Payment Service Directive 3 🇪🇺

"PSD3"

Our API streamlines TPP validation under PSD2 into a single, secure POST operation — designed for seamless integration across any environment.

Simply submit the incoming eIDAS certificate to our endpoint, along with your dedicated API token and the operating jurisdictions (via the cc parameter). The service automatically:

• Validates the certificate’s authenticity and integrity

• Confirms the TPP’s authorization status with the home NCA

• Verifies passporting rights in all specified host jurisdictions

• Returns a structured, audit-ready response

All in compliance with PSD2 RTS (Article 34) and EBA Register requirements.

Example Request

curl --location 'https://api.tppvalidation.com/v4?cc=FR%2CIT' \
--header 'Content-Type: text/plain' \
--header 'Authorization: Bearer ••••••' \
--data '-----BEGIN CERTIFICATE-----
MIIJSDCCBzCgAwIBAgIQesclwrTXYEDoig5XrlFQTDANBgkqhkiG9w0BAQsFADBz
[...full base64-encoded certificate content...]
-----END CERTIFICATE-----'

Note: Use the Bearer scheme for the Authorization header. The request body must contain the full, base64-encoded eIDAS certificate (including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines).

Confirming licenses for requested jurisdictions

To streamline the validation process, our service requires one or more jurisdiction codes to be specified in the "cc" request parameter. This enables automatic confirmation of registered passporting rights for the license holder across both the home jurisdiction and any notified host jurisdictions.

• The cc parameter accepts one or more NCA jurisdiction codes (ISO 3166-1 alpha-2, uppercase).

• Multiple values are URL-encoded and comma-separated (e.g., ?cc=FR,SE).

?cc=FR,SE