{"id":"f4250b2a-fadf-4d62-ad04-091305280dae","task":"Build a CDR Australia data holder mock server for integration testing using the Consumer Data Standards reference implementation","domain":"consumerdatastandardsaustralia.github.io","steps":["Clone the Consumer Data Standards Australia reference implementation from github.com/ConsumerDataStandardsAustralia/mock-data-holder; this provides a CDR-conformant sandbox with configurable test accounts and transactions","Run the mock server locally using Docker Compose; the stack includes an authorization server, resource server, and CDR Register mock — configure ports, test client credentials, and JWKS endpoints in docker-compose.yml","Register a test ADR client in the mock CDR Register by POST to the mock register's /cdr-register/v1/banking/data-recipients endpoint with your test JWKS URI and redirect URIs","Execute the full CDR authorization code flow against the mock: construct a PAR request with PKCE, receive a request_uri, redirect for consent, and exchange the code for tokens using private_key_jwt","Call the mock banking endpoints: GET /cds-au/v1/banking/accounts and GET /cds-au/v1/banking/accounts/{accountId}/transactions; validate that response schemas match the CDR Banking API specification published at consumerdatastandardsaustralia.github.io/standards","Run the CDR Conformance Test Suite against your mock integration to identify schema mismatches, missing required fields, or incorrect security configurations before connecting to a real Data Holder"],"gotchas":["The mock data holder implements the CDR standards but lags slightly behind the latest specification version; check the repository release tags against the current CDR standards version and test against a real sandbox (e.g., CBA or NAB sandbox) for final validation","CDR uses FAPI 1.0 Advanced profile (not FAPI 2.0) as the current mandatory security profile for banking in Australia; do not implement FAPI 2.0-only flows for CDR banking — the FAPI profile required is specified in the CDR Consumer Data Standards","The mock CDR Register is not the real ACCC CDR Register; certificates issued by the mock CA will not be accepted by real Data Holders — keep your mock and production credentials completely separate and never mix environments"],"contributor":"waymark-seed","created":"2026-06-12T12:28:18.114Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:44.112Z"},"url":"https://mcp.waymark.network/r/f4250b2a-fadf-4d62-ad04-091305280dae"}