Up API


const splitCode = sampleCode.split('');
const formatCode = code => code;
const numberOfTriangles = 1;const arbitraryNumberOfTrianglesLongArray = new Array(numberOfTriangles)  .fill(1)  .map((_, index) => formatCode(splitCode.slice(index * 2).join('')));
const changeIntervalMs = 1000;
const useTriangleIndex = () => {  const [triangleIndex, setTriangleIndex] = useState(0);  const updateTriangle = React.useCallback(() => {    const newIndex = (triangleIndex + 1) % numberOfTriangles;    setTriangleIndex(newIndex);  }, [triangleIndex]);  useInterval(updateTriangle, changeIntervalMs);  return triangleIndex;};
type CodeBlockProps = {code: string};
const codeBlockStyle = {whiteSpace: 'normal', opacity: 0.8, lineBreak: 'anywhere'};
const leftTriangletyle = {  shapeOutside: 'polygon(0 0, 100% 0, 0 100%)',  height: 700,};const rightTriangleStyle = {  shapeOutside: 'polygon(0 0, 100% 0, 100% 100%)',  height: 700,};
const MemoizedCodeBlock = React.memo<CodeBlockProps>(function Code({code}: CodeBlockProps) {  return (    <CodeBlock      language="jsx"      id="triangle-code-container" // used as a css selector      className="text-center"      code={code}      style={codeBlockStyle}    >      <div className="w-1/2 float-left" style={leftTriangletyle} />      <div className="w-1/2 float-right" style={rightTriangleStyle} />    </CodeBlock>  );});
const Triangle = function Triangle({className, code}: Props) {  return (    <div className={classnames('overflow-hidden w-full h-full text-center', className)}>      <MemoizedCodeBlock code={code} />    </div>  );};
type ContainerProps = {|  className: string,  style: Object,|};
const MemoizedTriangleCode = React.memo<ContainerProps>(function TriangleCode({className, style}: ContainerProps) {  const triangleIndex = useTriangleIndex();  return (    <div style={style} className={className}>      {arbitraryNumberOfTrianglesLongArray.map((code, index) => (        <Triangle code={code} key={index} className={triangleIndex !== index ? 'hidden' : ''} />      ))}    </div>  );});
export default MemoizedTriangleCode;



const formatCode = code => code;
const numberOfTriangles = 1;const arbitraryNumberOfTrianglesLongArray = new Array(numberOfTriangles)  .fill(1)  .map((_, index) => formatCode(splitCode.slice(index * 2).join('')));
const changeIntervalMs = 1000;
const useTriangleIndex = () => {  const [triangleIndex, setTriangleIndex] = useState(0);  const updateTriangle = React.useCallback(() => {    const newIndex = (triangleIndex + 1) % numberOfTriangles;    setTriangleIndex(newIndex);  }, [triangleIndex]);  useInterval(updateTriangle, changeIntervalMs);  return triangleIndex;};
type CodeBlockProps = {code: string};
const codeBlockStyle = {whiteSpace: 'normal', opacity: 0.8, lineBreak: 'anywhere'};
const leftTriangletyle = {  shapeOutside: 'polygon(0 0, 100% 0, 0 100%)',  height: 700,};const rightTriangleStyle = {  shapeOutside: 'polygon(0 0, 100% 0, 100% 100%)',  height: 700,};
const MemoizedCodeBlock = React.memo<CodeBlockProps>(function Code({code}: CodeBlockProps) {  return (    <CodeBlock      language="jsx"      id="triangle-code-container" // used as a css selector      className="text-center"      code={code}      style={codeBlockStyle}    >      <div className="w-1/2 float-left" style={leftTriangletyle} />      <div className="w-1/2 float-right" style={rightTriangleStyle} />    </CodeBlock>  );});
const Triangle = function Triangle({className, code}: Props) {  return (    <div className={classnames('overflow-hidden w-full h-full text-center', className)}>      <MemoizedCodeBlock code={code} />    </div>  );};
type ContainerProps = {|  className: string,  style: Object,|};
const MemoizedTriangleCode = React.memo<ContainerProps>(function TriangleCode({className, style}: ContainerProps) {  const triangleIndex = useTriangleIndex();  return (    <div style={style} className={className}>      {arbitraryNumberOfTrianglesLongArray.map((code, index) => (        <Triangle code={code} key={index} className={triangleIndex !== index ? 'hidden' : ''} />      ))}    </div>  );});
export default MemoizedTriangleCode;



const numberOfTriangles = 1;const arbitraryNumberOfTrianglesLongArray = new Array(numberOfTriangles)  .fill(1)  .map((_, index) => formatCode(splitCode.slice(index * 2).join('')));
const changeIntervalMs = 1000;
const useTriangleIndex = () => {  const [triangleIndex, setTriangleIndex] = useState(0);  const updateTriangle = React.useCallback(() => {    const newIndex = (triangleIndex + 1) % numberOfTriangles;    setTriangleIndex(newIndex);  }, [triangleIndex]);  useInterval(updateTriangle, changeIntervalMs);  return triangleIndex;};
type CodeBlockProps = {code: string};
const codeBlockStyle = {whiteSpace: 'normal', opacity: 0.8, lineBreak: 'anywhere'};
const leftTriangletyle = {  shapeOutside: 'polygon(0 0, 100% 0, 0 100%)',  height: 700,};const rightTriangleStyle = {  shapeOutside: 'polygon(0 0, 100% 0, 100% 100%)',  height: 700,};
const MemoizedCodeBlock = React.memo<CodeBlockProps>(function Code({code}: CodeBlockProps) {  return (    <CodeBlock      language="jsx"      id="triangle-code-container" // used as a css selector      className="text-center"      code={code}      style={codeBlockStyle}    >      <div className="w-1/2 float-left" style={leftTriangletyle} />      <div className="w-1/2 float-right" style={rightTriangleStyle} />    </CodeBlock>  );});
const Triangle = function Triangle({className, code}: Props) {  return (    <div className={classnames('overflow-hidden w-full h-full text-center', className)}>      <MemoizedCodeBlock code={code} />    </div>  );};
type ContainerProps = {|  className: string,  style: Object,|};
const MemoizedTriangleCode = React.memo<ContainerProps>(function TriangleCode({className, style}: ContainerProps) {  const triangleIndex = useTriangleIndex();  return (    <div style={style} className={className}>      {arbitraryNumberOfTrianglesLongArray.map((code, index) => (        <Triangle code={code} key={index} className={triangleIndex !== index ? 'hidden' : ''} />      ))}    </div>  );});
export default MemoizedTriangleCode;


const arbitraryNumberOfTrianglesLongArray = new Array(numberOfTriangles)  .fill(1)  .map((_, index) => formatCode(splitCode.slice(index * 2).join('')));
const changeIntervalMs = 1000;
const useTriangleIndex = () => {  const [triangleIndex, setTriangleIndex] = useState(0);  const updateTriangle = React.useCallback(() => {    const newIndex = (triangleIndex + 1) % numberOfTriangles;    setTriangleIndex(newIndex);  }, [triangleIndex]);  useInterval(updateTriangle, changeIntervalMs);  return triangleIndex;};
type CodeBlockProps = {code: string};
const codeBlockStyle = {whiteSpace: 'normal', opacity: 0.8, lineBreak: 'anywhere'};
const leftTriangletyle = {  shapeOutside: 'polygon(0 0, 100% 0, 0 100%)',  height: 700,};const rightTriangleStyle = {  shapeOutside: 'polygon(0 0, 100% 0, 100% 100%)',  height: 700,};
const MemoizedCodeBlock = React.memo<CodeBlockProps>(function Code({code}: CodeBlockProps) {  return (    <CodeBlock      language="jsx"      id="triangle-code-container" // used as a css selector      className="text-center"      code={code}      style={codeBlockStyle}    >      <div className="w-1/2 float-left" style={leftTriangletyle} />      <div className="w-1/2 float-right" style={rightTriangleStyle} />    </CodeBlock>  );});
const Triangle = function Triangle({className, code}: Props) {  return (    <div className={classnames('overflow-hidden w-full h-full text-center', className)}>      <MemoizedCodeBlock code={code} />    </div>  );};
type ContainerProps = {|  className: string,  style: Object,|};
const MemoizedTriangleCode = React.memo<ContainerProps>(function TriangleCode({className, style}: ContainerProps) {  const triangleIndex = useTriangleIndex();  return (    <div style={style} className={className}>      {arbitraryNumberOfTrianglesLongArray.map((code, index) => (        <Triangle code={code} key={index} className={triangleIndex !== index ? 'hidden' : ''} />      ))}    </div>  );});
export default MemoizedTriangleCode;


  .map((_, index) => formatCode(splitCode.slice(index * 2).join('')));
const changeIntervalMs = 1000;
const useTriangleIndex = () => {  const [triangleIndex, setTriangleIndex] = useState(0);  const updateTriangle = React.useCallback(() => {    const newIndex = (triangleIndex + 1) % numberOfTriangles;    setTriangleIndex(newIndex);  }, [triangleIndex]);  useInterval(updateTriangle, changeIntervalMs);  return triangleIndex;};
type CodeBlockProps = {code: string};
const codeBlockStyle = {whiteSpace: 'normal', opacity: 0.8, lineBreak: 'anywhere'};
const leftTriangletyle = {  shapeOutside: 'polygon(0 0, 100% 0, 0 100%)',  height: 700,};const rightTriangleStyle = {  shapeOutside: 'polygon(0 0, 100% 0, 100% 100%)',  height: 700,};
const MemoizedCodeBlock = React.memo<CodeBlockProps>(function Code({code}: CodeBlockProps) {  return (    <CodeBlock      language="jsx"      id="triangle-code-container" // used as a css selector      className="text-center"      code={code}      style={codeBlockStyle}    >      <div className="w-1/2 float-left" style={leftTriangletyle} />      <div className="w-1/2 float-right" style={rightTriangleStyle} />    </CodeBlock>  );});
const Triangle = function Triangle({className, code}: Props) {  return (    <div className={classnames('overflow-hidden w-full h-full text-center', className)}>      <MemoizedCodeBlock code={code} />    </div>  );};
type ContainerProps = {|  className: string,  style: Object,|};
const MemoizedTriangleCode = React.memo<ContainerProps>(function TriangleCode({className, style}: ContainerProps) {  const triangleIndex = useTriangleIndex();  return (    <div style={style} className={className}>      {arbitraryNumberOfTrianglesLongArray.map((code, index) => (        <Triangle code={code} key={index} className={triangleIndex !== index ? 'hidden' : ''} />      ))}    </div>  );});
export default MemoizedTriangleCode;

Calling all makers, creators, hackers, and hobbyists.

