# MX Platform API (slim)

> MX Technologies' Platform API connects US and Canadian bank accounts for account aggregation, balance checks, account and owner verification and up to 24 months of categorised transactions, through REST endpoints or the embedded Connect Widget.

- Full: https://www.anchorterminal.com/tools/mx.md (~6,750 tokens) · this version ~1,680 tokens · JSON https://www.anchorterminal.com/tools/mx.json · canonical https://www.anchorterminal.com/tools/mx
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**B · 62.5/100 · rank #336 of 722 · #3 in Bank data & open banking · not agent-ready · confidence medium**


Assessment: Three public OpenAPI files, llms.txt, Markdown docs and a written version policy with 18 months of support and `Deprecation` and `Sunset` response headers. No price, client agreement or SLA is published, production keys need MX's approval, every calling IP address must be allowlisted, and the status page records three platform-wide error incidents since 10 July 2026.

## Facts

- Kind: HTTP API · vendor: MX Technologies, Inc. · category: Bank data & open banking · legal entity: MX Technologies, Inc. · provenance 80/100
- Endpoint: `https://api.mx.com` (HTTP)
- Auth: API key · pricing: Paid · x402: no · licence: Proprietary service. The SDKs and the OpenAPI files on GitHub are MIT
- Probe metrics: not measured yet (probes haven't run)
- Environments: Integration at https://int-api.mx.com (free, up to 100 users, a subset of institutions) and production at https://api.mx.com
- Versions: v20260929 (current, 29 September 2026), v20250224 and v20111101, chosen with the `Accept-Version` header. A missing version returns 406
- Products: Account aggregation, balance checks, instant account verification, account owner identification, extended transaction history (up to 24 months), statements, microdeposits, investment holdings, processor tokens
- Countries: US and Canada, per mx.com
- Rate limits: Production 2,000 GET, 750 POST, 750 PUT and 150 DELETE a second per client. Integration 300, 100, 100 and 50. Balance checks 5 per member every 2 hours
- Test data: Institution `mxbank` with username `mxuser` and passwords that set the connection status, plus MXCU test institutions for OAuth
- Consent and revocation: Connect Widget or API-created members. Deleting a member removes its accounts and transactions, soft-deleted first and purged after about two weeks
- Pagination: `page` and `records_per_page` (default 25, 10 to 1,000 on main lists), with a `pagination` object in each list response
- Errors: JSON `error` object with `message`, `status` and `type`, field-level `errors` on some 422s. 429 without `Retry-After`
- SDKs: Node `mx-platform-node` 2.1.0 and 3.0.0, Python `mx-platform-python` 1.12.0, Ruby, Java and C#, all generated from OpenAPI, MIT. Web and React Native widget SDKs
- Logs: Client Dashboard logs with request and response payloads for 7 days in production, and a user lookup of connection attempts
- Certifications: SOC 2 Type II and PCI DSS per mx.com/trust, with a public SOC 3 report. Other documents through UpGuard under NDA
- Support: support.mx.com, Monday to Friday 9 to 5 Mountain Time, first reply in about 24 business hours, 30 days' notice of maintenance

- Scores: Reliability 63, Performance pending, Schema & documentation 85, Agent ergonomics 74, Security & auth 60, Payments & pricing 15, Task success pending, Maintenance & community 71, Transparency & trust 63 · total over the 7 assessed categories
- Why: Reliability, Graded as a hosted API. · Schema & documentation, OpenAPI 3.0 files for v20260929, v20250224 and v20111101 are linked from llms.txt. · Agent ergonomics, v20260929 returns core fields by default and adds related data only through `includes[]`, and `records_per_page` runs from 10 to 1,000 on th… · Security & auth, Basic auth with a `client_id` and `api_key` in a header, never in the URL. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, v20260929 was released on 29 September 2026 (30). · Transparency & trust, Closed service.
- Sources: 29, open questions: 6, both in the full twin
- Capabilities: bank.accounts, bank.transactions, bank.identity, bank.consent
- JSON: https://www.anchorterminal.com/api/v1/tools/mx.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/mx.svg` or a link to https://www.anchorterminal.com/tools/mx from a page on mx.com or one of its subdomains, or the README of github.com/mxenabled/openapi, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Send `Accept: application/json`, `Accept-Version: v20260929` and Basic auth of `client_id:api_key` on every call. A missing version returns 406
2. Ask the owner to allowlist the calling machine's static IP in the Client Dashboard first. Other addresses get 403, and some failed authentication returns 404
3. Test against `https://int-api.mx.com` with institution `mxbank`, username `mxuser` and any password. It has no aggregation throttle
4. Set your own `id` when creating users and members. A repeat returns 409, which makes a retried create safe
5. Expect 202 without an error when a standard aggregation is throttled (three hours by default). Balance checks stop at 5 per member every 2 hours with 429
6. Pass `includes[]=merchant` or `includes[]=category` as an array on transaction lists. A comma-separated string returns 400

## Connect

```bash
npm install mx-platform-node@^3
```

```bash
curl -X GET 'https://int-api.mx.com/users' \
  -H 'Accept: application/json' \
  -H 'Accept-Version: v20260929' \
  -H 'Authorization: Basic BASE_64_ENCODING_OF{client_id:api_key}'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/mx

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Plaid | B | 69.8 | bank.accounts, bank.transactions, bank.identity, bank.consent | https://www.anchorterminal.com/tools/plaid.min.md |
| Belvo | B | 63.5 | bank.accounts, bank.transactions, bank.identity, bank.consent | https://www.anchorterminal.com/tools/belvo.min.md |
| Tink | B | 62.5 | bank.accounts, bank.transactions, bank.consent, bank.identity | https://www.anchorterminal.com/tools/tink.min.md |
| TrueLayer | B | 62.1 | bank.accounts, bank.transactions, bank.identity, bank.consent | https://www.anchorterminal.com/tools/truelayer.min.md |
| Yapily | C | 57.6 | bank.accounts, bank.transactions, bank.identity, bank.consent | https://www.anchorterminal.com/tools/yapily.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)