Apply for Unrestricted ADR accreditation via the ACCC CDR register portal; prepare documentation including information security policy, a privacy policy, and evidence of compliance with the CDR Rules — the accreditation guideline version 6 (August 2025) is the current reference
Alternatively, apply for Sponsored accreditation by contracting with an existing Unrestricted ADR who will sponsor your access; sponsored participants avoid the full audit burden but are operationally dependent on their sponsor
After accreditation, register your software product in the CDR Register; obtain your client_id and upload your JWKS endpoint URL — the CDR uses MTLS and private_key_jwt for all API calls
Discover the Data Holder's (bank's) endpoints via the CDR Register's Get Data Holder Brands endpoint; each bank publishes its authorization server metadata including the authorization_endpoint and token_endpoint
Initiate user consent: construct an authorization request using PKCE and the openid, profile, bank:accounts.basic:read, and bank:transactions:read scopes; redirect the user through the bank's CDR consent flow
Exchange the code for tokens via the bank's token_endpoint using private_key_jwt client authentication; call GET /banking/accounts to list accounts and GET /banking/accounts/{accountId}/transactions to retrieve transactions
Known gotchas
CDR uses MTLS for all token and data API calls; your TLS client certificate must be from a CDR-recognised CA and must match the certificate registered on the CDR Register — mismatches cause connection rejections that look like generic TLS errors
Consumer consent under CDR expires after a maximum of 12 months; there is no indefinite consent — build consent expiry tracking and renewal UX from the start rather than treating 12 months as effectively permanent
CDR currently covers banking and energy only; the non-bank lending sector was added by the Amending Rules commencing March 2025, but not all non-bank lenders were immediately Data Holders — check the CDR Register for the specific institution's participation status before building
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp