API bancaire pour plus de 10 000 banques dans l'UE.
Opérationnel en 30 minutes.

curl -X POST https://nevlo.io/oauth/register \
  -H "Content-Type: application/json" \
  -d '{
    "client_name": "My App",
    "redirect_uris": ["https://myapp.de/callback"],
    "grant_types": ["authorization_code", "refresh_token"],
    "token_endpoint_auth_method": "none"
  }'

# → { "client_id": "nevlo_abc123...", ... }

// 1. Rediriger l'utilisateur vers l'autorisation
const authUrl = "https://nevlo.io/oauth/authorize?" + new URLSearchParams({
  response_type: "code",
  client_id: CLIENT_ID,
  redirect_uri: "https://myapp.de/callback",
  scope: "read:accounts read:transactions read:cashflow",
  code_challenge: codeChallenge,
  code_challenge_method: "S256",
});

// 2. Échanger le code d'autorisation contre un jeton
const token = await fetch("https://nevlo.io/oauth/token", {
  method: "POST",
  headers: { "Content-Type": "application/x-www-form-urlencoded" },
  body: new URLSearchParams({
    grant_type: "authorization_code",
    code: authCode,
    client_id: CLIENT_ID,
    redirect_uri: "https://myapp.de/callback",
    code_verifier: codeVerifier,
  }),
}).then(r => r.json());

const response = await fetch("https://nevlo.io/api/v1/accounts", {
  headers: { "Authorization": `Bearer ${accessToken}` },
});
const { accounts } = await response.json();
// → [{ id, iban, accountName, balance, currency, bankConnection: { bankName } }]

// Les webhooks se gèrent depuis le tableau de bord Nevlo :
// Tableau de bord → Webhooks → Nouveau point de terminaison
//
// Events: transaction.new
// URL: https://myapp.de/webhook
//
// Charge utile du webhook lors d'une nouvelle transaction :
{
  "event": "transaction.new",
  "data": {
    "transactions": [
      { "id": "...", "amount": -54.99, "merchantName": "Adobe", ... }
    ]
  }
}
// Header: X-Nevlo-Signature: t=1234567890,v1=<hmac_sha256>