Skip to content
/Public Keys

Bermuda Commercial Bank RESTful Open Banking API Implementation (v1)

The Bermuda Commercial Bank (BCB) RESTful Open Banking API provides secure, programmatic access to BCB's banking services, enabling developers to integrate financial services into their applications.

Key Features

  • Account details retrieval
  • Internal transfers
  • Payments (Swift)
  • Virtual Accounts
  • Transaction information access
  • Robust security and compliance
  • Comprehensive documentation

Available Environments

UAT Environment

URL: https://api-uat.bcb.bm

Purpose: Testing and integration

Production Environment

URL: https://api.bcb.bm

Purpose: Live production use

Download OpenAPI description
open-banking-api.json
open-banking-api.yaml
Overview
URL
https://www.bcb.bm
Bermuda Commercial Bank Limited, 34 Bermudiana Road, Hamilton HM 11, Bermuda
enquiries@bcb.bm
Languages
Servers
Mock server
https://developers.bcb.bm/_mock/apis/open-banking-api/open-banking-api/
UAT Environment - Used for testing and integration purposes
https://api-uat.bcb.bm/
Production Environment - Live environment for production use
https://api.bcb.bm/

Accounts

Operations

Credentials

Operations

Fx Quotes

Operations

Internal Transfers

Operations

Payments

Operations

Public Keys

Operations

Gets the bank's current signing public key.

Request

Gets the bank’s current signing public key in JWKS format. Returns a JWKS containing one RSA key with fields:

  • kid: rsa-{keyVersion}
  • kty: RSA
  • alg: PS256
  • use: sig
  • n/e: base64url-encoded modulus and exponent This endpoint requires OpenBankApi authorization; no private key material is exposed.
Security
Authorization
curl -i -X GET \
  https://developers.bcb.bm/_mock/apis/open-banking-api/open-banking-api/v1/.well-known/jwks.json \
  -H 'Authorization: Bearer <YOUR_jwt_HERE>'

Responses

JWKS payload with the active signing key.

Bodyapplication/json
keysArray of objects(JwksKey)required

Collection of JSON Web Keys (JWK). Only one key is expected.

keys[].​ktystringrequired

Key type. Always "RSA" for this endpoint.

keys[].​usestringrequired

Intended use of the key. "sig" indicates signature verification.

keys[].​algstringrequired

Algorithm used with the key. "PS256" indicates RSA-PSS with SHA-256.

keys[].​kidstringrequired

Key identifier in the form "rsa-{version}".

keys[].​nstringrequired

Base64Url-encoded RSA modulus.

keys[].​estringrequired

Base64Url-encoded RSA public exponent (typically "AQAB").

Response
application/json
{
  "keys": [
    { … }
  ]
}

Token

Operations

Transactions

Operations

Virtual Accounts

Operations

Notifications

Operations

Background Jobs

Operations

System

Operations