To help you out during your OFDA integration process, we've created a checklist for you to follow 😉. Please make sure you address all the items before requesting access to the Production environment.
While you're integrating the widget, make sure that:
- Your users first register an account with your application before prompting them to connect their accounts with Belvo.
- You are using the
external_idparameter to provide your own unique ID for a link (or group of links) in your system. Note: This parameter is searchable within Belvo's system as well. - If using single links, you use the
fetch_resourcesparameter to asynchronously receive historical data about your user. - You can generate an
access_tokenfor both individuals and businesses. - You have correctly implemented your callback URLs.
- You can handle Success, Exit, Error, and Warning events from the Hosted Widget.
Make sure that your integration can handle and log the request_id of:
- 400 and 401 errors
- 500 Errors
- Timeout errors
We ask you to log the request_id just in case you need to reach out to our support team. With this ID, we can speed up the troubleshooting process and figure out a solution for you.
For more information on the retry logic you should implement, see our General error handling notes.
Can your integration handle:
- 200, 201, and 202 Success responses
- 204 Success responses (when you delete some data)
- Pagination
Additionally, make sure that with successful responses, you store:
- The unique identifier for the object (for example, the
transaction.id)
This will allow you to avoid having duplicated objects (such as transactions) in your database.
Whether you are using single or recurrent links, make sure you:
- <a href="../../developer_resources/resources-webhooks-aggregation target="_blank" rel="noopener noreferrer">Set a webhook URL in the dashboard so that you can receive webhook events. Please remember that you'll need to set different webhook URLs depending on the environment you're working in.
- If using recurrent links, that you have set up your refresh rate according to your needs (daily, weekly, or monthly) (contact our sales team).
- Only send GET requests after you receive a webhook event.
- Respond within five seconds of receiving a webhook with a 200 OK.
- Whitelist the following IP addresses:
You can receive webhook events from the following IP addresses:
3.130.254.4618.220.61.18618.223.45.212
We highly recommend you whitelist these IP addresses so that you can receive webhook events.
Does your integration:
- Have a mechanism to avoid duplicate links from being created?
- Monitor for
invalidandtoken_requiredlink statuses, and if needed, prompt your users to update their credentials? - Familiarized yourself with the Open finance Brazil network limits.
Have you:
- Implemented a easy-to-access link to the My Belvo Portal?
- Implemented a mechanism to handle
consent_expiredConsent webhook events?
If we make the following non-breaking changes to our API, are you sure it won't affect your integration?
- New fields or a different order in the response body.
- Change the number of characters for a string.
- Return
yyyy-MM-ddTHH:mm:ss.SSSZtimestamps, whereSare microseconds (from 3 to 6 digits) andZis either+00:00orZ. - Add new endpoints.
When you are switching to Production, make sure that:
- You are calling the production version of the Belvo API (https://api.belvo.com).
- You are using your Belvo Production API Keys.
- You are storing your API keys securely.
Make sure you've subscribed to the following services to be up to date on the status of our API and institutions:
- Belvo API status
- Institution status (see our dedicated guide)