Welcome to the first stage of Up’s API: a beta release that gives you programmatic access to your balances and transaction data. You can request past transactions or set up webhooks to receive real time events when new transactions hit your account. It’s new, exciting and just the beginning.

This time it's personal

This first phase of the API is designed to give you (and only you) access to your personal data. Get a Personal Access Token that can then be used to make secure requests from our API. Read the docs below to see what you can ask for and the sorts of responses you can expect. In the future we’ll be expanding our API to allow developers to create applications or integrations other customers can use.

Getting started with our API

Before you start

It’s true, working with an API is going to require some programming knowledge. It also helps to be familiar with a console/terminal. In the examples below we’re going to provide terminal commands you can run on your computer. It doesn’t really matter what programming language you choose, but if you don’t yet know any, consider Rails or Javascript. There’s a ton of online material available to help you learn and great communities to join.

Sign-up if you're not a customer

It takes just a couple of steps to get up and running. If you’re not yet an Upsider the first thing you’ll need to do is sign up here: https://up.com.au/download/. Great! Let’s go to the next step.

Claim your Personal Access Token

Your personal access token is the key to your financial kingdom. Guard it fiercely and never share it online or give it out. If you are worried it may have fallen into the wrong hands it’s easy to generate a new one (and expire the old one) - see below.

Steps to claim

1. Open the Up app on your phone, swipe right and select "Data sharing".

2. Tap on ‘Personal Access Token’.

3. Select ‘Generate a token’.

4. Select how long you would like the token to last.

5. Follow the prompts to generate your token

6. Presto! You now have a Personal Access Token. Copy this and store it safely.

Head over to https://api.up.com.au for an alternative way to claim your access token.

Managing your Personal Access Token

Reissuing your Personal Access Token

1. Open the Up app, swipe right and select "Data sharing".

2. Tap on ‘Personal Access Token’.

3. Tap ‘Generate a token’ and follow the prompts.

Revoking your Personal Access Token

1. Open the Up app, swipe right and select "Data sharing"

2. Tap on ‘Personal Access Token’.

3. Tap ‘Revoke existing token’ and select confirm

Make your first API Request

Ok let's get our hands dirty! The simplest request in the book is to first verify that your token works.

Verify the access token

To test your access token, make a request to the /util/ping endpoint. You'll need to put your access token in the Authorization header like so:


Authorization: Bearer $your_access_token

Replace $your_access_token with your personal access token.

You should get a JSON response with a HTTP 200 status.

Sample Request


curl https://api.up.com.au/api/v1/util/ping \
  -H "Authorization: Bearer $your_access_token"

Sample Response


{
  "meta": {
    "id": "3b5d17a4-6778-48dc-ae7d-9f8aace2e2fc",
    "statusEmoji": "⚡️"
  }
}

If the Authorization header is missing, is malformed, or contains an invalid access token, an error response will be returned with a HTTP 401 status.

URL Structure

The Up Banking API is versioned so that breaking changes can be made without impacting existing clients. The current version is v1 (beta). New endpoints will be added over time and existing endpoints will be extended. Some endpoints or fields within an endpoint may be deprecated, but nothing will be removed within any given version, in order to maintain backwards compatibility with existing clients.

Base URL

The endpoints documented in this reference must all be appended to the base URL before they can be called.

https://api.up.com.au/api/v1

For example, the GET /accounts endpoint is callable at

https://api.up.com.au/api/v1/accounts

Authentication

All requests to the Up Banking API must be authenticated by supplying an access token in the Authorization header. The bearer scheme is used to construct the Authorization header.

Sample Header


Authorization: Bearer $your_access_token

Replace $your_access_token with your personal access token.

Personal access tokens

This access token is highly sensitive and must not be shared with other parties.

Currently the Up Banking API is only available for use with a personal access token, which can be obtained in-app or by visiting api.up.com.au and following the prompts.

Only one personal access token can be used at a time. You can generate a new personal access token or revoke an existing one by opening the Up app, swiping right and selecting Data Sharing from the list of settings.

Pagination

Many endpoints in the Up Banking API support pagination. When an endpoint supports pagination it includes a links field at the top-level of the response JSON and its data field contains an array of resources specific to the endpoint.

Sample Response


{
  "data": [...],
  "links": {
    "prev": "https://api.up.com.au/api/v1/accounts?page[before]=x",
    "next": "https://api.up.com.au/api/v1/accounts?page[after]=y"
  }
}

The Up Banking API uses opaque cursors for pagination. Clients must refer to the prev and next links to move between pages.

Enumerating pages

On each page of results, the client consumes each of the resources contained in the data array. Forwards pagination is achieved by following the next link repeatedly until the next link is set to null . When the next link is null , there are no more pages available and pagination terminates. Backwards pagination is achieved by following the prev link repeatedly until the prev link is set to null . When the prev link is null , there are no more pages available and pagination terminates.

Specifying the page size

Endpoints that support pagination accept a page[size] query parameter. This value must be a positive integer and is generally constrained to an upper limit of 100 , however individual endpoints may impose different constraints.

Sample URL

https://api.up.com.au/api/v1/accounts?page[size]=10

When the page[size] is specified, no more than page[size] resources will be included in the response's data field. This parameter is set to a sensible default, which varies depending on the endpoint.

Error Responses

The Up Banking API uses HTTP status codes to convey success or failure when responding to requests. Success responses will always be in the 2xx range. Error responses will usually be in the 4xx range, or more rarely, in the 5xx range.

Status Codes

200

Successful response: Everything worked as intended

201

Successful response: A new resource was created successfully—Typically used with POST requests.

204

Successful response: No content—typically used with DELETE requests.

400

Bad request: Typically a problem with the query string or an encoding error.

401

Not authorized: The request was not authenticated.

404

Not found: Either the endpoint does not exist, or the requested resource does not exist.

422

Invalid request: The request contains invalid data and was not processed.

429

Too many requests: You have been rate limited—try later, ideally with exponential backoff. The X-RateLimit-Remaining response header shows the number remaining.

500 502 503 504

Server-side errors: Try again later.

When a response is received in the 4xx or 5xx range, it includes errors that should be referred for more detail.

Error Response

Generic error response that returns one or more errors.

errors

Array [ErrorObject]

The list of errors returned in this response.

status

string

The HTTP status code associated with this error. This can also be obtained from the response headers. The status indicates the broad type of error according to HTTP semantics.

title

string

A short description of this error. This should be stable across multiple occurrences of this type of error and typically expands on the reason for the status code.

detail

string

A detailed description of this error. This should be considered unique to individual occurrences of an error and subject to change. It is useful for debugging purposes.

source

object

(optional)

If applicable, location in the request that this error relates to. This may be a parameter in the query string, or a an attribute in the request body.

parameter

string

(optional)

If this error relates to a query parameter, the name of the parameter.

pointer

string

(optional)

If this error relates to an attribute in the request body, a rfc-6901 JSON pointer to the attribute.

Sample Response


{
  "errors": [{
    "status": "422",
    "title": "Invalid Request Payload",
    "detail": "fixed value \"tags\" required",
    "source": {
      "pointer": "/data/0/type"
    }
  }]
}

Clients should typically convert these error responses to exceptions and handle them as necessary.

Accounts

Accounts represent the underlying store used to track balances and the transactions that have occurred to modify those balances over time. Up currently has three types of account: SAVER—used to earn interest and to hit savings goals, TRANSACTIONAL—used for everyday spending, and HOME_LOAN-for those with an Up Home loan.

List accounts

GET /accounts

Retrieve a paginated list of all accounts for the currently authenticated user. The returned list is paginated and can be scrolled by following the prev and next links where present.

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=30

filter[accountType]

The type of account for which to return records. This can be used to filter Savers from spending accounts.

e.g. ?filter[accountType]=SAVER

filter[ownershipType]

The account ownership structure for which to return records. This can be used to filter 2Up accounts from Up accounts.

e.g. ?filter[ownershipType]=INDIVIDUAL

For the purposes of readability these examples are not correctly URL-encoded. Care should be taken to correctly encode URL parameters when calling the API. For example "+" must be encoded as "%2B" in order to be received as a plus-sign and not as a space character.

