "bank-id" : "053515",
      "bank-id-code" : "gbdsc"
    }
  }
}

submission-created

{
  "created-at" : "2024-01-01T00:00:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "submission-created",
  "event-payload" : {
    "unique-scheme-identifier" : "AB123456789123456N1020220426826159900     ",
    "submission-status" : "processing",
    "submission-scheme-information" : {
      "scheme-status-code-description" : "The payment was accepted by the scheme",
      "scheme-status-code" : "0000",
      "end-to-end-identification" : "AHFIWSJFSOK",
      "payment-scheme" : "fps"
    },
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "created-at" : "2024-01-01T13:23:01.529Z",
    "submission-url" : "/v0/submissions/ps.oRFnmBymXIKoknlbwroj8g",
    "account-url" : "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA"
  }
}

submission-updated

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "submission-updated",
  "event-payload" : {
    "unique-scheme-identifier" : "AB123456789123456N1020220426826159900     ",
    "submission-status" : "delivered",
    "submission-scheme-information" : {
      "end-to-end-identification" : "FQ36X73Jb44ZyQE331GYuxLuWM8N85",
      "payment-scheme" : "fps"
    },
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "created-at" : "2024-01-01T10:38:32.973Z",
    "submission-url" : "/v0/submissions/ps.oRFnmBymXIKoknlbwroj8g",
    "account-url" : "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA"
  },
  "created-at" : "2024-01-01T00:00:00.000Z"
}

test-event

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "test-event",
  "event-payload" : { },
  "created-at" : "2020-01-01T00:00:00.000Z"
}

transaction-created

{
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "transaction-created",
  "event-payload" : {
    "account-transaction-url" : "/v0/bank/transactions/tr.KXXPmz1DVQS-X_HVLlTfWQ",
    "processed-at" : "2024-01-01T00:00:00.000Z",
    "post-datetime" : "2024-01-01T00:00:00.000Z",
    "balance-change-direction" : "debit",
    "effective-at" : "2024-01-01T00:00:00.000Z",
    "transaction-origin-type" : "payment",
    "payment-url" : "/v0/payments/pm.x2UcETQsU4enORzXPgL9bQ",
    "reference" : "Dinner",
    "account-url" : "/v0/bank/accounts/ba.JZjyiHUbXEOqy6YWyaR_Jw",
    "balance-change" : {
      "currency" : "GBP",
      "value" : "200.00"
    },
    "account-balance" : {
      "currency" : "GBP",
      "value" : "800.00"
    }
  },
  "created-at" : "2024-01-01T00:00:00.000Z"
}

verification-created

{
  "created-at" : "2020-01-01T00:00:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "verification-created",
  "event-payload" : {
    "workflow-url" : "/v0/workflows/wf.ESz-T8PUUfyzYDrxBIUjJg",
    "created-at" : "1900-01-01T00:00:01.063Z",
    "legal-person-url" : "/v0/legal-persons/lp.7oKVYzj1V-2Y4gXEvdowYA",
    "verification-status" : "in-progress",
    "verification-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA",
    "verification-checks-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA/checks"
  }
}

verification-resource-created

{
  "created-at" : "2025-02-13T17:15:17.865Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "verification-resource-created",
  "event-payload" : {
    "verification-resource-id" : "vr.aVi78djZTiSymFpU-zV60Q",
    "idv-check-status" : "errored",
    "idv-check-url" : "TEST",
    "verification-url" : "/v0/verifications/vn.0khMbqbVSomz4YDdG2YEPQ",
    "display-name" : "02t1y9jKLQp5CdQ4RsxiEuF7QuNDb177Q1Q9Dp0WSL28gDdia5gW7O8lhA2l9Y8w90B1eV1Q23fly6r20ENNJeR",
    "legal-person-url" : "/v0/legal-persons/lp.eopIWRwdVVuk6WsW9GzA2w",
    "idv-check-expires-at" : "2154-10-20",
    "organization-url" : "/v0/organizations/og.VxGLrVDKSB2e1Ps4TtJKrg",
    "verification-resource-type" : "idv-check"
  }
}

verification-resource-updated

{
  "created-at" : "2025-02-13T17:15:17.865Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "verification-resource-updated",
  "event-payload" : {
    "verification-resource-id" : "vr.aVi78djZTiSymFpU-zV60Q",
    "idv-check-status" : "errored",
    "idv-check-url" : "TEST",
    "verification-url" : "/v0/verifications/vn.0khMbqbVSomz4YDdG2YEPQ",
    "display-name" : "02t1y9jKLQp5CdQ4RsxiEuF7QuNDb177Q1Q9Dp0WSL28gDdia5gW7O8lhA2l9Y8w90B1eV1Q23fly6r20ENNJeR",
    "legal-person-url" : "/v0/legal-persons/lp.eopIWRwdVVuk6WsW9GzA2w",
    "idv-check-expires-at" : "2154-10-20",
    "organization-url" : "/v0/organizations/og.VxGLrVDKSB2e1Ps4TtJKrg",
    "verification-resource-type" : "idv-check"
  }
}

verification-updated

{
  "created-at" : "2020-01-01T00:00:00.000Z",
  "event-url" : "/v0/events/ev.d9ImQpReWO2qvCk_wMQjxw",
  "event-type" : "verification-updated",
  "event-payload" : {
    "verification-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA",
    "updated-at" : "1900-01-01T00:03:10.221Z",
    "legal-person-url" : "/v0/legal-persons/lp.7oKVYzj1V-2Y4gXEvdowYA",
    "workflow-url" : "/v0/workflows/wf.ESz-T8PUUfyzYDrxBIUjJg",
    "created-at" : "1900-01-01T00:00:00.408Z",
    "verification-checks-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA/checks",
    "risk-rating" : "low-risk",
    "verification-status" : "checks-complete",
    "verification-risk-assessments-url" : "/v0/verifications/vn.yY5hFwg3URayMz6iqXQcpA/risk-assessments"
  }
}
Authorizations:
api-key-auth
path Parameters
event-id
required
string

Responses

Response samples

Content type
application/json
{
  • "event-url": "/v0/events/ev.ICAgICAgICBldmVudC1pZA",
  • "event-type": "onboarding-application-updated",
  • "event-payload": { },
  • "created-at": "2019-08-24T14:15:22Z"
}

get-organizations-organization-id-events

List all events for an organization

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

filter[event-type][eq]
string
Enum: "onboarding-application-updated" "decision-created" "payment-created" "transaction-created" "verification-updated" "admission-updated" "verification-created" "account-status-updated" "onboarding-application-created" "submission-created" "test-event" "admission-created" "verification-resource-updated" "account-status-created" "verification-resource-created" "submission-updated"

The type of webhook event. Usually has the form {resource}-{operation}, e.g. payment-updated

filter[created-at][lte]
string <date-time>

Return only events with a created-at less than or equal to the given timestamp.

filter[created-at][lt]
string <date-time>

Return only events with a created-at less than the given timestamp.

filter[created-at][gte]
string <date-time>

Return only events with a created-at greater than or equal to the given timestamp.

filter[created-at][gt]
string <date-time>

Return only events with a created-at greater than the given timestamp.

