API Features How to use BCA’s API

General

API BCA is a service from BCA designed to provide ease in executing financial transactions, such as balance checking, mutation checking, transfers, and other functions from your platform (website/application).
For information regarding API BCA's fees, please contact api_support@bca.co.id or Halo BCA Bisnis at 1500998.

Submit your API BCA cooperation request here, and upon approval, you should proceed with the following steps:
- Develop API services in alignment with the provided Technical Documents or access them on the Documentation page.
- Conduct testing on the developed API service
- Activate and implement the developed API services.

For further information regarding API BCA cooperation, please contact us via:
api_support@bca.co.id

To find out your BCA's API partnership application status, contact us here or via email api_support@bca.co.id by including the application reference number you received when submitting the application online
You can apply for collaboration here. If you need other assistance, please Contact Us

Explore API BCA features here that are suitable to your business needs. If you are interested in integrating API BCA into your platform, please apply for API BCA collaboration registration here

If you can't find features suitable to your business needs, please contact us for further discussion

You can access the technical documentation on the API BCA services on the Documentation page. Promptly register for a Registered Account to acces the sandbox on the API BCA Developer Website.

Developer

BCA provides API BCA Documentation which can be used as a technical guide for integration with the API BCA.
API key, API secret, client ID, client secret, public key and private key are a set of credentials or security keys that serves as your identity to access API BCA. Security keys are needed to ensure that the API BCA can be accessed by authorized parties and to ensure data integrity.
No. The access token can be used for all available API BCA services within a usage time limit of 1 hour. 
For SNAP-based API BCA, there is a limitation of 15 minutes. 

How to perform Telnet to the API BCA developer server: 
1. Open "Command Prompt"
2. Type the telnet command (for example, to telnet to the BCA development environment: telnet devapi.klikbca.com 443) or you can adjust the command to suit your system.

API BCA uses REST API with JSON format. An example of the API BCA messaging format can be found on the Documentation page. 
The programming languages that can be used are not regulated, so you can use your preferred programming language. However, to make development easier, BCA has provided the Open API Payment SDK in the following programming languages:
- Java
- PHP
- .NET
- Golang
- Python

Get the SDK above by contacting us via:
api_support@bca.co.id

SNAP-based API BCA

The SNAP-based API BCA is an API BCA that has been adapted to the National Open API Payment Standard set by Bank Indonesia. Adjustments are made in terms of governance, including cooperation mechanisms and technical standards, encompassing API request and response formats.
For technical documentation information on the SNAP-based API BCA, see the Documentation page
If you are interested in using the SNAP-based API BCA, please apply for API BCA collaboration here
Public Key is a unique code used by each Party (as relevant) for the Signature verification process when accessing certain features of the API BCA.
The public key that needs to be provided is as follows:
- certificate format X.509
- File extension Public Key = .pub

To extract the Public Key from the Private Key, you can use the following options:
openssl rsa -in ${PrivateKeyFileName} -pubout -out public-key.pub

Public keys and private keys are only used in SNAP-based API services
Get the SNAP-based technical and security standards documents, standards data, and technical specifications by accessing the following links
https://apidevportal.aspi-indonesia.or.id/
For further questions regarding the SNAP dev site portal, you can email to snap@aspi-indonesia.or.id
The access token validity period is 15 minutes.
Yes, it is necessary to generate a signature using the SHA256withRSA asymmetric signature algorithm.
For further information, please refer to the OAuth & Signature SNAP documentation
You can use the existing ClientID and ClientSecret, which are already used for the API BCA. However, you need to provide a public key to be able to make SNAP-based API BCA transactions.
The SNAP-based API BCA is no longer using API keys and API secrets. However, it was replaced by RSA key pairs (Public Key and Private Key)
The RSA key pair will be used to generate and verify an asymmetric signature when getting the access token.
Private Key is used to generate signature (client/user API side) and Public Key is used to verify signature (server/API provider side)

API BCA Website Developer Account

API BCA Developer Website Account is an account on the API BCA Developer Website to access various features provided on the API BCA Developer Website. There are two types of accounts, namely Registered Account and Verified Account.
Registered Account is a type of API BCA Developer Website account created to be able to access the Sandbox feature. You can create a Registered Account here
Verified Account is a special account for API BCA Customers that has been verified to be able to access special features of the API BCA Developer Website in managing API BCA collaboration
For new customers will get a Verified Account if the API BCA collaboration has been approved. If you have collaborated with API BCA but have not yet received a Verified Account, please contact PIC BCA who is processing the collaboration.

The email address registered as a Verified Account will receive an activation email.
If you haven't received the activation email, make sure your inbox is not full and check the activation email again in the junk/spam folder.

If the activation email has expired, you can send request to re-send the account activation email to api_support@bca.co.id with the subject "Permohonan Kirim Ulang Email Aktivasi Verified Account".

Sandbox

Access to the API BCA Sandbox is free of charge
The API BCA Sandbox is a facility that can be accessed on the API BCA Developer Website to carry out API BCA trials (requests and responses) using the static dummy data that has been provided.
Login first and register your application on the MyApplication menu to then get credentials to access the API BCA Sandbox.
On the MyApplication menu, select Utilities - Signature in "Selected APIs". Then input the required parameters and click the "send request" button

This signature can only be used for the API BCA Sandbox.
Yes. Each application will have different credentials, so you need to request an access token for each application.

Customer Testing Feature

The Customer testing feature is a feature provided for API BCA customers to assist in conducting self-service functionality tests on API BCA services.
Functionality testing is carried out as a mandatory stage that needs to be carried out by API BCA customers before API services are implemented or used.
- Ensure that the request format is in accordance with the technical documentation of the relevant API BCA service.
- Make sure you have followed the data and test scenarios listed in the Customer Testing feature.
- If you have followed the steps above but still cannot passed the verification, please contact the email api_support@bca.co.id for further processing.