Return an account's IBAN
Every account receives on an IBAN from the moment it is opened, so this returns the account with its IBAN, issuing one only if the account somehow has none. Calling it again returns the same IBAN. The holder name is always the owner's verified legal name, never the account label.
Every account receives on an IBAN from the moment it is opened, so this returns the account with its IBAN, issuing one only if the account somehow has none. Calling it again returns the same IBAN. The holder name is always the owner's verified legal name, never the account label.
Authorization
bearer In: header
Path Parameters
The account id.
Header Parameters
Your own key for this request, 1-100 characters. Required: this route takes no body, so the header is the only place to send it. Replaying a key returns the first result without executing anything a second time, and sets replayed to true where the response carries that field. Sending the same key with different parameters is refused with 409 IDEMPOTENCY_KEY_REUSED — use a new key for a different request. While the first call is still running, a second call with the same key answers 409 IDEMPOTENT_REQUEST_IN_PROGRESS. A key is remembered for 24 hours from the first call; after that it is forgotten and reusing it starts a new request.
Act on behalf of one of your sub-clients. The value is that sub-client id, and the request then reads and writes that sub-client's own accounts and registry rows rather than yours. Omit it to act as yourself. A route that does not accept the header refuses it with 400 ON_BEHALF_OF_NOT_ALLOWED_HERE rather than ignoring it — that includes every vault route (deposits, withdrawals, conversions, sub-accounts, positions), the webhook registry, and POST /sub-clients, since a sub-client never has sub-clients of its own. An id that is not one of your sub-clients answers 404 ON_BEHALF_OF_NOT_FOUND; a closed one answers 409 ON_BEHALF_OF_SUB_CLIENT_CLOSED; and a key restricted to a subset of your sub-clients answers 403 ON_BEHALF_OF_NOT_ALLOWED_FOR_KEY for any node outside it.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/partner/v1/accounts/7e2a0c53-4d81-49b6-8f37-1a5c9e0b2d74/iban" \ -H "Idempotency-Key: string"{ "data": { "accountId": "7e2a0c53-4d81-49b6-8f37-1a5c9e0b2d74", "balance": { "available": "1000.00", "reserved": "0.00", "total": "1000.00" }, "capabilities": { "holdCrypto": true, "holdSavings": false, "receive": true, "sendCrypto": true, "sendExternal": false, "sendInternal": true }, "createdAt": "2026-08-14T08:42:11.000Z", "currency": "EUR", "disclosure": { "items": [ "ENVIRONMENT_IS_TESTNET: The environment is a testnet (Arbitrum Sepolia). No mainnet deployment exists.", "YIELD_IS_SIMULATED: The vault rate is set administratively and the interest it produces is minted as fresh underlying, not earned. It does not represent a return generated by deployed capital.", "FIAT_RAILS_ARE_MOCKED: No real fiat movement occurs. Balances are ledger entries against a sandbox provider.", "CONVERSION_RATES_ARE_MARKET_QUOTED_OR_REFUSED: A conversion is priced only by an external venue that quotes independently of TCB. When no such venue can price the pair, the conversion is refused rather than priced from an internal table. Read rate.pricingModel on every conversion: MARKET is a venue quote; any other value is not a market rate and must not be presented as one.", "CONTRACTS_ARE_UNAUDITED: No audit has been performed. Mainnet is gated on a two-firm audit that has not been commissioned.", "CUSTODY_IS_TCB_SUBACCOUNT: Everything held for the client — its vault shares, and the tcbUSD it holds between the steps of the tokenised deposit chain — is held in TCB custody, in the one TCB wallet assigned to the client. The client holds no keys and moves those tokens only through this API; each sub-account's shares and tcbUSD are book entries against what that wallet holds.", "INTEGRATION_AGREEMENT_ONLY: Fees as published on the rate card; no yield share, no return commitment." ], "summary": "This is a pilot integration on a testnet. Nothing in this system earns anything: the yield is simulated and the fiat rails are mocked.", "version": "2026-10-27" }, "externalRef": "acme:payroll-eur", "iban": { "active": false, "bic": "TCBKBHBMXXX", "holderName": "Fatima Al-Khalifa", "iban": "BH29TCBK00001234567890" }, "label": "Payroll reserve", "localRails": [ { "active": false, "bankAddress": "Wiesenstrasse 17, 8952 Schlieren, Switzerland", "bankName": "InCore Bank AG", "beneficiaryName": "Fatima Al-Khalifa", "bic": "INCOCHZZ", "currency": "EUR", "iban": "CH0508799123456789012", "paymentReference": "TCB-7K2M9QXA", "rail": "SEPA / SEPA Instant" } ], "ownerId": "c4f81e2a-9b60-4d37-a512-8e0f3c6b7d95", "ownerType": "SUB_CLIENT", "role": "MAIN", "status": "ACTIVE" }, "success": true, "timestamp": "2026-09-02T10:15:30.000Z"}Close an account POST
Requires a zero balance. A MAIN cannot close while any SUB in that currency is open, or while its owner is still active — close the sub-client instead. Your own MAIN cannot be closed through this route at all.
List transfers GET
Cursor pagination, oldest-to-newest window given by from/to. Scoped the way GET /accounts is: transfers touching the ACTING node's own partitions. To read a movement between two of your sub-clients, act as one of them.