Responses

Response samples

Content type
application/json
{
  • "events": [
    ],
  • "links": {
    }
}

Webhooks

get-organizations-organization-id-webhooks

Get all webhooks for the organization

Authorizations:
api-key-auth
path Parameters
organization-id
required
string

Responses

Response samples

Content type
application/json
{
  • "organization-webhooks": [
    ]
}

post-organizations-organization-id-webhooks

Create a webhook

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
webhook-destination-url
required
string (webhook-destination-url)

The callback URL of the webhook (HTTPS on port 443, public IP only)

webhook-description
string (webhook-description) non-empty

A description of the webhook

Responses

Request samples

Content type
application/json
{}

Response samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "activate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/activate",
  • "deactivate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/deactivate",
  • "created-at": "2019-08-24T14:15:22Z",
  • "webhook-state": "inactive",
  • "created-by": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "test-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/test",
  • "webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA",
  • "webhook-destination-url": "https://example.com/griffin/webhook/"
}

get-webhooks-webhook-id

Fetch a webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

Response samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "activate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/activate",
  • "deactivate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/deactivate",
  • "created-at": "2019-08-24T14:15:22Z",
  • "webhook-state": "inactive",
  • "created-by": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "test-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/test",
  • "webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA",
  • "webhook-destination-url": "https://example.com/griffin/webhook/"
}

delete-webhooks-webhook-id

Delete a webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

patch-webhooks-webhook-id

Update a webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string
Request Body schema: application/json
required
webhook-description
string (webhook-description) non-empty

A description of the webhook

Responses

Request samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook"
}

Response samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "activate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/activate",
  • "deactivate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/deactivate",
  • "created-at": "2019-08-24T14:15:22Z",
  • "webhook-state": "inactive",
  • "created-by": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "test-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/test",
  • "webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA",
  • "webhook-destination-url": "https://example.com/griffin/webhook/"
}

post-webhooks-webhook-id-actions-activate

Activate a webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

Response samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "activate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/activate",
  • "deactivate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/deactivate",
  • "created-at": "2019-08-24T14:15:22Z",
  • "webhook-state": "inactive",
  • "created-by": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "test-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/test",
  • "webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA",
  • "webhook-destination-url": "https://example.com/griffin/webhook/"
}

post-webhooks-webhook-id-actions-deactivate

Deactivate a webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

Response samples

Content type
application/json
{
  • "webhook-description": "Griffin API webhook",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "activate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/activate",
  • "deactivate-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/deactivate",
  • "created-at": "2019-08-24T14:15:22Z",
  • "webhook-state": "inactive",
  • "created-by": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "test-webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA/actions/test",
  • "webhook-url": "/v0/webhooks/wh.ICAgICAgd2ViaG9vay1pZA",
  • "webhook-destination-url": "https://example.com/griffin/webhook/"
}

get-webhooks-webhook-id-actions-test

Get the status of the latest test event

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

Response samples

Content type
application/json
Example
{
  • "webhook-request-status": "default",
  • "updated-at": "2019-08-24T14:15:22Z"
}

post-webhooks-webhook-id-actions-test

Send a test event to the webhook

Authorizations:
api-key-auth
path Parameters
webhook-id
required
string

Responses

Response samples

Content type
application/json
Example
{
  • "webhook-request-status": "default",
  • "updated-at": "2019-08-24T14:15:22Z"
}

Message Signatures

Message Signatures confirm the identity of the sender and integrity of request messages.

Key points:

  • Uses Ed25519 algorithm
  • Requires registering a public key with Griffin
  • Signatures cover specific message components
  • Includes Signature-Input and Signature headers

How to create message signatures provides a detailed guide.

HTTP Signature Debug

Yields the status of the http signature validation

header Parameters
header-signature
string

Message Signatures: signature header containing a signature label with the components used to generate the signature

header-signature-input
string

Message Signatures: signature-input header containing a signature label with the components used to generate the signature

Responses

Response samples

Content type
application/json
{
  • "message": "string",
  • "busy": true
}

HTTP Signature Debug

Yields the status of the http signature validation

header Parameters
header-signature
string

Message Signatures: signature header containing a signature label with the components used to generate the signature

header-signature-input
string

Message Signatures: signature-input header containing a signature label with the components used to generate the signature

Responses

Response samples

Content type
application/json
{
  • "message": "string",
  • "busy": true
}

HTTP Signature Debug

Yields the status of the http signature validation

header Parameters
header-signature
string

Message Signatures: signature header containing a signature label with the components used to generate the signature

header-signature-input
string

Message Signatures: signature-input header containing a signature label with the components used to generate the signature

Responses

Response samples

Content type
application/json
{
  • "message": "string",
  • "busy": true
}

HTTP Signature Debug

Yields the status of the http signature validation

header Parameters
header-signature
string

Message Signatures: signature header containing a signature label with the components used to generate the signature

header-signature-input
string

Message Signatures: signature-input header containing a signature label with the components used to generate the signature

Responses

Response samples

Content type
application/json
{
  • "message": "string",
  • "busy": true
}

HTTP Signature Debug

Yields the status of the http signature validation

header Parameters
header-signature
string

Message Signatures: signature header containing a signature label with the components used to generate the signature

header-signature-input
string

Message Signatures: signature-input header containing a signature label with the components used to generate the signature

Responses

Response samples

Content type
application/json
{
  • "message": "string",
  • "busy": true
}

Legal persons

In the Griffin API, your organization and your customers are all represented by legal persons. When you sign up with Griffin, your organization will be automatically assigned a unique legal person ID. When onboarding your customers, you will create legal persons to represent them.

Every legal person has a legal-person-type with the value: individual or corporation.

An individual represents an individual human.

A corporation represents any non-human entity (not just companies). A corporation should have at least one director or person with significant control attached to it, who must also be represented as a distinct individual legal person.

Legal person history

Claims

A claim is an unverified data point or series of data points attached to a legal person. Claims are verified by running a verification against the legal person.

delete-claims-claim-id

Deletes an existing claim about a Legal Person.

Authorizations:
api-key-auth
path Parameters
claim-id
required
string

Responses

Workflows

A workflow determines which checks will be run against a legal person as part of a verification

List organization workflows

Lists workflows for use when creating a verification.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "workflows": [
    ],
  • "links": {
    },
  • "meta": {
    }
}

Get workflow

Fetch the workflow.

Authorizations:
api-key-auth
path Parameters
workflow-id
required
string

Responses

Response samples

Content type
application/json
{
  • "workflow-url": "/v0/workflows/wf.ICAgICB3b3JrZmxvdy1pZA",
  • "display-name": "string",
  • "description": "string",
  • "legal-person-type": "individual",
  • "created-at": "2019-08-24T14:15:22Z",
  • "disabled?": true,
  • "required-claim-types": {
    },
  • "workflow-rules": [
    ]
}

Verifications

Get verification

Fetch the verification.

Authorizations:
api-key-auth
path Parameters
verification-id
required
string

Responses

Response samples

Content type
application/json
{
  • "verification-profiles-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA/profiles",
  • "verification-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA",
  • "verification-resources-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA/resources",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "workflow-url": "/v0/workflows/wf.ICAgICB3b3JrZmxvdy1pZA",
  • "created-at": "2019-08-24T14:15:22Z",
  • "verification-checks-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA/checks",
  • "risk-rating": "high-risk",
  • "verification-status": "in-progress",
  • "verification-risk-assessments-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA/risk-assessments"
}

Get verification profiles

GET a verification's profiles. A profile is the collection of claims used in a verification.

Authorizations:
api-key-auth
path Parameters
verification-id
required
string

Responses

Response samples

Content type
application/json
{
  • "verification-subject-profile": {
    },
  • "verification-related-party-profiles": [
    ]
}

Get verification resources

Yields details of the verification resources for this verification.

Authorizations:
api-key-auth
path Parameters
verification-id
required
string
query Parameters
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "verification-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA",
  • "legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "verification-resources": [
    ],
  • "links": {
    }
}

Decisions

Companies House

Lookup company

Lookup Companies House company by company number. Includes information about the company, its directors, and persons with significant control.

Authorizations:
api-key-auth
path Parameters
company-number
required
string

UK Companies House company number

Responses

Response samples

Content type
application/json
{
  • "company-address": {
    },
  • "date-of-latest-accounts": "2019-08-24",
  • "entity-name": "string",
  • "directors": [],
  • "date-of-latest-confirmation-statement": "2019-08-24",
  • "corporation-type": "private-limited-guarant-nsc-limited-exemption",
  • "company-status": "dissolved",
  • "accounts-overdue": true,
  • "sic-codes": [
    ],
  • "persons-with-significant-control": [],
  • "confirmation-statement-overdue": true,
  • "date-of-incorporation": "2019-08-24",
  • "entity-registration-number": "string"
}

Reliance onboarding

Reliance onboarding allows you to create and submit an application on behalf of your customer, using information about them you have already collected. For more information, checkout our onboarding guides.