Returns

200 - Successful Response

data

Array [AccountResource]

The list of accounts returned in this response.

type

string

The type of this resource: accounts

id

string

The unique identifier for this account.

attributes

object

displayName

string

The name associated with the account in the Up application.

accountType

AccountTypeEnum

The bank account type of this account.

Possible values: SAVER, TRANSACTIONAL, HOME_LOAN

ownershipType

OwnershipTypeEnum

The ownership structure for this account.

Possible values: INDIVIDUAL, JOINT

balance

MoneyObject

The available balance of the account, taking into account any amounts that are currently on hold.

currencyCode

string

The ISO 4217 currency code.

value

string

The amount of money, formatted as a string in the relevant currency. For example, for an Australian dollar value of $10.56, this field will be "10.56". The currency symbol is not included in the string.

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

createdAt

string (date-time)

The date-time at which this account was first opened.

relationships

object

transactions

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/accounts \
  -G \
  -H 'Authorization: Bearer up:demo:5iK87v6jzG1GcHis' \
  -d 'page[size]=1'

Sample Response

{
  "data": [
    {
      "type": "accounts",
      "id": "6f6c104d-9ddf-48fe-a974-091013b2b4f6",
      "attributes": {
        "displayName": "Spending",
        "accountType": "TRANSACTIONAL",
        "ownershipType": "INDIVIDUAL",
        "balance": {
          "currencyCode": "AUD",
          "value": "1.00",
          "valueInBaseUnits": 100
        },
        "createdAt": "2024-11-21T13:51:33+11:00"
      },
      "relationships": {
        "transactions": {
          "links": {
            "related": "https://api.up.com.au/api/v1/accounts/6f6c104d-9ddf-48fe-a974-091013b2b4f6/transactions"
          }
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/accounts/6f6c104d-9ddf-48fe-a974-091013b2b4f6"
      }
    }
  ],
  "links": {
    "prev": null,
    "next": "https://api.up.com.au/api/v1/accounts?page%5Bafter%5D=WyIyMDI0LTExLTIxVDAyOjUxOjMzLjkxODAxNTAwMFoiLCI2ZjZjMTA0ZC05ZGRmLTQ4ZmUtYTk3NC0wOTEwMTNiMmI0ZjYiXQ%3D%3D&page%5Bsize%5D=1"
  }
}

Retrieve account

GET /accounts/{id}

Retrieve a specific account by providing its unique identifier.

Path Parameters

id

string

The unique identifier for the account.

e.g. 736bb540-1e7f-4cf6-97e6-b872ea8df490

Returns

200 - Successful Response

data

AccountResource

The account returned in this response.

type

string

The type of this resource: accounts

id

string

The unique identifier for this account.

attributes

object

displayName

string

The name associated with the account in the Up application.

accountType

AccountTypeEnum

The bank account type of this account.

Possible values: SAVER, TRANSACTIONAL, HOME_LOAN

ownershipType

OwnershipTypeEnum

The ownership structure for this account.

Possible values: INDIVIDUAL, JOINT

balance

MoneyObject

The available balance of the account, taking into account any amounts that are currently on hold.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

createdAt

string (date-time)

The date-time at which this account was first opened.

relationships

object

transactions

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

Sample Request

curl https://api.up.com.au/api/v1/accounts/4f96ef3e-6489-4fe1-9736-660e0dd89e42 \
  -H 'Authorization: Bearer up:demo:oxRDkL5GHLgLZz9K'

Sample Response

{
  "data": {
    "type": "accounts",
    "id": "4f96ef3e-6489-4fe1-9736-660e0dd89e42",
    "attributes": {
      "displayName": "🐷 Savings",
      "accountType": "SAVER",
      "ownershipType": "INDIVIDUAL",
      "balance": {
        "currencyCode": "AUD",
        "value": "125.36",
        "valueInBaseUnits": 12536
      },
      "createdAt": "2024-11-21T13:51:35+11:00"
    },
    "relationships": {
      "transactions": {
        "links": {
          "related": "https://api.up.com.au/api/v1/accounts/4f96ef3e-6489-4fe1-9736-660e0dd89e42/transactions"
        }
      }
    },
    "links": {
      "self": "https://api.up.com.au/api/v1/accounts/4f96ef3e-6489-4fe1-9736-660e0dd89e42"
    }
  }
}

Attachments

Attachments represent uploaded files that are attached to transactions, these are commonly receipts.

List attachments

GET /attachments

Retrieve a list of all attachments. The returned list is paginated and can be scrolled by following the next and prev links where present.

Returns

200 - Successful Response

data

Array [AttachmentResource]

The list of attachments returned in this response.

type

string

The type of this resource: attachments

id

string

The unique identifier for this attachment.

attributes

object

createdAt

string (date-time)

(nullable)

The date-time when the file was created.

fileURL

string

(nullable)

A temporary link to download the file.

fileURLExpiresAt

string (date-time)

The date-time at which the fileURL link expires.

fileExtension

string

(nullable)

File extension for the uploaded attachment.

fileContentType

string

(nullable)

Content type for the uploaded attachment.

relationships

object

transaction

object

data

object

type

string

The type of this resource: transactions

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/attachments \
  -H 'Authorization: Bearer up:demo:bd6AO7B1n2Wqmu9a'

Sample Response

{
  "data": [
    {
      "type": "attachments",
      "id": "a64f9bbe-1a67-4a3f-bfd8-9c128383836c",
      "attributes": {
        "createdAt": "2024-11-21T13:51:36+11:00",
        "fileURL": "http://localhost:8080/asset/customer_transaction_attachment.jpg?filename=uploads%2Fcustomer_transaction_attachments%2Fmodels%2Fattachment%2Ffile%2F1%2Fattachment.jpg&timestamp=1732157496&token=a2daf15362de68a29be3b4f3992b0fd2ab2fb38809c2f6cc5dc3e5301ea21cf6",
        "fileURLExpiresAt": "2024-11-21T14:06:36+11:00",
        "fileExtension": "jpg",
        "fileContentType": "image/jpeg"
      },
      "relationships": {
        "transaction": {
          "data": {
            "type": "transactions",
            "id": "a04097ef-1851-4144-9dae-dcd5c6e98b9c"
          },
          "links": {
            "related": "https://api.up.com.au/api/v1/transactions/a04097ef-1851-4144-9dae-dcd5c6e98b9c"
          }
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/attachments/a64f9bbe-1a67-4a3f-bfd8-9c128383836c"
      }
    },
    {
      "type": "attachments",
      "id": "bb7d4dc9-9c36-41f0-bb8a-84fa885f4c28",
      "attributes": {
        "createdAt": "2024-11-21T13:51:36+11:00",
        "fileURL": "http://localhost:8080/asset/customer_transaction_attachment.jpg?filename=uploads%2Fcustomer_transaction_attachments%2Fmodels%2Fattachment%2Ffile%2F2%2Fattachment.jpg&timestamp=1732157496&token=95ee209291796c41c169356df0549f3015fdb98709efd2a16b3933547ffb7d2f",
        "fileURLExpiresAt": "2024-11-21T14:06:36+11:00",
        "fileExtension": "jpg",
        "fileContentType": "image/jpeg"
      },
      "relationships": {
        "transaction": {
          "data": {
            "type": "transactions",
            "id": "3b3715b0-9c5a-4e52-97f5-5b4ce6049d49"
          },
          "links": {
            "related": "https://api.up.com.au/api/v1/transactions/3b3715b0-9c5a-4e52-97f5-5b4ce6049d49"
          }
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/attachments/bb7d4dc9-9c36-41f0-bb8a-84fa885f4c28"
      }
    }
  ],
  "links": {
    "prev": null,
    "next": null
  }
}

Retrieve attachment

GET /attachments/{id}

Retrieve a specific attachment by providing its unique identifier.

Path Parameters

id

string

The unique identifier for the attachment.

e.g. d264cbca-94a3-4c17-a194-1c0d63c504dc

Returns

200 - Successful Response

data

AttachmentResource

The attachment returned in this response.

type

string

The type of this resource: attachments

id

string

The unique identifier for this attachment.

attributes

object

createdAt

string (date-time)

(nullable)

The date-time when the file was created.

fileURL

string

(nullable)

A temporary link to download the file.

fileURLExpiresAt

string (date-time)

The date-time at which the fileURL link expires.

fileExtension

string

(nullable)

File extension for the uploaded attachment.

fileContentType

string

(nullable)

Content type for the uploaded attachment.

relationships

object

transaction

object

data

object

type

string

The type of this resource: transactions

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

Sample Request

curl https://api.up.com.au/api/v1/attachments/1ab88f6e-da16-48ff-8891-effcd6103bfe \
  -H 'Authorization: Bearer up:demo:4hyVGNHpUYOF2d59'

Sample Response

{
  "data": {
    "type": "attachments",
    "id": "1ab88f6e-da16-48ff-8891-effcd6103bfe",
    "attributes": {
      "createdAt": "2024-11-21T13:51:38+11:00",
      "fileURL": "http://localhost:8080/asset/customer_transaction_attachment.jpg?filename=uploads%2Fcustomer_transaction_attachments%2Fmodels%2Fattachment%2Ffile%2F5%2Fattachment.jpg&timestamp=1732157498&token=dded009e4d59e80f6f90b7c1d76a7dc13664f63ba29a6ed395c8b5f84f2f70b5",
      "fileURLExpiresAt": "2024-11-21T14:06:38+11:00",
      "fileExtension": "jpg",
      "fileContentType": "image/jpeg"
    },
    "relationships": {
      "transaction": {
        "data": {
          "type": "transactions",
          "id": "320f7989-b1a9-4539-b68b-a9038de4408c"
        },
        "links": {
          "related": "https://api.up.com.au/api/v1/transactions/320f7989-b1a9-4539-b68b-a9038de4408c"
        }
      }
    },
    "links": {
      "self": "https://api.up.com.au/api/v1/attachments/1ab88f6e-da16-48ff-8891-effcd6103bfe"
    }
  }
}

Tags

Tags are custom labels that can be associated with transactions on Up. Within the Up application, tags provide additional insight into spending. For example, you could have a "Take Away" tag that you apply to purchases from food delivery services. The Up API allows you to manage the tags associated with transactions. Each transaction may have up to 6 tags.

