Product Overview
The Payment Request API lets you or your customer request payment links from Rabobank through your application. Use this API to generate payment links as part of your own billing process or as part of your customer’s billing process.
Rabobank business customers can send payment links directly from your software.
Prerequisites
To ensure a smooth start with the Payment Request API, your business should meet the following conditions:
- High degree of automation.
- Professional IT environment and good infrastructure.
- Permanently available security expertise to use Accounts & Payments APIs and safeguarding its security.
- An EV SSL certificate for transport .
- An EV SSL signing certificate for signing messages.
- An active Rabobank business account.
Connect to the Payment Request API
- Subscribe your application to Payment Request.
- Use the OAuth scope:
prs.paymentrequest.read-write.
To know more read the manual that connects to your use case:
Authentication & Authorization
The APIs use token-based authentication. This authentication consists of two elements:
- Consent granted by the account holder.
- An access token that includes this consent.
To set this up use the Authorization Services API.
Use the /authorize endpoint to request consent for a specific API scope. After the account holder grants consent, the API returns an authorization code. Use this authorization code in a /token request to retrieve an access token.
Use the returned access token as a Bearer token in the Authorization header of each API request.
Read more about Oauth PSD2 and Premium.
Relevant scope for oauth2 access code flow
| Scope name | Description |
|---|---|
| prs.paymentrequest.read-write | Consent for payment request |
Always use the authorization and token URLs provided by the Authorization Services API.
Rate Limiting
A default rate limit applies to all APIs. The rate limit can be shared across operations or defined per operation. The table below shows the rate limits for this API.
| Operation | Type | Limit (API calls / s) | Counts towards shared limit |
|---|---|---|---|
GET /payment-requests | Shared | 5 | Yes |
POST /payment-requests | Shared | 5 | Yes |
GET /payment-requests/accounts | Shared | 5 | Yes |
GET /payment-requests/{id}/qr-codes | Shared | 5 | Yes |
GET /payment-requests/{id} | Shared | 5 | Yes |
DELETE /payment-requests/{id} | Shared | 5 | Yes |
GET /payment-requests/{id}/transactions/{transactionId} | Shared | 5 | Yes |
| All (premium) Oauth calls | Shared | 5 | Yes |
Business payment request characteristics
Rabobank business customers can create payment requests for business accounts using this API.
| Business | |
|---|---|
| Maximum amount | € 50.000,- |
| Variable amount | Optional |
| Link can be used | Once |
| Link expires after | 100 days |
| Add a client reference | Optional |
| Indicate the number of payers | Not supported (always 1) |
| More information (in Dutch) | Business Payment Request |