Get onboarding application

Fetch an onboarding application.

Authorizations:
api-key-auth
path Parameters
onboarding-application-id
required
string

Responses

Response samples

Content type
application/json
Example
{
  • "onboarding-application-url": "/v0/onboarding/applications/oa.b25ib2FyZGluZy1hcHBsaQ",
  • "created-at": "2019-08-24T14:15:22Z",
  • "workflow-url": "/v0/workflows/wf.ICAgICB3b3JrZmxvdy1pZA",
  • "legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "verification-url": "/v0/verifications/vn.IHZlcmlmaWNhdGlvbi1pZA",
  • "onboarding-application-status": "processing"
}

Create an onboarding application

Create an onboarding application and submit it for processing.

The request body must include a workflow-url to determine checks to be performed by the verification. The workflow specified determines which claims must exist for the subject profile, and any related profile (i.e. directors and people with significant control of a corporation).

At the moment we only support 3 reliance workflows: Reliance LTD Company, Reliance Individual and Reliance Sole Trader.

You need to provide different claims depending on the type of customer you wish to onboard via reliance.

LTD Company Individual Sole trader
Subject profile:
uk-company-register
trading-address
reliance-verification

Related profiles:
individual-identity
individual-residence
reliance-verification		 Subject profile:
individual-identity
individual-residence
reliance-verification		 Subject profile:
business-name
individual-identity
individual-residence
reliance-verification

For more information, check out our onboarding guides.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
workflow-url
required
string (workflow-url)

A link to the workflow.

required
object (subject-profile)

The subject profile to be onboarded. Directors and PSCs must be declared via subject-association in related profiles instead of director & PSC claims in the subject profile.

Array of objects (related-profiles)

A list profiles related to the subject (e.g. directors, person with significant control).

Responses

Request samples

Content type
application/json
{}

Response samples

Content type
application/json
{
  • "onboarding-application-url": "/v0/onboarding/applications/oa.b25ib2FyZGluZy1hcHBsaQ",
  • "onboarding-application-status": "processing"
}

Bank accounts

Bank accounts are used for managing funds. Every bank account is opened against a bank product, which determines the account's behaviour (type, pooled vs dedicated, interest, notice period, etc.). Some account types are for managing your own funds and some are for managing your customers' funds. For information, check out our guides:

Get bank account

Fetch a bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string

Responses

Response samples

Content type
application/json
{
  • "account-submissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/submissions",
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "account-restricted": true,
  • "account-payments-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/payments",
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership",
  • "account-admissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/admissions",
  • "bank-product-type": "savings-account",
  • "account-mandates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/mandates",
  • "display-name": "Reserve a/c",
  • "controller-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "pooled-funds": true,
  • "accrued-interest": {
    },
  • "account-status": "closing",
  • "client-money-type": "designated-client-fund",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "closed-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "opened-at": "2019-08-24T14:15:22Z",
  • "close-account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/actions/close",
  • "available-balance": {
    },
  • "pooled-account-membership-updates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership-updates",
  • "bank-account-restrictions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/restrictions",
  • "bank-addresses": [
    ],
  • "account-transactions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/transactions",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "bank-account-events-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/events",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "primary-account": false,
  • "account-balance": {
    },
  • "savings-type": "easy-access"
}

patch-bank-accounts-bank-account-id

Update a bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
Request Body schema: application/json
required
display-name
required
string (display-name) non-empty

A human readable label for an entity

Responses

Request samples

Content type
application/json
{
  • "display-name": "string"
}

Response samples

Content type
application/json
{
  • "account-submissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/submissions",
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "account-restricted": true,
  • "account-payments-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/payments",
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership",
  • "account-admissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/admissions",
  • "bank-product-type": "savings-account",
  • "account-mandates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/mandates",
  • "display-name": "Reserve a/c",
  • "controller-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "pooled-funds": true,
  • "accrued-interest": {
    },
  • "account-status": "closing",
  • "client-money-type": "designated-client-fund",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "closed-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "opened-at": "2019-08-24T14:15:22Z",
  • "close-account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/actions/close",
  • "available-balance": {
    },
  • "pooled-account-membership-updates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership-updates",
  • "bank-account-restrictions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/restrictions",
  • "bank-addresses": [
    ],
  • "account-transactions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/transactions",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "bank-account-events-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/events",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "primary-account": false,
  • "account-balance": {
    },
  • "savings-type": "easy-access"
}

post-bank-accounts-bank-account-id-actions-close

Close a bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string

Responses

Response samples

Content type
application/json
{
  • "account-submissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/submissions",
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "account-restricted": true,
  • "account-payments-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/payments",
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership",
  • "account-admissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/admissions",
  • "bank-product-type": "savings-account",
  • "account-mandates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/mandates",
  • "display-name": "Reserve a/c",
  • "controller-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "pooled-funds": true,
  • "accrued-interest": {
    },
  • "account-status": "closing",
  • "client-money-type": "designated-client-fund",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "closed-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "opened-at": "2019-08-24T14:15:22Z",
  • "close-account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/actions/close",
  • "available-balance": {
    },
  • "pooled-account-membership-updates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership-updates",
  • "bank-account-restrictions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/restrictions",
  • "bank-addresses": [
    ],
  • "account-transactions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/transactions",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "bank-account-events-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/events",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "primary-account": false,
  • "account-balance": {
    },
  • "savings-type": "easy-access"
}

Get bank account product

Fetches a bank account product by ID

Authorizations:
api-key-auth
path Parameters
bank-product-id
required
string

Responses

Response samples

Content type
application/json
{
  • "notice-period": {
    },
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "bank-account-product-status": "inactive",
  • "commission": {
    },
  • "bank-account-product-class": "savings",
  • "display-name": "Operational",
  • "funding-type": "pooled",
  • "bank-account-product-accounts-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA/accounts",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "interest": {
    },
  • "owner-type": "individual"
}

Open bank account with a product

Opens a bank account of the given bank product

Authorizations:
api-key-auth
path Parameters
bank-product-id
required
string
Request Body schema: application/json
required
display-name
string (display-name) non-empty

A human readable label for an entity

owner-url (string) or owner-url (string) (owner-url)

Link to the legal person that represents the owner of the account.

beneficiary-url (string) or beneficiary-url (string) (beneficiary-url)

Link to the legal person that represents the beneficiary of the account.

Responses

Request samples

Content type
application/json
{
  • "display-name": "string",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA"
}

Response samples

Content type
application/json
{
  • "account-submissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/submissions",
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "account-restricted": true,
  • "account-payments-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/payments",
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership",
  • "account-admissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/admissions",
  • "bank-product-type": "savings-account",
  • "account-mandates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/mandates",
  • "display-name": "Reserve a/c",
  • "controller-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "pooled-funds": true,
  • "accrued-interest": {
    },
  • "account-status": "closing",
  • "client-money-type": "designated-client-fund",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "closed-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "opened-at": "2019-08-24T14:15:22Z",
  • "close-account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/actions/close",
  • "available-balance": {
    },
  • "pooled-account-membership-updates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership-updates",
  • "bank-account-restrictions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/restrictions",
  • "bank-addresses": [
    ],
  • "account-transactions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/transactions",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "bank-account-events-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/events",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "primary-account": false,
  • "account-balance": {
    },
  • "savings-type": "easy-access"
}

List bank accounts

Yields a list of all bank accounts under the control of this Organization.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
filter[account-restricted][eq]
boolean

Specifies whether the bank account has restrictions applied by Griffin.

filter[beneficiary-url][eq]
string

Link to the legal person that represents the beneficiary of the account.

page[size]
integer <int64> [ 1 .. 200 ]
include
Array of strings
Items Enum: "beneficiary" "owner"

For each bank account returned, include its owner and/or beneficiary in the response under the included.legal-persons attribute.

filter[account-status][in][]
Array of strings
Items Enum: "closing" "open" "closed" "opening"
sort
string
Enum: "-created-at" "display-name" "created-at" "-display-name"
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

filter[pooled-funds][eq]
boolean

Specifies whether the bank account holds funds belonging to multiple beneficiaries.

filter[bank-product-type][in][]
Array of strings
Items Enum: "savings-account" "client-money-account" "safeguarding-account" "embedded-account" "operational-account"
filter[owner-url][eq]
string

Link to the legal person that represents the owner of the account.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "accounts": [
    ],
  • "links": {
    },
  • "included": null
}

Open bank account Deprecated

Open a new bank account

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
Any of
Any of
required
owner-url (string) or owner-url (string) (owner-url)

Link to the legal person that represents the owner of the account.

display-name
string (display-name) non-empty

A human readable label for an entity

savings-type
required
string
Value: "easy-access"
bank-product-type
required
string
Value: "savings-account"

Responses

Request samples

Content type
application/json
Example
{
  • "bank-product-type": "savings-account",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "display-name": "string",
  • "savings-type": "easy-access"
}

Response samples

Content type
application/json
{
  • "account-submissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/submissions",
  • "bank-account-product-url": "/v0/bank/products/bp.IGJhbmstcHJvZHVjdC1pZA",
  • "account-restricted": true,
  • "account-payments-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/payments",
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership",
  • "account-admissions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/admissions",
  • "bank-product-type": "savings-account",
  • "account-mandates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/mandates",
  • "display-name": "Reserve a/c",
  • "controller-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "pooled-funds": true,
  • "accrued-interest": {
    },
  • "account-status": "closing",
  • "client-money-type": "designated-client-fund",
  • "owner-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "closed-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "opened-at": "2019-08-24T14:15:22Z",
  • "close-account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/actions/close",
  • "available-balance": {
    },
  • "pooled-account-membership-updates-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership-updates",
  • "bank-account-restrictions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/restrictions",
  • "bank-addresses": [
    ],
  • "account-transactions-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/transactions",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "bank-account-events-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/events",
  • "beneficiary-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "primary-account": false,
  • "account-balance": {
    },
  • "savings-type": "easy-access"
}

List bank account products

Returns a paginated list of the organization's bank account products.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
filter[status][in][]
Array of strings
Items Enum: "inactive" "active"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "bank-account-products": [
    ],
  • "links": {
    },
  • "meta": {
    }
}

Bank account restrictions

Restrictions prevent payments on a bank account. A freeze blocks outbound payments while still allowing inbound payments. A block prevents both inbound and outbound payments.

Restrictions can be applied at any point in the account lifecycle (opening, open, closing, or closed), and multiple restrictions can be active on the same account simultaneously. Each restriction is independent — lifting one does not affect others.

Restrictions can only be updated or lifted if active.

For more information, see our guide on managing restrictions.

Get bank account restriction

Fetches details of a single bank account restriction.

The response includes the restriction's current status (active or lifted), type, reason code, legal status, and who applied it.

If the restriction was applied by Griffin using a sensitive reason code (griffin-decision, law-enforcement, sanctions, or terrorist-financing), the type, reason code, and legal status fields are omitted from the response.

Action URLs (update-bank-account-restriction-url, lift-bank-account-restriction-url) are included only when you are authorised to perform those actions on the restriction.

Authorizations:
api-key-auth
path Parameters
bank-account-restriction-id
required
string

Responses

Response samples

Content type
application/json
{
  • "lift-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/lift",
  • "restriction-status": "lifted",
  • "restriction-legal-status": "not-applicable",
  • "bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw",
  • "created-at": "2019-08-24T14:15:22Z",
  • "update-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/update",
  • "bank-account-restriction-events-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/events",
  • "restriction-reason-code": "suspicious",
  • "restriction-type": "block",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "restriction-applied-by": {
    }
}

Lift bank account restriction

Lifts a bank account restriction.

Marks the restriction as lifted, removing its effect on the account. Notes are required to provide context for the removal.

Authorizations:
api-key-auth
path Parameters
bank-account-restriction-id
required
string
Request Body schema: application/json
required
notes
required
string <= 2000 characters

Responses

Request samples

Content type
application/json
{
  • "notes": "string"
}

Response samples

Content type
application/json
{
  • "lift-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/lift",
  • "restriction-status": "lifted",
  • "restriction-legal-status": "not-applicable",
  • "bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw",
  • "created-at": "2019-08-24T14:15:22Z",
  • "update-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/update",
  • "bank-account-restriction-events-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/events",
  • "restriction-reason-code": "suspicious",
  • "restriction-type": "block",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "restriction-applied-by": {
    }
}

Update bank account restriction

Updates a bank account restriction.

Allows you to change the restriction type, reason code, and/or legal status of an active restriction. Notes are always required to provide context for the change.

Only the fields you include in the request body will be updated. Omitted fields are left unchanged.

Authorizations:
api-key-auth
path Parameters
bank-account-restriction-id
required
string
Request Body schema: application/json
required
restriction-type
string
Enum: "block" "freeze"
restriction-reason-code
string
Enum: "fraud-app-perpetrator" "customer-request" "dormant" "other" "terrorist-financing" "law-enforcement" "sanctions" "risk-appetite" "deceased" "fraud-app-victim" "fraud-3rd-party" "money-laundering" "fraud-1st-party"
restriction-legal-status
string
Enum: "not-applicable" "conviction-confirmed" "formal-charge-filed" "suspected"
notes
required
string <= 2000 characters

Responses

Request samples

Content type
application/json
{
  • "restriction-type": "block",
  • "restriction-reason-code": "fraud-app-perpetrator",
  • "restriction-legal-status": "not-applicable",
  • "notes": "string"
}

Response samples

Content type
application/json
{
  • "lift-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/lift",
  • "restriction-status": "lifted",
  • "restriction-legal-status": "not-applicable",
  • "bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw",
  • "created-at": "2019-08-24T14:15:22Z",
  • "update-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/update",
  • "bank-account-restriction-events-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/events",
  • "restriction-reason-code": "suspicious",
  • "restriction-type": "block",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "restriction-applied-by": {
    }
}

List bank account restrictions

Lists restrictions on a bank account.

Returns all restrictions (both active and lifted) by default. Use filter[restriction-status][eq]=active to return only active restrictions.

See get restriction for details on field visibility and redaction.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
filter[restriction-status][eq]
string
Enum: "lifted" "active"

Return only restrictions with the given restriction-status.

sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "bank-account-restrictions": [
    ],
  • "links": {
    }
}

Apply bank account restriction

Applies a restriction to a bank account.

