FDX (Financial Data Exchange) is a nonprofit standard body whose FDX API specifies a secure, common format for sharing consumer financial data. It is widely adopted for open banking and open finance in North America.
FDX
FDX (Financial Data Exchange) is a nonprofit, member-led standards body whose FDX API defines a common, secure way for consumers to share their financial data with third parties. Instead of screen-scraping and credential sharing, FDX specifies a RESTful, token-based interface — anchored in OAuth and consent — that banks, aggregators, and fintechs can all implement the same way. It has become the de facto open-banking data standard across the United States and Canada.
- A common data model - Standardized resources for accounts, transactions, balances, and more, so every consumer of the API sees the same shapes.
- Consent and permissioning - A structured consent grant that lets a consumer authorize, scope, and revoke access to their own financial data.
- Token-based access over OAuth - Third parties call the API with scoped access tokens rather than holding a customer’s banking credentials.
- Member-governed evolution - Banks, aggregators, fintechs, and networks steer the spec together, keeping it aligned across the ecosystem.
- North American open finance - The reference standard that regulators and networks point to for compliant data sharing.
In real API operations, FDX is how the U.S. moves from screen-scraping to sanctioned data access — it is the interface the CFPB’s Personal Financial Data Rights rule under Dodd-Frank Section 1033 points to as a qualified data-sharing method. Providers implementing FDX pair its data model with a financial-grade auth layer like FAPI, giving aggregators a consistent, permissioned contract to integrate against. For the API economy, FDX turns “let consumers share their bank data” from a compliance headache into a standard, machine-readable API surface that agents and applications can adopt once and reuse across institutions.
Governed by these regulations
A standard is the machine-readable contract; a regulation is the law that requires it. These are the regulations that mandate or drive this standard, catalogued at regulations.apievangelist.com.
CFPB Personal Financial Data Rights Rule
The US rule that recognizes this standard as a qualified data-sharing interface.
Dodd-Frank Act Section 1033
The statute that authorizes the US personal-financial-data-access right this standard serves.
Referenced on the API Evangelist blog
Where this standard shows up across sixteen years of my writing at apievangelist.com — how it fits into API design, governance, and the agentic turn.
FDX, 1033, and API Nutrients
2024-10-23