GoCardless Bank Account Data vs Tink

GoCardless Bank Account Data

UK plus every PSD2 country, up to 24 months of history, one API shape for all of them. No public price and no confirmed free plan.

Tink

OAuth client credentials with per-endpoint scopes, token-paged data endpoints and a published MSA, DPA, SLA and sub-processor list. No price is public, live access needs a sales contract, and the API reference has no downloadable spec or published rate-limit numbers.

GoCardless Bank Account Data

1. Cache the access token for its 24 hours and use /api/v2/token/refresh/ rather than minting a new pair each run
2. Create the end user agreement before the requisition when you need other than 90 days of history or access
3. Read the per-account rate limit headers; on 429 wait for the account reset time, since some banks allow 4 calls a day
4. Poll /api/v2/accounts/{id}/ until status is READY before asking for transactions
5. Call the REST endpoints directly; the Nordigen SDKs still install but get no fixes

Tink

1. Request a client token at https://api.tink.com/api/v1/oauth/token, create a user, request an authorisation grant for that user, then exchange the code for a user token.
2. Renew tokens on a timer. Client tokens last 30 minutes and user tokens two hours, and the client credentials flow returns no refresh token.
3. Send the account holder through Tink Link in a browser. Bank consent cannot be completed by API calls alone.
4. Read transactions from /data/v2/transactions with pageSize up to 100 and follow nextPageToken.
5. Send an Idempotency-Key header on consent and payment writes. Keys are kept for 24 hours.