--- title: In Australian Banking, the API Is a Commodity — CDR Made... description: Analysis of Australia's Consumer Data Right (CDR) banking API mandate finds that fifty accredited banks all re-host the identical Consumer Data Standards... canonical: https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: In Australian Banking, the API Is a Commodity — CDR Made It Table Stakes | daily.dev og:description: Analysis of Australia's Consumer Data Right (CDR) banking API mandate finds that fifty accredited banks all re-host the identical Consumer Data Standards... og:url: https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx og:image: https://api.daily.dev/og/posts/bpGwLWrBx.png og:image:alt: In Australian Banking, the API Is a Commodity — CDR Made It Table Stakes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # In Australian Banking, the API Is a Commodity — CDR Made It Table Stakes **[API Evangelist](https://daily.dev/sources/apievangelist)** · 5 min read · 2 upvotes · 0 comments ## Summary Analysis of Australia's Consumer Data Right (CDR) banking API mandate finds that fifty accredited banks all re-host the identical Consumer Data Standards Banking API v1.36.0 contract, making the API itself a commodity rather than a differentiator. Every resource is read-only (GET only, no payment initiation, unlike UK/EU open banking), gated behind OAuth2/OIDC with FAPI over mTLS aside from the public Product Reference Data endpoint. Only two banks, Up (Bendigo & Adelaide Bank) and partially Commonwealth Bank, ship anything beyond the mandated baseline, such as webhooks, event contracts, or a branded developer portal. The argument is that mandated compliance produced existence but not quality, and that real value will accrue in developer experience, documentation, rate limits, and trust posture built around the commodity contract rather than the API resource itself. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Do Australian banks under the Consumer Data Right (CDR) support payment initiation through their APIs? No, Australian CDR banking APIs are limited to data sharing, not payment initiation. Every resource across the fifty accredited banks—products, accounts, balances, transactions, direct-debits, scheduled-payments, payees, customer—is a read-only GET endpoint. There is no POST /payments or write action in the baseline Consumer Data Standards Banking API v1.36.0, unlike the UK and EU regimes where payment initiation is included. _daily.dev surfaces analysis like this for developers evaluating open banking or agentic finance integrations._ ### Which Australian banks offer developer APIs beyond the mandated CDR baseline? Only two out of fifty accredited banks go beyond the mandated Consumer Data Right baseline. Up, a brand of Bendigo & Adelaide Bank, built its own developer API with attachments, categories, tags, webhooks, a real AsyncAPI event contract, published rate limits, and self-serve personal-access tokens. Commonwealth Bank partially differentiates by wrapping CDR endpoints in a first-party portal with a business-banking variant. The other forty-eight banks ship the verbatim Data Standards Body file unchanged. _Track which fintech platforms actually differentiate on developer experience before committing an integration on daily.dev._ ### What OpenAPI spec version do Australian banks use for the Consumer Data Right (CDR) banking API? Australian banks under the Consumer Data Right re-host the identical Consumer Data Standards Banking API v1.36.0, published as a single OpenAPI contract by the Data Standards Body. NAB's own provenance notes describe the surface as 'NOT NAB-proprietary,' and Suncorp, Teachers Mutual, Newcastle Permanent, IMB, Macquarie, and ANZ carry the same near-identical note, meaning fifty banks run one API deployed fifty times. _Developers assessing open banking specs can follow contract versioning details like this on daily.dev._ ## Similar posts on daily.dev - [Standards and Artifacts: Why the Agentic Turn Rewards What Australia's Banks Already Ship](https://daily.dev/posts/standards-and-artifacts-why-the-agentic-turn-rewards-what-australia-s-banks-already-ship-culkzeqpi) · API Evangelist · 1 upvotes · 0 comments - [Low Composite, High Agent-Readiness: The Australian Banking Paradox](https://daily.dev/posts/low-composite-high-agent-readiness-the-australian-banking-paradox-ldd6lhunn) · API