Reason codes

Code Description
customer-request Account holder requested temporary restriction pending further instruction.
deceased Account holder confirmed deceased. Restricted pending estate administration.
dormant Account inactive for 2+ years (no customer-initiated transactions).
fraud-1st-party Account holder is suspected perpetrator committing fraud against Griffin or third parties.
fraud-3rd-party Account holder is victim of account takeover by unauthorised party.
fraud-app-perpetrator Account holder is perpetrator receiving fraudulent payments from victims.
fraud-app-victim Account holder is victim tricked into authorising payments to a fraudulent recipient.
law-enforcement Restricted following law enforcement request, court order, or legal obligation.
money-laundering Suspected money laundering detected. Restricted pending investigation.
other Restriction applied for reasons not covered by standard categories.
risk-appetite Account activity exceeds risk appetite thresholds. Restricted pending review.
sanctions Account holder or associated party identified on a sanctions list. Restricted pending investigation.
terrorist-financing Suspected terrorist financing. Restricted pending investigation.
Code Description
suspected Restriction due to suspicion of offence. No formal charges filed.
formal-charge-filed Customer formally charged with an offence. Legal proceedings active.
conviction-confirmed Customer convicted. Deposits connected with the conviction are ineligible for FSCS compensation.
not-applicable Legal status not relevant (e.g. customer requests, dormant accounts).
Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
Request Body schema: application/json
required
restriction-type
required
string
Enum: "block" "freeze"
restriction-reason-code
required
string
Enum: "fraud-app-perpetrator" "customer-request" "dormant" "other" "terrorist-financing" "law-enforcement" "sanctions" "risk-appetite" "deceased" "fraud-app-victim" "fraud-3rd-party" "money-laundering" "fraud-1st-party"
restriction-legal-status
required
string
Enum: "not-applicable" "conviction-confirmed" "formal-charge-filed" "suspected"
notes
required
string <= 2000 characters

Responses

Request samples

Content type
application/json
{
  • "restriction-type": "block",
  • "restriction-reason-code": "fraud-app-perpetrator",
  • "restriction-legal-status": "not-applicable",
  • "notes": "string"
}

Response samples

Content type
application/json
{
  • "lift-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/lift",
  • "restriction-status": "lifted",
  • "restriction-legal-status": "not-applicable",
  • "bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw",
  • "created-at": "2019-08-24T14:15:22Z",
  • "update-bank-account-restriction-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/actions/update",
  • "bank-account-restriction-events-url": "/v0/bank/account-restrictions/ri.YmFuay1hY2NvdW50LXJlcw/events",
  • "restriction-reason-code": "suspicious",
  • "restriction-type": "block",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "restriction-applied-by": {
    }
}

Bank account holds

get-bank-accounts-bank-account-id-holds

Lists all holds on a bank account. Use filter[status][in][] to filter by specific statuses. Use filter[updated-at][gte] to return only holds last updated at or after a timestamp. Use filter[origin-type][eq] to filter by origin type.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
filter[origin-type][eq]
string
Value: "card-transaction"
filter[updated-at][gte]
string <date-time>

Return only holds updated at or after the given timestamp.

filter[status][in][]
Array of strings
Items Enum: "released" "placed"
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "holds": [
    ],
  • "links": {
    }
}

get-bank-holds-hold-id

Fetches a single hold by ID.

Authorizations:
api-key-auth
path Parameters
hold-id
required
string

Responses

Response samples

Content type
application/json
{
  • "expires-at": "2019-08-24T14:15:22Z",
  • "origin-type": "card-transaction",
  • "updated-at": "2019-08-24T14:15:22Z",
  • "origin-metadata": {
    },
  • "direction": "debit",
  • "status": "released",
  • "created-at": "2019-08-24T14:15:22Z",
  • "release-reason": "string",
  • "amount": {
    },
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "hold-url": "/v0/bank/holds/ho.ICAgICAgICAgaG9sZC1pZA",
  • "account-transactions": [
    ]
}

Pooled account membership

List legal person in a pooled account membership

List legal persons in a pooled account membership

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
include
Array of strings
Items Enum: "latest-risk-rating" "legal-person" "latest-verification"

For each member returned, include its legal person details, latest verification (if one exists), and/or latest risk rating (if one exists) in the response under the included attribute.

page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "pool-members": [
    ],
  • "links": {
    },
  • "meta": {
    },
  • "included": {
    }
}

Manage pooled account members

Add and update the legal persons in a pooled account membership. Limited to 1000 legal persons per operation.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
Request Body schema: application/json
required
required
Array of legal-person-url (string) or legal-person-url (string) (legal-person-url)
required
Array of legal-person-url (string) or legal-person-url (string) (legal-person-url)

Responses

Request samples

Content type
application/json
{
  • "additions": [
    ],
  • "deletions": [
    ]
}

Response samples

Content type
application/json
{
  • "pooled-account-memberships-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA/membership"
}

Payments

A payment captures the intent to move funds from a bank account to another bank account. Outbound payments can be made from your bank account to a payee. Griffin accepts inbound payments to your bank accounts on your behalf. If it's your first time using our payments API, check out our guide for sending payments

Get payment admission

Yields an admission.

Authorizations:
api-key-auth
path Parameters
admission-id
required
string

Responses

Response samples

Content type
application/json
{
  • "admission-status": "cancelled",
  • "admission-scheme-information": {
    },
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "created-at": "2019-08-24T14:15:22Z",
  • "admission-url": "/v0/admissions/pa.ICAgIGFkbWlzc2lvbi1pZA",
  • "unique-scheme-identifier": "PGIT2IS7AJG77D2HK23020240212826NatWes ",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "original-unique-scheme-identifier": "PGIT2IS7AJG77D2HK23020240212826NatWes "
}

List bank account admissions

Lists admissions targeting a bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

filter[created-at][lte]
string <date-time>

Return only resources with a created-at less than or equal to the given timestamp.

filter[created-at][lt]
string <date-time>

Return only resources with a created-at less than the given timestamp.

filter[created-at][gte]
string <date-time>

Return only resources with a created-at greater than or equal to the given timestamp.

filter[created-at][gt]
string <date-time>

Return only resources with a created-at greater than the given timestamp.

filter[admission-status][in][]
Array of strings
Items Enum: "cancelled" "processing" "returned" "delivered"

Responses

Response samples

Content type
application/json
{
  • "admissions": [
    ],
  • "links": {
    }
}

List bank account payments

Lists payments made from a bank account.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

include
Array of strings
Items Enum: "bank-account" "rejected-by" "latest-submission.created-by" "created-by" "latest-submission"

For each payment returned, include its bank account, latest submission (if one exists), rejecting user (if one exists), and/or creating user (if one exists) in the response under the included attribute.

filter[rejected][eq]
boolean

Specifies whether the payment has been rejected.

filter[payment-direction][eq]
string
Enum: "inbound-payment" "outbound-payment"

Whether the payment is moving money into or out of the account.

Array of submission-status (string) or no-latest-submission-status (string)
filter[created-at][lte]
string <date-time>

Return only resources with a created-at less than or equal to the given timestamp.

filter[created-at][lt]
string <date-time>

Return only resources with a created-at less than the given timestamp.

filter[created-at][gte]
string <date-time>

Return only resources with a created-at greater than or equal to the given timestamp.

filter[created-at][gt]
string <date-time>

Return only resources with a created-at greater than the given timestamp.

Responses

Response samples

Content type
application/json
{
  • "payments": [
    ],
  • "links": {
    }
}

Create payment

Registers a new payment request for the bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
Request Body schema: application/json
required
required
payee (object) or griffin-bank-account (object) or uk-domestic (object) (creditor)
required
object (payment-amount)

Compound value representing both the currency and amount of money being sent.

payment-reference
string (payment-reference) [ 1 .. 35 ] characters
Default: "Sent from X"

Free-text field to help identify and categorise payments.

X is the legal person who owns the account. This will be the entity-name or business-name for companies, or the given-name and surname for individuals. This is also subject to a 35 character limit, so longer names may be cut off. When making a payment to a payee with an associated Confirmation of Payee request containing secondary reference data (SRD), the SRD will take precedence over any payment-reference set in the payment creation request.

