Complete FCA authorisation as a AISP and/or PISP (or confirm your EEA passport status post-Brexit via temporary permissions); obtain your FCA Firm Reference Number (FRN) — directory registration requires regulatory authorisation
Register on the Open Banking Directory at directory.openbanking.org.uk; create an Organisation and associate it with your FRN; OBL will validate your regulatory status against the FCA register
Create a Software Statement within your Organisation; specify the redirect URIs, logo URL, and applicable roles (AISP, PISP, CBPII); receive a Software Statement Assertion (SSA) JWT which proves your identity to ASPSPs
Generate a key pair and submit a Certificate Signing Request (CSR) to OBL's certificate authority (or a recognised QTSP for eIDAS QWAC/QSealC); download your Transport Certificate (QWAC) and Signing Certificate (QSealC)
Install the transport certificate in your TLS stack; all connections to ASPSP Open Banking APIs must present this client certificate — standard TLS without a client certificate will be rejected
Register a dynamic client with each ASPSP using DCR (Dynamic Client Registration): POST /register at the ASPSP's DCR endpoint with your SSA, redirect_uris, and token_endpoint_auth_method (private_key_jwt)
Known gotchas
Post-Brexit, UK-authorised TPPs use OBL-issued certificates rather than EU eIDAS certificates; EU ASPSPs may not accept OBL certificates and vice versa — you need separate certificate sets for UK and EU operations
SSAs expire and are periodically rotated; ASPSPs cache your DCR registration but some will reject API calls if your SSA has rotated and you have not refreshed the DCR registration — monitor OBL directory announcements for SSA rotation schedules
DCR registrations are per-ASPSP; you must execute the dynamic client registration flow with each ASPSP individually using that ASPSP's DCR endpoint — there is no global one-time registration that covers all UK ASPSPs
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp