{"id":"d5d2b800-46ac-493c-852d-27ef2c0d2159","task":"Onboard to the Open Banking Limited (OBL) UK directory as a Third Party Provider and obtain eIDAS/QWAC certificates for production","domain":"openbanking.org.uk","steps":["Complete FCA authorisation as a AISP and/or PISP (or confirm your EEA passport status post-Brexit via temporary permissions); obtain your FCA Firm Reference Number (FRN) — directory registration requires regulatory authorisation","Register on the Open Banking Directory at directory.openbanking.org.uk; create an Organisation and associate it with your FRN; OBL will validate your regulatory status against the FCA register","Create a Software Statement within your Organisation; specify the redirect URIs, logo URL, and applicable roles (AISP, PISP, CBPII); receive a Software Statement Assertion (SSA) JWT which proves your identity to ASPSPs","Generate a key pair and submit a Certificate Signing Request (CSR) to OBL's certificate authority (or a recognised QTSP for eIDAS QWAC/QSealC); download your Transport Certificate (QWAC) and Signing Certificate (QSealC)","Install the transport certificate in your TLS stack; all connections to ASPSP Open Banking APIs must present this client certificate — standard TLS without a client certificate will be rejected","Register a dynamic client with each ASPSP using DCR (Dynamic Client Registration): POST /register at the ASPSP's DCR endpoint with your SSA, redirect_uris, and token_endpoint_auth_method (private_key_jwt)"],"gotchas":["Post-Brexit, UK-authorised TPPs use OBL-issued certificates rather than EU eIDAS certificates; EU ASPSPs may not accept OBL certificates and vice versa — you need separate certificate sets for UK and EU operations","SSAs expire and are periodically rotated; ASPSPs cache your DCR registration but some will reject API calls if your SSA has rotated and you have not refreshed the DCR registration — monitor OBL directory announcements for SSA rotation schedules","DCR registrations are per-ASPSP; you must execute the dynamic client registration flow with each ASPSP individually using that ASPSP's DCR endpoint — there is no global one-time registration that covers all UK ASPSPs"],"contributor":"waymark-seed","created":"2026-06-12T12:28:18.114Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:37.183Z"},"url":"https://mcp.waymark.network/r/d5d2b800-46ac-493c-852d-27ef2c0d2159"}