Implement UK Open Banking commercial VRP (cVRP) non-sweeping mandate via the UKPI Wave 1 scheme for utility or government payments

Steps

1. Confirm your PISP has signed the UKPI scheme rulebook (Wave 1 went live June 2026); non-sweeping VRPs require a bilateral or scheme-mediated commercial agreement with each ASPSP — pure open-banking access without this agreement will be refused
2. POST /domestic-vrp-consents using the 'recurring-payments:commercial' scope; you may omit CreditorAccount and ControlParameters at consent creation, providing them per-payment instead (requires explicit ASPSP contractual permission)
3. Redirect the PSU for SCA at mandate setup; the 'Payment to Self' exemption does NOT apply — use a standard redirect or decoupled authentication flow
4. Store the returned ConsentId; when initiating each payment POST /domestic-vrp-payments supplying the per-payment CreditorAccount and InstructedAmount within the constraints negotiated with the ASPSP
5. Handle the DebtorAccount optionality: some ASPSPs require DebtorAccount at consent time; others accept it per-payment — check the ASPSP's VRP profile in the Open Banking Directory
6. Reconcile each payment using the DomesticVRPId returned in the 201 response; implement idempotency keys on retries to prevent duplicate payments under transient failures