Responses

Request samples

Content type
application/json
{
  • "creditor": {
    },
  • "payment-amount": {
    },
  • "payment-reference": "test reference"
}

Response samples

Content type
application/json
{
  • "created-by-user": {
    },
  • "creditor": {
    },
  • "rejected-at": "2019-08-24T14:15:22Z",
  • "latest-submission-url": "/v0/submissions/ps.ICAgc3VibWlzc2lvbi1pZA",
  • "rejected-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "payment-direction": "inbound-payment",
  • "created-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "created-via": "api",
  • "created-at": "2019-08-24T14:15:22Z",
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "payment-reference": "test reference",
  • "payment-amount": {
    },
  • "payment-type": "credit-transfer",
  • "ultimate-debtor": {
    },
  • "payment-admissions-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA/admissions",
  • "payment-submissions-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA/submissions",
  • "debtor": {
    },
  • "rejection-reason": "string",
  • "mandate-url": "/v0/mandates/mn.ICAgICAgbWFuZGF0ZS1pZA",
  • "rejected-by-user": {
    }
}

List bank account submissions

Lists submissions originating from a bank account

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

filter[submission-status][in][]
Array of strings
Items Enum: "scheduled" "failed" "processing" "returned" "delivered"
filter[created-at][lte]
string <date-time>

Return only resources with a created-at less than or equal to the given timestamp.

filter[created-at][lt]
string <date-time>

Return only resources with a created-at less than the given timestamp.

filter[created-at][gte]
string <date-time>

Return only resources with a created-at greater than or equal to the given timestamp.

filter[created-at][gt]
string <date-time>

Return only resources with a created-at greater than the given timestamp.

Responses

Response samples

Content type
application/json
{
  • "submissions": [
    ],
  • "links": {
    }
}

get-organizations-organization-id-payments

List payments in your organization.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

include
Array of strings
Items Enum: "bank-account" "rejected-by" "latest-submission.created-by" "created-by" "latest-submission"

For each payment returned, include its bank account, latest submission (if one exists), rejecting user (if one exists), and/or creating user (if one exists) in the response under the included attribute.

filter[rejected][eq]
boolean

Specifies whether the payment has been rejected.

filter[payment-direction][eq]
string
Enum: "inbound-payment" "outbound-payment"

Whether the payment is moving money into or out of the account.

Array of submission-status (string) or no-latest-submission-status (string)
filter[created-at][lte]
string <date-time>

Return only resources with a created-at less than or equal to the given timestamp.

filter[created-at][lt]
string <date-time>

Return only resources with a created-at less than the given timestamp.

filter[created-at][gte]
string <date-time>

Return only resources with a created-at greater than or equal to the given timestamp.

filter[created-at][gt]
string <date-time>

Return only resources with a created-at greater than the given timestamp.

Responses

Response samples

Content type
application/json
{
  • "payments": [
    ],
  • "links": {
    }
}

Get payment

Yields payment details

Authorizations:
api-key-auth
path Parameters
payment-id
required
string

Responses

Response samples

Content type
application/json
{
  • "created-by-user": {
    },
  • "creditor": {
    },
  • "rejected-at": "2019-08-24T14:15:22Z",
  • "latest-submission-url": "/v0/submissions/ps.ICAgc3VibWlzc2lvbi1pZA",
  • "rejected-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "payment-direction": "inbound-payment",
  • "created-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "created-via": "api",
  • "created-at": "2019-08-24T14:15:22Z",
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "payment-reference": "test reference",
  • "payment-amount": {
    },
  • "payment-type": "credit-transfer",
  • "ultimate-debtor": {
    },
  • "payment-admissions-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA/admissions",
  • "payment-submissions-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA/submissions",
  • "debtor": {
    },
  • "rejection-reason": "string",
  • "mandate-url": "/v0/mandates/mn.ICAgICAgbWFuZGF0ZS1pZA",
  • "rejected-by-user": {
    }
}

patch-payments-payment-id

Updates a payment

Authorizations:
api-key-auth
path Parameters
payment-id
required
string
Request Body schema: application/json
required
rejection-reason
string or null (non-empty-string) non-empty

Responses

Request samples

Content type
application/json
{
  • "rejection-reason": "string"
}

List payment admissions

Lists admissions for a payment. A payment may have at most one admission.

Authorizations:
api-key-auth
path Parameters
payment-id
required
string

Responses

Response samples

Content type
application/json
{
  • "admissions": [
    ]
}

List payment submissions

Lists submissions for a payment. The presence of a submission means that the payment has been submitted.

Authorizations:
api-key-auth
path Parameters
payment-id
required
string

Responses

Response samples

Content type
application/json
{
  • "submissions": [
    ]
}

Submit payment

Submits a previously created payment for execution.

You can submit payments over different payment schemes, check out our payments guides to help decide which scheme best suites your use case.

Authorizations:
api-key-auth
path Parameters
payment-id
required
string
Request Body schema: application/json
required
payment-scheme
required
string (payment-scheme)
Enum: "fps" "book-transfer"

Specifies the scheme over which a payment is executed.

Responses

Request samples

Content type
application/json
{
  • "payment-scheme": "fps"
}

Response samples

Content type
application/json
{
  • "submission-scheme-information": {
    },
  • "submission-status": "scheduled",
  • "created-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "scheduled-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "submission-status-reason": "string",
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "unique-scheme-identifier": "PGIT2IS7AJG77D2HK23020240212826NatWes ",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "submission-url": "/v0/submissions/ps.ICAgc3VibWlzc2lvbi1pZA"
}

Get payment submission

Yields a submission.

Authorizations:
api-key-auth
path Parameters
submission-id
required
string

Responses

Response samples

Content type
application/json
{
  • "submission-scheme-information": {
    },
  • "submission-status": "scheduled",
  • "created-by-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "scheduled-at": "2019-08-24T14:15:22Z",
  • "created-at": "2019-08-24T14:15:22Z",
  • "submission-status-reason": "string",
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "unique-scheme-identifier": "PGIT2IS7AJG77D2HK23020240212826NatWes ",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "submission-url": "/v0/submissions/ps.ICAgc3VibWlzc2lvbi1pZA"
}

Transactions

A transaction represents funds deposited or withdrawn from a bank account. Read more about transactions in our guides.

List transactions

Lists transactions on a bank account. Use an Accept: application/vnd.griffin+xero-csv header to receive transactions in a CSV format suitable for importing into Xero.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
sort
string
Enum: "-created-at" "processed-at" "-processed-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

include
string
Value: "payment"

For each transaction returned, include its payment (if one exists) in the response under the included attribute.

filter[processed-at][lte]
string <date-time>

Return only transactions processed at or before the given timestamp.

filter[processed-at][lt]
string <date-time>

Return only transactions processed before the given timestamp.

filter[processed-at][gte]
string <date-time>

Return only transactions processed at or after the given timestamp.

filter[processed-at][gt]
string <date-time>

Return only transactions processed after the given timestamp.

Responses

Response samples

Content type
application/json
{
  • "account-transactions": [
    ],
  • "links": {
    },
  • "included": null
}

Get transaction

Yields a bank account transaction

Authorizations:
api-key-auth
path Parameters
transaction-id
required
string

Responses

Response samples

Content type
application/json
{
  • "account-transaction-url": "/v0/bank/transactions/tr.ICB0cmFuc2FjdGlvbi1pZA",
  • "processed-at": "2019-08-24T14:15:22Z",
  • "post-datetime": "2019-08-24T14:15:22Z",
  • "balance-change-direction": "credit",
  • "origin-metadata": {
    },
  • "effective-at": "2019-08-24T14:15:22Z",
  • "transaction-origin-type": "interest",
  • "payment-url": "/v0/payments/pm.ICAgICAgcGF5bWVudC1pZA",
  • "reference": "Restaurant Charge - Sushi Palace",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "balance-change": {
    },
  • "account-balance": {
    },
  • "description": "Interest earned in April from Alexa account."
}

Mandates

A direct debit mandate authorises an originator to collect Direct Debit payments from a bank account.

List bank account mandates

Lists direct debit mandates for a bank account.

Authorizations:
api-key-auth
path Parameters
bank-account-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "mandates": [
    ],
  • "links": {
    }
}

Get mandate

Fetch a mandate.

