Open APIs (Open API)

Fintech and Public Finance

Open APIs are software interfaces available to external developers and systems, ensuring integration and data exchange between information systems.

What are open APIs
Types of open APIs
Open API in the low-code ecosystem
Advantages of Open API

What are open APIs

Open APIs (Open Application Programming Interface) are software interfaces that an organization publishes for external use by other developers, companies or government bodies. Unlike internal APIs, open interfaces are available outside the organization and are often regulated by standards and legislation. The Open API concept is a key element of the digital ecosystem, allowing different systems to exchange data and functions without the need to create individual integrations.

Open APIs (Open API) — term diagram

In the financial sector, Open APIs are regulated by law: since 2022, the Bank of Russia has been implementing an open API standard for data exchange between banks and third-party financial service providers (FinTech companies). In the public sector, open APIs are used to ensure interdepartmental electronic interaction (SMEV) and access to government information systems.

Types of open APIs

Public API — fully open interfaces available to any developers without restrictions.
Partner API — available only to authorized partners under a contract.
Open Government API — interfaces for accessing government data and services.

Open API in the low-code ecosystem

The SintezM platform provides a built-in Open API designer that allows creating and publishing REST APIs for developed applications without writing code. For each application, you can automatically generate an OpenAPI specification (Swagger), configure authorization and access management. This allows applications on SintezM to easily integrate with external systems and provide data through standardized interfaces. The built-in API Gateway manages traffic, provides rate limiting and monitoring.

The SKIF-BP system uses Open API to integrate with external accounting systems (1C, Parus, SAP) and government information systems (GIS "Electronic Budget", UIS in the field of procurement). Standardization of interfaces significantly simplifies connecting new systems and reduces integration costs. The design service includes determining the composition and specifications of open APIs in the customer's information system architecture.

Advantages of Open API

For the state: reduced costs for interdepartmental interaction, increased transparency of activities, creation of an ecosystem of digital services for citizens and businesses. For business: the possibility of rapid integration with government systems, access to new markets through partner APIs, reduced time to market. Open API protection technology includes authentication mechanisms (OAuth 2.0, OpenID Connect), traffic encryption (TLS) and request rate limiting. COD technology allows creating reusable API components for typical integration scenarios.

The development of Open API in the public sector is regulated by the Methodological Recommendations of the Ministry of Digital Development, which establish uniform requirements for API formats, protocols and security. The SintezM platform supports all Open API requirements, including mandatory authentication through ESIA and request logging.

The SKIF-BP system uses Open API to integrate with banking systems, which allows automating the treasury payment process. Information protection technology when transmitting data via Open API is provided by traffic encryption and electronic signature. The design service includes development of the organization's API strategy.

In the public sector, Open APIs are used for integration with systems: ESIA (identification), UBS (biometrics), GIS GMP (state payments), SMEV (interdepartmental interaction). SKIF-BP supports all these interaction formats, providing seamless integration with the state infrastructure.

Open API security is ensured at several levels: authentication via OAuth 2.0, TLS 1.3 encryption, rate limiting, logging and audit of all requests. SKIF-BP implements all these security mechanisms.

Sources: API on Wikipedia

Frequently asked questions

What are Open APIs?

Open APIs (Open Application Programming Interface) are software interfaces that an organization publishes for external use by other developers, companies or government bodies. Unlike internal APIs, they are available outside the organization and allow different systems to exchange data without building individual integrations. In the financial sector, Open APIs are regulated by law: since 2022, the Bank of Russia has been implementing an open API standard for data exchange between banks and third-party financial service providers. Our SINTEZ-M platform provides a built-in Open API designer.

How do Open APIs work?

Open APIs work through standardized requests to interface endpoints: an external system sends an HTTP request and receives a response in a machine-readable format, such as JSON or XML. The API provider publishes documentation and an API specification, and configures authentication and access rights. This allows external developers and systems to exchange data with the organization without individual integration. In the public sector, open APIs are used for interdepartmental electronic interaction via SMEV and access to government information systems.

Where are Open APIs used?

Open APIs are used in finance — for data exchange between banks and fintech services under the open API standard of the Bank of Russia; in the public sector — for interdepartmental electronic interaction and access to government information systems; and in business — for integrating partners and third-party developers into a digital ecosystem. Depending on the purpose, there are Public APIs (open to any developers), Partner APIs (available to authorized partners under a contract) and Open Government APIs (access to government data and services). Our SINTEZ-M platform allows creating and publishing REST APIs without writing code.

What advantages do Open APIs provide?

Open APIs provide advantages to all parties. For the state: reduced costs for interdepartmental interaction, increased transparency of activities and the creation of an ecosystem of digital services for citizens and businesses. For business: rapid integration with government systems, access to new markets through partner APIs and reduced time to market. For users: a wider range of convenient services based on open interfaces and data.

What are the requirements for Open APIs in Russia?

The development of Open API in the public sector is regulated by the Methodological Recommendations of the Ministry of Digital Development, which establish uniform requirements for API formats, protocols and security. For each application, you can automatically generate an OpenAPI specification (Swagger), configure authorization and access management. The SintezM platform supports all Open API requirements, including mandatory authentication through ESIA.

What is the difference between Open API and internal API?

An internal API is used only within an organization to connect its own systems, while an Open API is published for external developers, companies or government bodies and is usually regulated by standards and legislation. Open APIs require published documentation, authentication and access management. In the low-code ecosystem, our SINTEZ-M platform provides a built-in Open API designer that allows creating and publishing REST APIs without writing code.

How to implement Open APIs in an organization?

Implementation of Open APIs begins with defining an API strategy: deciding which data and functions to expose and whether to use public, partner or government APIs. The interfaces are then designed, documented in an OpenAPI specification (Swagger) and published with authentication and access management configured. Our SINTEZ-M platform includes a built-in Open API designer that automates this process. The design service will help develop the API strategy and architecture.