Tags are identified by their labels, which are unique strings, so the tag "Holiday" has also the id "Holiday".

List tags

GET /tags

Retrieve a list of all tags currently in use. The returned list is paginated and can be scrolled by following the next and prev links where present. Results are ordered lexicographically. The transactions relationship for each tag exposes a link to get the transactions with the given tag.

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=50

Returns

200 - Successful Response

data

Array [TagResource]

The list of tags returned in this response.

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

relationships

object

transactions

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/tags \
  -G \
  -H 'Authorization: Bearer up:demo:KnmgJvBqGtPd5m4U' \
  -d 'page[size]=2'

Sample Response

{
  "data": [
    {
      "type": "tags",
      "id": "Holiday",
      "relationships": {
        "transactions": {
          "links": {
            "related": "https://api.up.com.au/api/v1/transactions?filter%5Btag%5D=Holiday"
          }
        }
      }
    },
    {
      "type": "tags",
      "id": "Pizza Night",
      "relationships": {
        "transactions": {
          "links": {
            "related": "https://api.up.com.au/api/v1/transactions?filter%5Btag%5D=Pizza+Night"
          }
        }
      }
    }
  ],
  "links": {
    "prev": null,
    "next": "https://api.up.com.au/api/v1/tags?page%5Bafter%5D=WyJQaXp6YSBOaWdodCJd&page%5Bsize%5D=2"
  }
}

Add tags to transaction

POST /transactions/{transactionId}/relationships/tags

Associates one or more tags with a specific transaction. No more than 6 tags may be present on any single transaction. Duplicate tags are silently ignored. An HTTP 204 is returned on success. The associated tags, along with this request URL, are also exposed via the tags relationship on the transaction resource returned from /transactions/{id}.

Path Parameters

transactionId

string

The unique identifier for the transaction.

e.g. c8725c13-b997-436a-be58-33e84ddd5d0b

Request Payload

data

Array [TagInputResourceIdentifier]

The tags to add to or remove from the transaction.

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

Returns

204 - Successful Response

Sample Request

curl https://api.up.com.au/api/v1/transactions/2ec2beae-810b-4c25-8040-a405b9ae1cc2/relationships/tags \
  -XPOST \
  -H 'Authorization: Bearer up:demo:Ie5YwCm9pVl3YuCE' \
  -H 'Content-Type: application/json' \
  --data-binary '{
    "data": [
      {
        "type": "tags",
        "id": "Holiday"
      },
      {
        "type": "tags",
        "id": "Queensland"
      }
    ]
  }'

Remove tags from transaction

DELETE /transactions/{transactionId}/relationships/tags

Disassociates one or more tags from a specific transaction. Tags that are not associated are silently ignored. An HTTP 204 is returned on success. The associated tags, along with this request URL, are also exposed via the tags relationship on the transaction resource returned from /transactions/{id}.

Path Parameters

transactionId

string

The unique identifier for the transaction.

e.g. ee5067a2-84a1-47c0-8b03-dd7a6c7eb040

Request Payload

data

Array [TagInputResourceIdentifier]

The tags to add to or remove from the transaction.

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

Returns

204 - Successful Response

Sample Request

curl https://api.up.com.au/api/v1/transactions/38582974-afb0-4f65-aa71-001e67ccee28/relationships/tags \
  -XDELETE \
  -H 'Authorization: Bearer up:demo:4XyIxPX5JIsPzUmF' \
  -H 'Content-Type: application/json' \
  --data-binary '{
    "data": [
      {
        "type": "tags",
        "id": "Holiday"
      },
      {
        "type": "tags",
        "id": "Queensland"
      }
    ]
  }'

Transactions

Transactions represent the movement of money into and out of an account. They have many characteristics that vary depending on the kind of transaction. Transactions may be temporarily HELD (pending) or SETTLED, typically depending on which payment method was used at the point of sale.

List transactions

GET /transactions

Retrieve a list of all transactions across all accounts for the currently authenticated user. The returned list is paginated and can be scrolled by following the next and prev links where present. To narrow the results to a specific date range pass one or both of filter[since] and filter[until] in the query string. These filter parameters should not be used for pagination. Results are ordered newest first to oldest last.

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=30

filter[status]

The transaction status for which to return records. This can be used to filter HELD transactions from those that are SETTLED.

e.g. ?filter[status]=HELD

filter[since]

string

The start date-time from which to return records, formatted according to rfc-3339. Not to be used for pagination purposes.

e.g. ?filter[since]=2020-01-01T01:02:03+10:00

filter[until]

string

The end date-time up to which to return records, formatted according to rfc-3339. Not to be used for pagination purposes.

e.g. ?filter[until]=2020-02-01T01:02:03+10:00

filter[category]

string

The category identifier for which to filter transactions. Both parent and child categories can be filtered through this parameter. Providing an invalid category identifier results in a 404 response.

e.g. ?filter[category]=good-life

filter[tag]

string

A transaction tag to filter for which to return records. If the tag does not exist, zero records are returned and a success response is given.

e.g. ?filter[tag]=Holiday

Returns

200 - Successful Response

data

Array [TransactionResource]

The list of transactions returned in this response.

type

string

The type of this resource: transactions

id

string

The unique identifier for this transaction.

attributes

object

status

TransactionStatusEnum

The current processing status of this transaction, according to whether or not this transaction has settled or is still held.

Possible values: HELD, SETTLED

rawText

string

(nullable)

The original, unprocessed text of the transaction. This is often not a perfect indicator of the actual merchant, but it is useful for reconciliation purposes in some cases.

description

string

A short description for this transaction. Usually the merchant name for purchases.

message

string

(nullable)

Attached message for this transaction, such as a payment message, or a transfer note.

isCategorizable

boolean

Boolean flag set to true on transactions that support the use of categories.

holdInfo

HoldInfoObject

(nullable)

If this transaction is currently in the HELD status, or was ever in the HELD status, the amount and foreignAmount of the transaction while HELD.

amount

MoneyObject

The amount of this transaction while in the HELD status, in Australian dollars.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

The foreign currency amount of this transaction while in the HELD status. This field will be null for domestic transactions. The amount was converted to the AUD amount reflected in the amount field.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

roundUp

RoundUpObject

(nullable)

Details of how this transaction was rounded-up. If no Round Up was applied this field will be null.

amount

MoneyObject

The total amount of this Round Up, including any boosts, represented as a negative value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

boostPortion

MoneyObject

(nullable)

The portion of the Round Up amount owing to boosted Round Ups, represented as a negative value. If no boost was added to the Round Up this field will be null.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cashback

CashbackObject

(nullable)

If all or part of this transaction was instantly reimbursed in the form of cashback, details of the reimbursement.

description

string

A brief description of why this cashback was paid.

amount

MoneyObject

The total amount of cashback paid, represented as a positive value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

amount

MoneyObject

The amount of this transaction in Australian dollars. For transactions that were once HELD but are now SETTLED, refer to the holdInfo field for the original amount the transaction was HELD at.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

The foreign currency amount of this transaction. This field will be null for domestic transactions. The amount was converted to the AUD amount reflected in the amount of this transaction. Refer to the holdInfo field for the original foreignAmount the transaction was HELD at.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cardPurchaseMethod

CardPurchaseMethodObject

(nullable)

Information about the card used for this transaction, if applicable.

method

CardPurchaseMethodEnum

The type of card purchase.

Possible values: BAR_CODE, OCR, CARD_PIN, CARD_DETAILS, CARD_ON_FILE, ECOMMERCE, MAGNETIC_STRIPE, CONTACTLESS

cardNumberSuffix

string

(nullable)

The last four digits of the card used for the purchase, if applicable.

settledAt

string (date-time)

(nullable)

The date-time at which this transaction settled. This field will be null for transactions that are currently in the HELD status.

createdAt

string (date-time)

The date-time at which this transaction was first encountered.

transactionType

string

(nullable)

A description of the transaction method used e.g. Purchase, BPAY Payment.

note

NoteObject

(nullable)

A customer provided note about the transaction. Can only be provided by Up High subscribers.

text

string

A text note about the transaction.

performingCustomer

CustomerObject

(nullable)

The customer who initated the transaction. For 2Up accounts this could be the customer who's card was used.

displayName

string

The Upname or preferred name of the customer

deepLinkURL

string

A deep link to the transaction receipt screen in-app.

relationships

object

account

object

data

object

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

transferAccount

object

If this transaction is a transfer between accounts, this relationship will contain the account the transaction went to/came from. The amount field can be used to determine the direction of the transfer.

data

object

(nullable)

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

category

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

related

string

(optional)

The link to retrieve the related resource(s) in this relationship.

parentCategory

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

tags

object

data

Array [object]

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

attachment

object

data

object

(nullable)

type

string

The type of this resource: attachments

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/transactions \
  -G \
  -H 'Authorization: Bearer up:demo:njmXzVYOjkeBZPcV' \
  -d 'page[size]=1' \
  -d 'filter[tag]=Pizza Night' \
  -d 'filter[status]=SETTLED'

Sample Response

{
  "data": [
    {
      "type": "transactions",
      "id": "b6a137c1-2764-4c21-8eb0-ffb0417e7c0a",
      "attributes": {
        "status": "SETTLED",
        "rawText": null,
        "description": "David Taylor",
        "message": "Money for the pizzas last night.",
        "isCategorizable": true,
        "holdInfo": null,
        "roundUp": null,
        "cashback": null,
        "amount": {
          "currencyCode": "AUD",
          "value": "-59.98",
          "valueInBaseUnits": -5998
        },
        "foreignAmount": null,
        "cardPurchaseMethod": null,
        "settledAt": "2024-11-20T06:49:56+11:00",
        "createdAt": "2024-11-20T06:49:56+11:00",
        "transactionType": null,
        "note": null,
        "performingCustomer": {
          "displayName": "Bobby"
        },
        "deepLinkURL": "up://transaction/VHJhbnNhY3Rpb24tMzg="
      },
      "relationships": {
        "account": {
          "data": {
            "type": "accounts",
            "id": "16c26f05-47a5-4e3c-896c-6e670b566e61"
          },
          "links": {
            "related": "https://api.up.com.au/api/v1/accounts/16c26f05-47a5-4e3c-896c-6e670b566e61"
          }
        },
        "transferAccount": {
          "data": null
        },
        "category": {
          "data": null,
          "links": {
            "self": "https://api.up.com.au/api/v1/transactions/b6a137c1-2764-4c21-8eb0-ffb0417e7c0a/relationships/category"
          }
        },
        "parentCategory": {
          "data": null
        },
        "tags": {
          "data": [
            {
              "type": "tags",
              "id": "Pizza Night"
            }
          ],
          "links": {
            "self": "https://api.up.com.au/api/v1/transactions/b6a137c1-2764-4c21-8eb0-ffb0417e7c0a/relationships/tags"
          }
        },
        "attachment": {
          "data": null
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/transactions/b6a137c1-2764-4c21-8eb0-ffb0417e7c0a"
      }
    }
  ],
  "links": {
    "prev": null,
    "next": null
  }
}

Retrieve transaction

GET /transactions/{id}

Retrieve a specific transaction by providing its unique identifier.

Path Parameters

id

string

The unique identifier for the transaction.

e.g. f686e551-a49a-42d4-809b-95dd04b0400e

Returns

200 - Successful Response

data

TransactionResource

The transaction returned in this response.

type

string

The type of this resource: transactions

id

string

The unique identifier for this transaction.

attributes

object

status

TransactionStatusEnum

The current processing status of this transaction, according to whether or not this transaction has settled or is still held.

Possible values: HELD, SETTLED

rawText

string

(nullable)

The original, unprocessed text of the transaction. This is often not a perfect indicator of the actual merchant, but it is useful for reconciliation purposes in some cases.

description

string

A short description for this transaction. Usually the merchant name for purchases.

message

string

(nullable)

Attached message for this transaction, such as a payment message, or a transfer note.

isCategorizable

boolean

Boolean flag set to true on transactions that support the use of categories.

holdInfo

HoldInfoObject

(nullable)

If this transaction is currently in the HELD status, or was ever in the HELD status, the amount and foreignAmount of the transaction while HELD.

amount

MoneyObject

The amount of this transaction while in the HELD status, in Australian dollars.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

roundUp

RoundUpObject

(nullable)

Details of how this transaction was rounded-up. If no Round Up was applied this field will be null.

amount

MoneyObject

The total amount of this Round Up, including any boosts, represented as a negative value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

boostPortion

MoneyObject

(nullable)

The portion of the Round Up amount owing to boosted Round Ups, represented as a negative value. If no boost was added to the Round Up this field will be null.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cashback

CashbackObject

(nullable)

If all or part of this transaction was instantly reimbursed in the form of cashback, details of the reimbursement.

description

string

A brief description of why this cashback was paid.

amount

MoneyObject

The total amount of cashback paid, represented as a positive value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

amount

MoneyObject

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cardPurchaseMethod

CardPurchaseMethodObject

(nullable)

Information about the card used for this transaction, if applicable.

method

CardPurchaseMethodEnum

The type of card purchase.

Possible values: BAR_CODE, OCR, CARD_PIN, CARD_DETAILS, CARD_ON_FILE, ECOMMERCE, MAGNETIC_STRIPE, CONTACTLESS

cardNumberSuffix

string

(nullable)

The last four digits of the card used for the purchase, if applicable.

settledAt

string (date-time)

(nullable)

The date-time at which this transaction settled. This field will be null for transactions that are currently in the HELD status.

createdAt

string (date-time)

The date-time at which this transaction was first encountered.

transactionType

string

(nullable)

A description of the transaction method used e.g. Purchase, BPAY Payment.

note

NoteObject

(nullable)

A customer provided note about the transaction. Can only be provided by Up High subscribers.

text

string

A text note about the transaction.

performingCustomer

CustomerObject

(nullable)

The customer who initated the transaction. For 2Up accounts this could be the customer who's card was used.

displayName

string

The Upname or preferred name of the customer

deepLinkURL

string

A deep link to the transaction receipt screen in-app.

relationships

object

account

object

data

object

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

transferAccount

object

data

object

(nullable)

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

category

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

related

string

(optional)

The link to retrieve the related resource(s) in this relationship.

parentCategory

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

tags

object

data

Array [object]

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

attachment

object

data

object

(nullable)

type

string

The type of this resource: attachments

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

Sample Request

curl https://api.up.com.au/api/v1/transactions/1e8b98e9-732f-4efb-970e-91306e823dd3 \
  -H 'Authorization: Bearer up:demo:gPmtEdHQb1eGkFaC'

Sample Response

{
  "data": {
    "type": "transactions",
    "id": "1e8b98e9-732f-4efb-970e-91306e823dd3",
    "attributes": {
      "status": "SETTLED",
      "rawText": "WARUNG BEBEK, UBUD INDONES",
      "description": "Warung Bebek Bengil",
      "message": null,
      "isCategorizable": true,
      "holdInfo": {
        "amount": {
          "currencyCode": "AUD",
          "value": "-107.92",
          "valueInBaseUnits": -10792
        },
        "foreignAmount": null
      },
      "roundUp": {
        "amount": {
          "currencyCode": "AUD",
          "value": "-0.08",
          "valueInBaseUnits": -8
        },
        "boostPortion": null
      },
      "cashback": null,
      "amount": {
        "currencyCode": "AUD",
        "value": "-107.92",
        "valueInBaseUnits": -10792
      },
      "foreignAmount": {
        "currencyCode": "IDR",
        "value": "-1053698.77",
        "valueInBaseUnits": -105369877
      },
      "cardPurchaseMethod": {
        "method": "CARD_ON_FILE",
        "cardNumberSuffix": "0001"
      },
      "settledAt": "2024-11-18T04:00:00+11:00",
      "createdAt": "2024-11-18T04:00:00+11:00",
      "transactionType": null,
      "note": null,
      "performingCustomer": {
        "displayName": "Bobby"
      },
      "deepLinkURL": "up://transaction/VHJhbnNhY3Rpb24tNDY="
    },
    "relationships": {
      "account": {
        "data": {
          "type": "accounts",
          "id": "8e8b0b5c-8278-4fec-bc13-390da4b99447"
        },
        "links": {
          "related": "https://api.up.com.au/api/v1/accounts/8e8b0b5c-8278-4fec-bc13-390da4b99447"
        }
      },
      "transferAccount": {
        "data": null
      },
      "category": {
        "data": null,
        "links": {
          "self": "https://api.up.com.au/api/v1/transactions/1e8b98e9-732f-4efb-970e-91306e823dd3/relationships/category"
        }
      },
      "parentCategory": {
        "data": null
      },
      "tags": {
        "data": [],
        "links": {
          "self": "https://api.up.com.au/api/v1/transactions/1e8b98e9-732f-4efb-970e-91306e823dd3/relationships/tags"
        }
      },
      "attachment": {
        "data": null
      }
    },
    "links": {
      "self": "https://api.up.com.au/api/v1/transactions/1e8b98e9-732f-4efb-970e-91306e823dd3"
    }
  }
}

List transactions by account

GET /accounts/{accountId}/transactions

Retrieve a list of all transactions for a specific account. The returned list is paginated and can be scrolled by following the next and prev links where present. To narrow the results to a specific date range pass one or both of filter[since] and filter[until] in the query string. These filter parameters should not be used for pagination. Results are ordered newest first to oldest last.

Path Parameters

accountId

string

The unique identifier for the account.

e.g. 6622c19c-06b3-413b-9809-b2358012b7fd

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=30

filter[status]

The transaction status for which to return records. This can be used to filter HELD transactions from those that are SETTLED.

e.g. ?filter[status]=HELD

filter[since]

string

The start date-time from which to return records, formatted according to rfc-3339. Not to be used for pagination purposes.

e.g. ?filter[since]=2020-01-01T01:02:03+10:00

filter[until]

string

The end date-time up to which to return records, formatted according to rfc-3339. Not to be used for pagination purposes.

e.g. ?filter[until]=2020-02-01T01:02:03+10:00

filter[category]

string

e.g. ?filter[category]=good-life

filter[tag]

string

A transaction tag to filter for which to return records. If the tag does not exist, zero records are returned and a success response is given.

e.g. ?filter[tag]=Holiday

Returns

200 - Successful Response

data

Array [TransactionResource]

The list of transactions returned in this response.

type

string

The type of this resource: transactions

id

string

The unique identifier for this transaction.

attributes

object

status

TransactionStatusEnum

The current processing status of this transaction, according to whether or not this transaction has settled or is still held.

Possible values: HELD, SETTLED

rawText

string

(nullable)

The original, unprocessed text of the transaction. This is often not a perfect indicator of the actual merchant, but it is useful for reconciliation purposes in some cases.

description

string

A short description for this transaction. Usually the merchant name for purchases.

message

string

(nullable)

Attached message for this transaction, such as a payment message, or a transfer note.

isCategorizable

boolean

Boolean flag set to true on transactions that support the use of categories.

holdInfo

HoldInfoObject

(nullable)

If this transaction is currently in the HELD status, or was ever in the HELD status, the amount and foreignAmount of the transaction while HELD.

amount

MoneyObject

The amount of this transaction while in the HELD status, in Australian dollars.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

roundUp

RoundUpObject

(nullable)

Details of how this transaction was rounded-up. If no Round Up was applied this field will be null.

amount

MoneyObject

The total amount of this Round Up, including any boosts, represented as a negative value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

boostPortion

MoneyObject

(nullable)

The portion of the Round Up amount owing to boosted Round Ups, represented as a negative value. If no boost was added to the Round Up this field will be null.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cashback

CashbackObject

(nullable)

If all or part of this transaction was instantly reimbursed in the form of cashback, details of the reimbursement.

description

string

A brief description of why this cashback was paid.

amount

MoneyObject

The total amount of cashback paid, represented as a positive value.

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

amount

MoneyObject

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

foreignAmount

MoneyObject

(nullable)

currencyCode

string

The ISO 4217 currency code.

value

string

valueInBaseUnits

integer

The amount of money in the smallest denomination for the currency, as a 64-bit integer. For example, for an Australian dollar value of $10.56, this field will be 1056.

cardPurchaseMethod

CardPurchaseMethodObject

(nullable)

Information about the card used for this transaction, if applicable.

method

CardPurchaseMethodEnum

The type of card purchase.

Possible values: BAR_CODE, OCR, CARD_PIN, CARD_DETAILS, CARD_ON_FILE, ECOMMERCE, MAGNETIC_STRIPE, CONTACTLESS

cardNumberSuffix

string

(nullable)

The last four digits of the card used for the purchase, if applicable.

settledAt

string (date-time)

(nullable)

The date-time at which this transaction settled. This field will be null for transactions that are currently in the HELD status.

createdAt

string (date-time)

The date-time at which this transaction was first encountered.

transactionType

string

(nullable)

A description of the transaction method used e.g. Purchase, BPAY Payment.

note

NoteObject

(nullable)

A customer provided note about the transaction. Can only be provided by Up High subscribers.

text

string

A text note about the transaction.

performingCustomer

CustomerObject

(nullable)

The customer who initated the transaction. For 2Up accounts this could be the customer who's card was used.

displayName

string

The Upname or preferred name of the customer

deepLinkURL

string

A deep link to the transaction receipt screen in-app.

relationships

object

account

object

data

object

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

transferAccount

object

data

object

(nullable)

type

string

The type of this resource: accounts

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

category

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

related

string

(optional)

The link to retrieve the related resource(s) in this relationship.

parentCategory

object

data

object

(nullable)

type

string

The type of this resource: categories

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

tags

object

data

Array [object]

type

string

The type of this resource: tags

id

string

The label of the tag, which also acts as the tag’s unique identifier.

links

object

(optional)

self

string

The link to retrieve or modify linkage between this resources and the related resource(s) in this relationship.

attachment

object

data

object

(nullable)

type

string

The type of this resource: attachments

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/accounts/85469557-f613-423c-bfb7-b8cbe11659c0/transactions \
  -G \
  -H 'Authorization: Bearer up:demo:WTrYOSkfwvcJzZnV' \
  -d 'page[size]=1' \
  -d 'filter[status]=HELD' \
  -d 'filter[category]=good-life'

Sample Response

{
  "data": [
    {
      "type": "transactions",
      "id": "c4417469-1a52-43b2-bf34-1a0a890cfef8",
      "attributes": {
        "status": "HELD",
        "rawText": "Spotify 0123456789",
        "description": "Spotify",
        "message": null,
        "isCategorizable": true,
        "holdInfo": {
          "amount": {
            "currencyCode": "AUD",
            "value": "-11.95",
            "valueInBaseUnits": -1195
          },
          "foreignAmount": null
        },
        "roundUp": null,
        "cashback": null,
        "amount": {
          "currencyCode": "AUD",
          "value": "-11.95",
          "valueInBaseUnits": -1195
        },
        "foreignAmount": null,
        "cardPurchaseMethod": null,
        "settledAt": null,
        "createdAt": "2024-11-18T09:43:06+11:00",
        "transactionType": null,
        "note": null,
        "performingCustomer": {
          "displayName": "Bobby"
        },
        "deepLinkURL": "up://transaction/VHJhbnNhY3Rpb24tNjk="
      },
      "relationships": {
        "account": {
          "data": {
            "type": "accounts",
            "id": "85469557-f613-423c-bfb7-b8cbe11659c0"
          },
          "links": {
            "related": "https://api.up.com.au/api/v1/accounts/85469557-f613-423c-bfb7-b8cbe11659c0"
          }
        },
        "transferAccount": {
          "data": null
        },
        "category": {
          "data": {
            "type": "categories",
            "id": "tv-and-music"
          },
          "links": {
            "self": "https://api.up.com.au/api/v1/transactions/c4417469-1a52-43b2-bf34-1a0a890cfef8/relationships/category",
            "related": "https://api.up.com.au/api/v1/categories/tv-and-music"
          }
        },
        "parentCategory": {
          "data": {
            "type": "categories",
            "id": "good-life"
          },
          "links": {
            "related": "https://api.up.com.au/api/v1/categories/good-life"
          }
        },
        "tags": {
          "data": [],
          "links": {
            "self": "https://api.up.com.au/api/v1/transactions/c4417469-1a52-43b2-bf34-1a0a890cfef8/relationships/tags"
          }
        },
        "attachment": {
          "data": null
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/transactions/c4417469-1a52-43b2-bf34-1a0a890cfef8"
      }
    }
  ],
  "links": {
    "prev": null,
    "next": null
  }
}

Utility endpoints

Some endpoints exist not to expose data, but to test the API itself. Currently there is only one endpoint in this group: ping!

Ping

GET /util/ping

Make a basic ping request to the API. This is useful to verify that authentication is functioning correctly. On authentication success an HTTP 200 status is returned. On failure an HTTP 401 error response is returned.

Returns

200 - Successful Response

meta

object

id

string

The unique identifier of the authenticated customer.

statusEmoji

string

A cute emoji that represents the response status.

401 - Not Authorized

errors

Array [ErrorObject]

The list of errors returned in this response.

status

string

The HTTP status code associated with this error. This can also be obtained from the response headers. The status indicates the broad type of error according to HTTP semantics.

title

string

A short description of this error. This should be stable across multiple occurrences of this type of error and typically expands on the reason for the status code.

detail

string

A detailed description of this error. This should be considered unique to individual occurrences of an error and subject to change. It is useful for debugging purposes.

source

object

(optional)

If applicable, location in the request that this error relates to. This may be a parameter in the query string, or a an attribute in the request body.

parameter

string

(optional)

If this error relates to a query parameter, the name of the parameter.

pointer

string

(optional)

If this error relates to an attribute in the request body, a rfc-6901 JSON pointer to the attribute.

Sample Request

curl https://api.up.com.au/api/v1/util/ping \
  -H 'Authorization: Bearer up:demo:Uczd6CoUPKmxDUkv'

Sample Response

{
  "meta": {
    "id": "dfd7c4f1-6685-4c44-852b-0a71109b6b6c",
    "statusEmoji": "⚡️"
  }
}

Sample Request

curl https://api.up.com.au/api/v1/util/ping

Sample Response

{
  "errors": [
    {
      "status": "401",
      "title": "Not Authorized",
      "detail": "The request was not authenticated because no valid credential was found in the Authorization header, or the Authorization header was not present."
    }
  ]
}

Webhooks

Webhooks provide a mechanism for a configured URL to receive events when transaction activity occurs on Up. You can think of webhooks as being like push notifications for your server-side application.

List webhooks

GET /webhooks

Retrieve a list of configured webhooks. The returned list is paginated and can be scrolled by following the next and prev links where present. Results are ordered oldest first to newest last.

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=30

Returns

200 - Successful Response

data

Array [WebhookResource]

The list of webhooks returned in this response.

type

string

The type of this resource: webhooks

id

string

The unique identifier for this webhook.

attributes

object

url

string

The URL that this webhook is configured to POST events to.

description

string

(nullable)

An optional description that was provided at the time the webhook was created.

secretKey

string

(optional)

A shared secret key used to sign all webhook events sent to the configured webhook URL. This field is returned only once, upon the initial creation of the webhook. If lost, create a new webhook and delete this webhook.

The webhook URL receives a request with a X-Up-Authenticity-Signature header, which is the SHA-256 HMAC of the entire raw request body signed using this secretKey. It is advised to compute and check this signature to verify the authenticity of requests sent to the webhook URL. See Handling webhook events for full details.

createdAt

string (date-time)

The date-time at which this webhook was created.

relationships

object

logs

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/webhooks \
  -G \
  -H 'Authorization: Bearer up:demo:RYk2pxll27HzVQNI' \
  -d 'page[size]=1'

Sample Response

{
  "data": [
    {
      "type": "webhooks",
      "id": "85f34d5b-7c22-4acb-8815-b99f268e951f",
      "attributes": {
        "url": "http://example.com/webhook-1",
        "description": "Webhook number 1",
        "createdAt": "2024-11-19T13:52:07+11:00"
      },
      "relationships": {
        "logs": {
          "links": {
            "related": "https://api.up.com.au/api/v1/webhooks/85f34d5b-7c22-4acb-8815-b99f268e951f/logs"
          }
        }
      },
      "links": {
        "self": "https://api.up.com.au/api/v1/webhooks/85f34d5b-7c22-4acb-8815-b99f268e951f"
      }
    }
  ],
  "links": {
    "prev": null,
    "next": "https://api.up.com.au/api/v1/webhooks?page%5Bafter%5D=WyIyMDI0LTExLTE5VDAyOjUyOjA3LjQyMzUyMTAwMFoiLCI4NWYzNGQ1Yi03YzIyLTRhY2ItODgxNS1iOTlmMjY4ZTk1MWYiXQ%3D%3D&page%5Bsize%5D=1"
  }
}

Create webhook

POST /webhooks

Create a new webhook with a given URL. The URL will receive webhook events as JSON-encoded POST requests. The URL must respond with a HTTP 200 status on success.

There is currently a limit of 10 webhooks at any given time. Once this limit is reached, existing webhooks will need to be deleted before new webhooks can be created.

Event delivery is retried with exponential backoff if the URL is unreachable or it does not respond with a 200 status. The response includes a secretKey attribute, which is used to sign requests sent to the webhook URL. It will not be returned from any other endpoints within the Up API. If the secretKey is lost, simply create a new webhook with the same URL, capture its secretKey and then delete the original webhook. See Handling webhook events for details on how to process webhook events.

It is probably a good idea to test the webhook by sending it a PING event after creating it.

Request Payload

data

WebhookInputResource

The webhook resource to create.

attributes

object

url

string (uri)

The URL that this webhook should post events to. This must be a valid HTTP or HTTPS URL that does not exceed 300 characters in length.

description

string

(nullable, optional)

An optional description for this webhook, up to 64 characters in length.

Returns

201 - Created

data

WebhookResource

The webhook that was created.

type

string

The type of this resource: webhooks

id

string

The unique identifier for this webhook.

attributes

object

url

string

The URL that this webhook is configured to POST events to.

description

string

(nullable)

An optional description that was provided at the time the webhook was created.

secretKey

string

(optional)

createdAt

string (date-time)

The date-time at which this webhook was created.

relationships

object

logs

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

Sample Request

curl https://api.up.com.au/api/v1/webhooks \
  -XPOST \
  -H 'Authorization: Bearer up:demo:9HGIOFWOmWlg3LAH' \
  -H 'Content-Type: application/json' \
  --data-binary '{
    "data": {
      "attributes": {
        "url": "http://example.com/webhook",
        "description": "Example webhook"
      }
    }
  }'

Sample Response

{
  "data": {
    "type": "webhooks",
    "id": "a55a5da5-c45f-4425-beb4-3ab27cacb60c",
    "attributes": {
      "url": "http://example.com/webhook",
      "description": "Example webhook",
      "secretKey": "l0sacNrzZ57XE8gfyK1ET9RdZmKoDyrSUdkZORfnk26Suw8KU6jbLeJTOZDYrAMU",
      "createdAt": "2024-11-21T13:52:08+11:00"
    },
    "relationships": {
      "logs": {
        "links": {
          "related": "https://api.up.com.au/api/v1/webhooks/a55a5da5-c45f-4425-beb4-3ab27cacb60c/logs"
        }
      }
    },
    "links": {
      "self": "https://api.up.com.au/api/v1/webhooks/a55a5da5-c45f-4425-beb4-3ab27cacb60c"
    }
  }
}

Retrieve webhook

GET /webhooks/{id}

Retrieve a specific webhook by providing its unique identifier.

Path Parameters

id

string

The unique identifier for the webhook.

e.g. dedd508c-bad6-4517-afe4-f65e44a92a32

Returns

200 - Successful Response

data

WebhookResource

The webhook returned in this response.

type

string

The type of this resource: webhooks

id

string

The unique identifier for this webhook.

attributes

object

url

string

The URL that this webhook is configured to POST events to.

description

string

(nullable)

An optional description that was provided at the time the webhook was created.

secretKey

string

(optional)

createdAt

string (date-time)

The date-time at which this webhook was created.

relationships

object

logs

object

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

links

object

(optional)

self

string

The canonical link to this resource within the API.

Sample Request

curl https://api.up.com.au/api/v1/webhooks/e4d066c3-c94a-46e8-b552-6eb3096b9585 \
  -H 'Authorization: Bearer up:demo:OyiccFdPlUdDVJRH'

Sample Response

{
  "data": {
    "type": "webhooks",
    "id": "e4d066c3-c94a-46e8-b552-6eb3096b9585",
    "attributes": {
      "url": "http://example.com/webhook-2",
      "description": "Webhook number 2",
      "createdAt": "2024-11-20T13:52:10+11:00"
    },
    "relationships": {
      "logs": {
        "links": {
          "related": "https://api.up.com.au/api/v1/webhooks/e4d066c3-c94a-46e8-b552-6eb3096b9585/logs"
        }
      }
    },
    "links": {
      "self": "https://api.up.com.au/api/v1/webhooks/e4d066c3-c94a-46e8-b552-6eb3096b9585"
    }
  }
}

Delete webhook

DELETE /webhooks/{id}

Delete a specific webhook by providing its unique identifier. Once deleted, webhook events will no longer be sent to the configured URL.

Path Parameters

id

string

The unique identifier for the webhook.

e.g. 5ab60182-9d53-44b8-9e92-ec94be91ec20

Returns

204 - Deleted

Sample Request

curl https://api.up.com.au/api/v1/webhooks/393e4227-5b3a-4e62-b04d-b6047844e78a \
  -XDELETE \
  -H 'Authorization: Bearer up:demo:xja12GGVpD1nyraB'

Ping webhook

POST /webhooks/{webhookId}/ping

Send a PING event to a webhook by providing its unique identifier. This is useful for testing and debugging purposes. The event is delivered asynchronously and its data is returned in the response to this request.

Path Parameters

webhookId

string

The unique identifier for the webhook.

e.g. a7a46a38-f593-411c-86ce-40e6baf492e5

Returns

201 - Successful response

data

WebhookEventResource

The webhook event data sent to the subscribed webhook.

type

string

The type of this resource: webhook-events

id

string

The unique identifier for this event. This will remain constant across delivery retries.

attributes

object

eventType

WebhookEventTypeEnum

The type of this event. This can be used to determine what action to take in response to the event.

Possible values: TRANSACTION_CREATED, TRANSACTION_SETTLED, TRANSACTION_DELETED, PING

createdAt

string (date-time)

The date-time at which this event was generated.

relationships

object

webhook

object

data

object

type

string

The type of this resource: webhooks

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

transaction

object

(optional)

data

object

type

string

The type of this resource: transactions

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

Sample Request

curl https://api.up.com.au/api/v1/webhooks/fbefa6df-1acd-4a73-8534-a0fe7432b604/ping \
  -XPOST \
  -H 'Authorization: Bearer up:demo:O28KYMdMnA1H5TPV' \
  -H 'Content-Type: application/json' \
  --data-binary ''

Sample Response

{
  "data": {
    "type": "webhook-events",
    "id": "8caf4b5f-7aef-4402-a27d-ff75e7c0a86e",
    "attributes": {
      "eventType": "PING",
      "createdAt": "2024-11-21T13:52:13+11:00"
    },
    "relationships": {
      "webhook": {
        "data": {
          "type": "webhooks",
          "id": "fbefa6df-1acd-4a73-8534-a0fe7432b604"
        },
        "links": {
          "related": "https://api.up.com.au/api/v1/webhooks/fbefa6df-1acd-4a73-8534-a0fe7432b604"
        }
      }
    }
  }
}

List webhook logs

GET /webhooks/{webhookId}/logs

Retrieve a list of delivery logs for a webhook by providing its unique identifier. This is useful for analysis and debugging purposes. The returned list is paginated and can be scrolled by following the next and prev links where present. Results are ordered newest first to oldest last. Logs may be automatically purged after a period of time.

