---
title: "Open banking mandate authorisation callback"
method: POST
path: "/open-banking/mandates/{mandate_id}/auth/callback"
tags: ["Variable Recurring Payments"]
---

# Open banking mandate authorisation callback

`POST /open-banking/mandates/{mandate_id}/auth/callback`

## Request

- Base URL: `https://test-api.acquired.com/v1`
- URL: `https://test-api.acquired.com/v1/open-banking/mandates/{mandate_id}/auth/callback`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/acquired/apis/acquired-api/docs/open-banking/mandates/:mandate_id/auth/callback/post.ts> (a function with typed inputs; its response is checked against the schema)

Exchanges the authorisation code and id_token returned by the ASPSP redirect for a mandate authorisation outcome.

## Path parameters

- `mandate_id` string, required

## Headers

- `Company-Id` string, uuid
- `Mid` string, uuid

## Request body

- OpenBankingMandateAuthCallbackRequest
  - `code` string, required: Authorisation code returned by the ASPSP.
  - `id_token` string, required: ID token returned by the ASPSP redirect.
  - `webhook_url` string, uri: Optional webhook URL to receive mandate status updates.

## Response `200`

OK

- object: Empty object returned on success.

## Other responses

- `400`
- `401`
- `403`
- `500`

## Changes

- **2026-11-03** `9c9e8ec96e98`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/acquired/apis/acquired-api/changes/open-banking/mandates/:mandate_id/auth/callback/post.md)

---

[API](https://skmtc.dev/acquired/apis/acquired-api.md) - [All operations](https://skmtc.dev/acquired/apis/acquired-api/llms.txt) - [OpenAPI document](https://skmtc.dev/acquired/apis/acquired-api/revisions/9c9e8ec96e98?raw)