Evangelist · 0 upvotes · 0 comments - [FAPI for Developers: Here Is Your Guide](https://daily.dev/posts/fapi-for-developers-here-is-your-guide-bhasbajlk) · Auth0 · 1 upvotes · 0 comments - [The open banking divide in South Africa](https://daily.dev/posts/the-open-banking-divide-in-south-africa-o5ydtb6fe) · TechCentral · 0 upvotes · 0 comments - [How Secure Is The World’s Most-Used Banking API?](https://daily.dev/posts/how-secure-is-the-world-s-most-used-banking-api--2c0jf6eip) · Nordic APIs · 0 upvotes · 0 comments --- Tags: [#architecture](https://daily.dev/tags/architecture), [#fintech](https://daily.dev/tags/fintech), [#regulation](https://daily.dev/tags/regulation), [#openapi](https://daily.dev/tags/openapi) [View this post on daily.dev](https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"In Australian Banking, the API Is a Commodity — CDR Made It Table Stakes","url":"https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx"},"datePublished":"2026-08-22T11:47:05.086Z","dateModified":"2026-09-14T08:37:37.252Z","description":"Analysis of Australia's Consumer Data Right (CDR) banking API mandate finds that fifty accredited banks all re-host the identical Consumer Data Standards...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9aa468c9380c117934f2f0f3b7f6c716?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9aa468c9380c117934f2f0f3b7f6c716?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"API Evangelist","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"API Evangelist","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/a36244ae67bc4f41a605f780267ecb5f","url":"https://daily.dev/sources/apievangelist"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"architecture,fintech,regulation,openapi","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"API Evangelist","item":"https://daily.dev/sources/apievangelist"},{"@type":"ListItem","position":3,"name":"In Australian Banking, the API Is a Commodity — CDR Made It Table Stakes"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/in-australian-banking-the-api-is-a-commodity-cdr-made-it-table-stakes-bpgwlwrbx#faq","mainEntity":[{"@type":"Question","name":"Do Australian banks under the Consumer Data Right (CDR) support payment initiation through their APIs?","acceptedAnswer":{"@type":"Answer","text":"No, Australian CDR banking APIs are limited to data sharing, not payment initiation. Every resource across the fifty accredited banks—products, accounts, balances, transactions, direct-debits, scheduled-payments, payees, customer—is a read-only GET endpoint. There is no POST /payments or write action in the baseline Consumer Data Standards Banking API v1.36.0, unlike the UK and EU regimes where payment initiation is included. daily.dev surfaces analysis like this for developers evaluating open banking or agentic finance integrations."}},{"@type":"Question","name":"Which Australian banks offer developer APIs beyond the mandated CDR baseline?","acceptedAnswer":{"@type":"Answer","text":"Only two out of fifty accredited banks go beyond the mandated Consumer Data Right baseline. Up, a brand of Bendigo & Adelaide Bank, built its own developer API with attachments, categories, tags, webhooks, a real AsyncAPI event contract, published rate limits, and self-serve personal-access tokens. Commonwealth Bank partially differentiates by wrapping CDR endpoints in a first-party portal with a business-banking variant. The other forty-eight banks ship the verbatim Data Standards Body file unchanged. Track which fintech platforms actually differentiate on developer experience before committing an integration on daily.dev."}},{"@type":"Question","name":"What OpenAPI spec version do Australian banks use for the Consumer Data Right (CDR) banking API?","acceptedAnswer":{"@type":"Answer","text":"Australian banks under the Consumer Data Right re-host the identical Consumer Data Standards Banking API v1.36.0, published as a single OpenAPI contract by the Data Standards Body. NAB's own provenance notes describe the surface as 'NOT NAB-proprietary,' and Suncorp, Teachers Mutual, Newcastle Permanent, IMB, Macquarie, and ANZ carry the same near-identical note, meaning fifty banks run one API deployed fifty times. Developers assessing open banking specs can follow contract versioning details like this on daily.dev."}}]} ```