Authorizations:
api-key-auth
path Parameters
mandate-id
required
string

Responses

Response samples

Content type
application/json
Example
{
  • "collection-amount": {
    },
  • "cancellation-reason": "cancelled-by-griffin",
  • "mandate-payments-url": "/v0/mandates/mn.ICAgICAgbWFuZGF0ZS1pZA/payments",
  • "mandate-scheme-information": {
    },
  • "last-used-at": "2019-08-24T14:15:22Z",
  • "creditor": {
    },
  • "status": "cancelled",
  • "created-at": "2019-08-24T14:15:22Z",
  • "collection-frequency": "yearly",
  • "reference": "string",
  • "debtor": {
    },
  • "mandate-url": "/v0/mandates/mn.ICAgICAgbWFuZGF0ZS1pZA"
}

Update mandate

Update a mandate. Currently only cancellation is supported: set status to cancelled with a cancellation-reason.

Authorizations:
api-key-auth
path Parameters
mandate-id
required
string
Request Body schema: application/json
required
status
string (status)
Enum: "cancelled" "active" "expired"
cancellation-reason
string (cancellation-reason)
Enum: "cancelled-by-griffin" "debtor-deceased" "cancelled-by-creditor" "account-closed" "cancelled-by-debtor"

Responses

Request samples

Content type
application/json
{
  • "status": "cancelled",
  • "cancellation-reason": "cancelled-by-griffin"
}

List mandate payments

Lists payments for a direct debit mandate.

Authorizations:
api-key-auth
path Parameters
mandate-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

include
Array of strings
Items Enum: "bank-account" "rejected-by" "latest-submission.created-by" "created-by" "latest-submission"

For each payment returned, include its bank account, latest submission (if one exists), rejecting user (if one exists), and/or creating user (if one exists) in the response under the included attribute.

Responses

Response samples

Content type
application/json
{
  • "payments": [
    ],
  • "links": {
    }
}

Payees

A payee is the person or business to whom you are paying money. When you create a payee, you need to provide their name ("account-holder"), and their bank account number ("account-number") and sort code ("bank-id").

You may also register the outcome of a Confirmation of Payee (CoP) check with your payee by supplying a cop-request-url.

Read more about payees in our guides.

Get payee

Returns the payee details.

Authorizations:
api-key-auth
path Parameters
payee-id
required
string

Responses

Response samples

Content type
application/json
{
  • "cop-request-url": "/v0/cop-request/cp.ICBjb3AtcmVxdWVzdC1pZA",
  • "payee-url": "/v0/payees/pe.ICAgICAgICBwYXllZS1pZA",
  • "account-number": "12345678",
  • "account-holder": "string",
  • "legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "bank-id": "123456",
  • "created-at": "2019-08-24T14:15:22Z",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "payee-status": "deactivated",
  • "country-code": "GB"
}

Update payee

Updates an existing payee.

You can update a payee with the outcome of a CoP request by supplying a cop-request-url.

A payee can be deactivated by updating the payee-status of an active payee to deactivated. Any attempt to create or submit a payment to a deactivated payee will fail.

A 422 is served when attempting to deactivate an already-deactivated payee.

Authorizations:
api-key-auth
path Parameters
payee-id
required
string
Request Body schema: application/json
required
cop-request-url (string) or cop-request-url (string) (cop-request-url)

Link to a CoP request.

payee-status
string (payee-status)
Value: "deactivated"

The status of the payee; you can only make payments to active payees.

Responses

Request samples

Content type
application/json
{
  • "cop-request-url": "/v0/cop-request/cp.ICBjb3AtcmVxdWVzdC1pZA",
  • "payee-status": "deactivated"
}

Response samples

Content type
application/json
{
  • "cop-request-url": "/v0/cop-request/cp.ICBjb3AtcmVxdWVzdC1pZA",
  • "payee-url": "/v0/payees/pe.ICAgICAgICBwYXllZS1pZA",
  • "account-number": "12345678",
  • "account-holder": "string",
  • "legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "bank-id": "123456",
  • "created-at": "2019-08-24T14:15:22Z",
  • "account-url": "/v0/bank/accounts/ba.IGJhbmstYWNjb3VudC1pZA",
  • "payee-status": "deactivated",
  • "country-code": "GB"
}

Confirmation of payee

Confirmation of Payee (CoP) is a payee checking service that helps prevent UK domestic payments from being sent to the wrong account. Read more about Confirmation of Payee in our guides.

Create a CoP request

Create a Confirmation of Payee (CoP) request.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
account-number
required
string (account-number) = 8 characters ^[0-9]{8}$

A UK account number.

bank-id
required
string (bank-id) = 6 characters ^[0-9]{6}$

A UK sort code.

account-classification
required
string (account-classification)
Enum: "personal" "business"
name
required
any (name)

The name of the payee.

required
requester-legal-person-url (string) or requester-legal-person-url (string) (requester-legal-person-url)

A contextual link to the legal person.

secondary-reference-data
any (secondary-reference-data)

Secondary reference data, such as a building society roll number or a credit card number.

Responses

Request samples

Content type
application/json
{
  • "account-number": "12345678",
  • "bank-id": "123456",
  • "account-classification": "personal",
  • "name": "John Smith",
  • "requester-legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "secondary-reference-data": "1234567890"
}

Response samples

Content type
application/json
{
  • "cop-request-url": "/v0/cop-request/cp.ICBjb3AtcmVxdWVzdC1pZA",
  • "account": {
    },
  • "cop-response": {
    }
}

[Alpha] Simulate a CoP request

Simulate the creation of a CoP Request. Note: This is an alpha API and may change anytime.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
cop-simulation-type
required
string
Enum: "match-name-business-personal" "account-not-found" "full-match" "no-match-name" "no-match-secondary-ref" "close-match-name-business-personal" "close-match-name-personal-business" "account-switched" "close-match-name" "account-not-supported" "match-name-personal-business"

The type of simulation to run.

Request Body schema: application/json
required
account-number
required
string (account-number) = 8 characters ^[0-9]{8}$

A UK account number.

bank-id
required
string (bank-id) = 6 characters ^[0-9]{6}$

A UK sort code.

account-classification
required
string (account-classification)
Enum: "personal" "business"
name
required
any (name)

The name of the payee.

required
requester-legal-person-url (string) or requester-legal-person-url (string) (requester-legal-person-url)

A contextual link to the legal person.

secondary-reference-data
any (secondary-reference-data)

Secondary reference data, such as a building society roll number or a credit card number.

Responses

Request samples

Content type
application/json
{
  • "account-number": "12345678",
  • "bank-id": "123456",
  • "account-classification": "personal",
  • "name": "John Smith",
  • "requester-legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "secondary-reference-data": "1234567890"
}

Response samples

Content type
application/json
{
  • "cop-request-url": "/v0/cop-request/cp.ICBjb3AtcmVxdWVzdC1pZA",
  • "account": {
    },
  • "cop-response": {
    }
}

Open banking

Open banking allows regulated third-party providers (TPPs) to access your customers' account data or initiate payments on their behalf. Griffin partners with tell.money to provide the TPP-facing open banking APIs. You handle the consent flow — authenticating your customer and registering the consent with Griffin — and Griffin handles the resource requests from TPPs.

For a full walkthrough, see our open banking integration guide.

Register Tell consent

Register a Tell consent for open banking on your customers' accounts.

After granting a consent with Tell Money, register it with Griffin so that Griffin can validate Tell's subsequent resource requests.

tell-consent-permissions behaviour depends on tell-consent-scope:

  • accounts scope requires at least one permission; this controls which AISP operations the TPP can perform (e.g. reading balances or transactions).
  • payments scope does not use permissions — Tell Money returns them empty and Griffin authorises payment operations from the scope alone. Pass [] (matching Tell's response) or any value; the field is still required in the request.
Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
tell-consent-id
required
string <uuid>
tell-gateway-id
required
string <uuid>
tell-consent-scope
required
string
Enum: "payments" "accounts"
tell-consent-permissions
required
Array of strings unique
Items Enum: "ReadPartyPSU" "ReadTransactionsDetail" "ReadProducts" "ReadStatementsDetail" "ReadDirectDebits" "ReadTransactionsDebits" "ReadTransactionsCredits" "ReadBeneficiariesDetail" "ReadBalances" "ReadPAN" "ReadScheduledPaymentsDetail" "ReadAccountsDetail" "ReadAccountsBasic" "ReadOffers" "ReadBeneficiariesBasic" "ReadStandingOrdersBasic" "ReadStandingOrdersDetail" "ReadTransactionsBasic" "ReadParty" "ReadStatementsBasic" "ReadScheduledPaymentsBasic"

Permissions granted by the consent. For accounts scope, must list at least one permission. For payments scope, pass [] — Tell Money returns no permissions and Griffin authorises payments from the scope alone.

required
Array of account-url (string) or account-url (string) (account-url)
tell-consent-expiry
string <date-time> (inst)

ISO 8601 formatted date-time.