Path Parameters

webhookId

string

The unique identifier for the webhook.

e.g. 80e7f510-e0b8-4808-8e9b-dde1c6c919c4

Query Parameters

page[size]

integer

The number of records to return in each page.

e.g. ?page[size]=30

Returns

200 - Successful response

data

Array [WebhookDeliveryLogResource]

The list of delivery logs returned in this response.

type

string

The type of this resource: webhook-delivery-logs

id

string

The unique identifier for this log entry.

attributes

object

request

object

Information about the request that was sent to the webhook URL.

body

string

The payload that was sent in the request body.

response

object

(nullable)

Information about the response that was received from the webhook URL.

statusCode

integer

The HTTP status code received in the response.

body

string

The payload that was received in the response body.

deliveryStatus

WebhookDeliveryStatusEnum

The success or failure status of this delivery attempt.

Possible values: DELIVERED, UNDELIVERABLE, BAD_RESPONSE_CODE

createdAt

string (date-time)

The date-time at which this log entry was created.

relationships

object

webhookEvent

object

data

object

type

string

The type of this resource: webhook-events

id

string

The unique identifier of the resource within its type.

links

object

prev

string

(nullable)

The link to the previous page in the results. If this value is null there is no previous page.

next

string

(nullable)

The link to the next page in the results. If this value is null there is no next page.

Sample Request

curl https://api.up.com.au/api/v1/webhooks/a8720176-a77a-4bc2-9509-6b4129369cce/logs \
  -G \
  -H 'Authorization: Bearer up:demo:c8TMTxomEAyTNbQC' \
  -d 'page[size]=1'

Sample Response

{
  "data": [
    {
      "type": "webhook-delivery-logs",
      "id": "bff07647-fc92-4e37-85f2-ca64aeb8199e",
      "attributes": {
        "request": {
          "body": "{\"data\":{\"type\":\"webhook-events\",\"id\":\"50af3d23-a970-4ec2-8ba1-3fd590058cf0\",\"attributes\":{\"eventType\":\"TRANSACTION_CREATED\",\"createdAt\":\"2024-11-20T13:53:14+11:00\"},\"relationships\":{\"webhook\":{\"data\":{\"type\":\"webhooks\",\"id\":\"a8720176-a77a-4bc2-9509-6b4129369cce\"},\"links\":{\"related\":\"https://api.up.com.au/api/v1/webhooks/a8720176-a77a-4bc2-9509-6b4129369cce\"}},\"transaction\":{\"data\":{\"type\":\"transactions\",\"id\":\"8378e923-c284-490e-82c2-4a799abddee0\"},\"links\":{\"related\":\"https://api.up.com.au/api/v1/transactions/8378e923-c284-490e-82c2-4a799abddee0\"}}}}}"
        },
        "response": {
          "statusCode": 200,
          "body": "{\"ok\":true}"
        },
        "deliveryStatus": "DELIVERED",
        "createdAt": "2024-11-20T13:53:14+11:00"
      },
      "relationships": {
        "webhookEvent": {
          "data": {
            "type": "webhook-events",
            "id": "50af3d23-a970-4ec2-8ba1-3fd590058cf0"
          }
        }
      }
    }
  ],
  "links": {
    "prev": null,
    "next": "https://api.up.com.au/api/v1/webhooks/a8720176-a77a-4bc2-9509-6b4129369cce/logs?page%5Bafter%5D=WyIyMDI0LTExLTIwVDAyOjUzOjE0LjYyOTgyMTAwMFoiLCJiZmYwNzY0Ny1mYzkyLTRlMzctODVmMi1jYTY0YWViODE5OWUiXQ%3D%3D&page%5Bsize%5D=1"
  }
}

Handling webhook events

POST {webhookURL}// webhook

Once you have created a webhook in the Up API, events are sent to the webhook’s configured URL as JSON-encoded POST requests. The webhook URL must respond with a HTTP 200 status on success.

It is important that the URL responds in a timely manner. If the URL takes too long to respond (currently 30s), the request will be timed out. For this reason it is strongly advised to avoid any heavy processing before a response has been returned from the URL. A common solution to this problem is to use a message broker such as RabbitMQ to do the work asynchronously.

Event delivery is retried with exponential backoff in the case of any non-200 response status, if the URL is unreachable, or if the request is timed out.

Refer to the eventType attribute in order to determine what course of action to take when handling the event. The following event types are currently sent:

PING

Manually triggered by calls to the webhook ping endpoint. Used for testing and debugging purposes.

TRANSACTION_CREATED

Triggered whenever a new transaction is created in Up. This event includes a transaction relationship that provides the unique identifier for the transaction and a link to the transaction within the Up API. This link should be used to retrieve the complete transaction data.

TRANSACTION_SETTLED

Triggered whenever a transaction transitions from the HELD status to the SETTLED status. This event includes a transaction relationship that provides the unique identifier for the transaction and a link to the transaction within the Up API. This link should be used to retrieve the complete transaction data.

Due to external factors in banking processes, on rare occasions this event may not be triggered. Separate TRANSACTION_DELETED and TRANSACTION_CREATED events will be received in its place.

TRANSACTION_DELETED

Triggered whenever a HELD transaction is deleted from Up. This generally occurs for example when a hotel deposit is returned. This event includes a transaction relationship that provides the unique identifier for the transaction, however no link is provided to the transaction within the Up API as it no longer exists.

Securing Webhook Event Handlers

Incoming webhook event requests include a X-Up-Authenticity-Signature header, which can be used to verify that the event was sent by Up. Verification of the signature requires knowledge of the shared secretKey that was returned upon creation of the webhook. This key is known only to your application and to Up.

The verification process involves:

Taking the raw, unparsed webhook event request body.
Computing the SHA-256 HMAC signature of the request body, using the shared secretKey.
Comparing the computed HMAC signature with the value of the X-Up-Authenticity-Signature header.

If the computed SHA-256 HMAC signature matches the X-Up-Authenticity-Signature header, the request is valid.

A few language-specific examples follow.

Ruby:

This example uses the Ruby on Rails framework.

require 'openssl'

def handle_webhook_event
  received_signature =
    request.headers['X-Up-Authenticity-Signature']

  signature = OpenSSL::HMAC.hexdigest(
    'SHA256',
    secret_key,
    request.raw_post,
  )

  if Rack::Utils.secure_compare(received_signature, signature)
    # Process webhook event
  end
end

PHP:

This example uses the Laravel framework.

public function handleWebhookEvent(Request $request) {
    $received_signature = $request->header(
        'X-Up-Authenticity-Signature',
        ''
    );
    $raw_body = $request->getContent();
    $signature = hash_hmac('sha256', $raw_body, $this->secretKey);

    if (hash_equals($signature, $received_signature)) {
        // Process webhook event
    }
}

Go:

This example is in plain Go.

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "io"
    "net/http"
)

func handleWebhookEvent(w http.ResponseWriter, r *http.Request) {
    receivedSignature, _ := hex.DecodeString(
        r.Header.Get("X-Up-Authenticity-Signature"),
    )

    mac := hmac.New(sha256.New, secretKey)
    io.Copy(mac, r.Body)
    signature := mac.Sum(nil)

    if hmac.Equal(signature, receivedSignature)
        // Process webhook event
    }
}

If the secretKey for a webhook is lost, simply create a new webhook with the same URL, capture the returned secretKey and delete the original webhook.

Request Headers

X-Up-Authenticity-Signature

string

The SHA-256 HMAC signature of the raw request body, signed using the secretKey of the webhook.

e.g. X-Up-Authenticity-Signature: 317c0a8ea81df3f53c1d2aef5dcbf60492d0df557197b2990e71daa4a0693364

Request Payload

data

WebhookEventResource

The webhook event data sent to the subscribed webhook.

type

string

The type of this resource: webhook-events

id

string

The unique identifier for this event. This will remain constant across delivery retries.

attributes

object

eventType

WebhookEventTypeEnum

The type of this event. This can be used to determine what action to take in response to the event.

Possible values: TRANSACTION_CREATED, TRANSACTION_SETTLED, TRANSACTION_DELETED, PING

createdAt

string (date-time)

The date-time at which this event was generated.

relationships

object

webhook

object

data

object

type

string

The type of this resource: webhooks

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

transaction

object

(optional)

data

object

type

string

The type of this resource: transactions

id

string

The unique identifier of the resource within its type.

links

object

(optional)

related

string

The link to retrieve the related resource(s) in this relationship.

Expected Response

200 - Successful Response

Sample Payload

{
  "data": {
    "type": "webhook-events",
    "id": "0931bafa-7020-49c8-8904-09010d27991f",
    "attributes": {
      "eventType": "TRANSACTION_CREATED",
      "createdAt": "2024-11-21T13:52:09+11:00"
    },
    "relationships": {
      "webhook": {
        "data": {
          "type": "webhooks",
          "id": "6eff0f0a-9524-4ef3-a6fc-1a011744da7b"
        },
        "links": {
          "related": "https://api.up.com.au/api/v1/webhooks/6eff0f0a-9524-4ef3-a6fc-1a011744da7b"
        }
      },
      "transaction": {
        "data": {
          "type": "transactions",
          "id": "c3faf1e6-9341-4987-9a7c-9aa4513a699a"
        },
        "links": {
          "related": "https://api.up.com.au/api/v1/transactions/c3faf1e6-9341-4987-9a7c-9aa4513a699a"
        }
      }
    }
  }
}