Responses

Request samples

Content type
application/json
{
  • "tell-consent-id": "d1d7d560-30c6-44be-8719-f086af283754",
  • "tell-gateway-id": "75c57ab5-f954-4104-9657-176490e1577d",
  • "tell-consent-scope": "payments",
  • "tell-consent-permissions": [
    ],
  • "bank-account-urls": [
    ],
  • "tell-consent-expiry": "2019-08-24T14:15:22Z"
}

Response samples

Content type
application/json
{
  • "tell-consent-expiry": "2019-08-24T14:15:22Z",
  • "tell-gateway-id": "75c57ab5-f954-4104-9657-176490e1577d",
  • "created-at": "2019-08-24T14:15:22Z",
  • "tell-consent-id": "d1d7d560-30c6-44be-8719-f086af283754",
  • "tell-consent-scope": "payments",
  • "tell-consent-consumed-at": "2019-08-24T14:15:22Z",
  • "tell-consent-url": "/v0/open-banking/tell-consents/00000000-0000-0000-0000-000000000000",
  • "tell-consent-status": "revoked",
  • "tell-consent-permissions": [
    ],
  • "bank-account-urls": [
    ],
  • "tell-consent-revoked-at": "2019-08-24T14:15:22Z"
}

Organizations

The organization resource represents your company and acts as a container for the majority of other resources, including legal persons and bank accounts. When you register for an account with Griffin, a new organization is created alongside your user account (unless you have received an invitation to join an existing organization). Your user account is associated with an organization via a membership.

Your organization can be in one of two modes:

  • test-mode for organizations created when you sign up for the sandbox.
  • live-mode for when you go live with Griffin.

Learn more about sandbox vs. live mode.

Get organization

Yields the organization details

Authorizations:
api-key-auth
path Parameters
organization-id
required
string

Responses

Response samples

Content type
application/json
{
  • "own-legal-person-url": "/v0/legal-persons/lp.IGxlZ2FsLXBlcnNvbi1pZA",
  • "organization-mode": "test-mode",
  • "organization-memberships-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/memberships",
  • "organization-invitations-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/invitations",
  • "organization-payments-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/payments",
  • "organization-bank-account-products-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/bank/products",
  • "organization-onboarding-applications-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/onboarding/applications",
  • "display-name": "Company Org",
  • "organization-bank-accounts-search-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/bank/accounts/search",
  • "organization-api-keys-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/api-keys",
  • "organization-live-access-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/live-access",
  • "organization-webhooks-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/webhooks",
  • "organization-workflows-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/workflows",
  • "organization-bank-accounts-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/bank/accounts",
  • "available-roles": [
    ],
  • "organization-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA",
  • "organization-payments-search-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/payments/search",
  • "organization-individuals-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/individuals",
  • "organization-corporations-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/corporations",
  • "organization-legal-persons-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/legal-persons",
  • "organization-legal-persons-search-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/legal-persons/search",
  • "organization-events-url": "/v0/organizations/og.IG9yZ2FuaXphdGlvbi1pZA/events"
}

Users

Users represent individuals who use the Griffin platform. A user must have a membership in at least one organization, and may have memberships in multiple organizations.

Get user

Get the User resource for the current user.

Authorizations:
api-key-auth
path Parameters
user-id
required
string

Responses

Response samples

Content type
application/json
{
  • "user-email": "user@example.com",
  • "user-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA",
  • "user-username": "user@example.com",
  • "api-keys-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA/api-keys",
  • "user-memberships-url": "/v0/users/ur.ICAgICAgICAgdXNlci1pZA/memberships",
  • "given-name": "string",
  • "surname": "string"
}

Roles

A role represents a pre-defined set of capabilities that can be assigned to a user via their membership in an organization. By default, the first user in an organization gets assigned an administration role. Subsequent users get assigned the most limited set of capabilities.

List membership roles

Returns the roles assigned to this membership.

Authorizations:
api-key-auth
path Parameters
membership-id
required
string

Responses

Response samples

Content type
application/json
{
  • "roles": [
    ]
}

Update role

Assigns roles to the membership.

A 422 Unprocessable Entity is served if either:

  • one role url provided in the body is not in the Organisations "available-roles"
  • the request attempts to remove the last admin role of the organization, thus making the organisation unusable.
Authorizations:
api-key-auth
path Parameters
membership-id
required
string
Request Body schema: application/json
required
required
Array of role-url (string) or role-url (string) (role-url)
Array
Any of
string (role-url)

Link to the role.

Responses

Request samples

Content type
application/json
{
  • "role-urls": [
    ]
}

Response samples

Content type
application/json
{
  • "roles": [
    ]
}

List roles

Yields a list of all Role resources.

Responses

Response samples

Content type
application/json
{
  • "roles": [
    ]
}

Get role

Yields the Role resource.

path Parameters
role-id
required
string

Responses

Response samples

Content type
application/json
{
  • "display-name": "string",
  • "description": "string",
  • "role-url": "/v0/roles/re.ICAgICAgICAgcm9sZS1pZA",
  • "role-category": "string"
}

Memberships

Memberships represents the relationship between a user and an organization. A membership must have at least one role assigned to it.

Get membership

Returns the user's membership information.

Authorizations:
api-key-auth
path Parameters
membership-id
required
string

Responses

Response samples

Content type
application/json
{
  • "membership-url": "/v0/memberships/mp.ICAgbWVtYmVyc2hpcC1pZA",
  • "membership-roles-url": "/v0/memberships/mp.ICAgbWVtYmVyc2hpcC1pZA/roles",
  • "organization": {
    },
  • "roles": [
    ],
  • "user": {
    },
  • "created-at": "2019-08-24T14:15:22Z"
}

Delete membership

Removes a user from an organization.

Authorizations:
api-key-auth
path Parameters
membership-id
required
string

Responses

List organization memberships

Returns this organization's memberships.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "memberships": [
    ],
  • "links": {
    }
}

List user memberships

Returns this user's memberships.

Authorizations:
api-key-auth
path Parameters
user-id
required
string
query Parameters
sort
string
Enum: "-created-at" "created-at"
page[size]
integer <int64> [ 1 .. 200 ]
page[after]
string <byte>

A base64 encoded opaque string returned in paginated responses.

page[before]
string <byte>

A base64 encoded opaque string returned in paginated responses.

Responses

Response samples

Content type
application/json
{
  • "memberships": [
    ],
  • "links": {
    }
}

Invitations

Invitations enable users to create new memberships for their organization. The new membership is only created once when the invitation is accepted.

If the email-address provided is linked to an existing user, the invitation will create a membership for that user. This does not affect any other memberships the user may have.

If the email-address is not linked to an existing user, the invitee will be prompted to set up a Griffin account when they accept the invitation.

When a new membership is created, the invited user is assigned the role with the most limited set of capabilities by default.

Create invitation

POST creates a new invitation to the organization.

Sends an email invitation to join the organization to the specified email-address.

Authorizations:
api-key-auth
path Parameters
organization-id
required
string
Request Body schema: application/json
required
email-address
required
string (email-address) .+\@.+\..+

Responses

Request samples

Content type
application/json
{
  • "email-address": "user@example.com"
}