OAuth V1

Legacy OAuth V1 issues tokens for legacy Digital Insight APIs only (Send Event, Destinations, Get FI Customer, Register User). For Accounts, Alerts, Banking Images, Disclosures, Money Movement, Transactions, and other current APIs, use OAuth V2.

End-user benefits

• Provides secure access to legacy Digital Insight APIs (Send Event, Destinations, Get FI Customer, Register User).
• Supports both customer-specific and institution-level access.
• Tokens include scopes and expiration for time-bound access.

Integration capabilities

• Client credentials — Institution-level access; add user context on later calls.
• Password — First-party apps with direct user authentication.
• Use HTTP Basic Auth with client_id and client_secret. Register with a valid client_id and client_secret.

Required headers

Header	Description
Authorization	HTTP Basic: Basic + Base64(client_id:client_secret).
di_tid	Unique trace ID for the request (UUID).
di_fiid	Financial institution ID; the token is scoped to this FI.

Error codes

Code	Message	HTTP Status Code
CMN_90000	Internal server error	500
CMN_90001	Internal server error - Cross Talk	500
CMN_90002	Quota limit violation	500
CMN_90003	Spike limit violation	500
CMN_90004	Invalid client credentials	401
CMN_90005	Header institutionId is invalid or Form param institution_user_id is invalid	400
CMN_90006	Not authorized to access this resource	400
CMN_90007	Invalid grant type	400
CMN_90008	Header transactionId is invalid	400
CMN_90009	Access blocked	400
CMN_90010	Header is invalid	400
CMN_90011	Request is invalid	400
CMN_90012	Request is invalid - Scopes	400
CMN_90013	Username is invalid	400
CMN_90014	Password is invalid	400
CMN_90015	Invalid user credentials	401
CMN_90016	Invalid user	400
CMN_90017	Request contains non printable ASCII characters	400
CMN_90018	Invalid token	401
CMN_90019	Error creating token	500

Endpoints

Create V1 Access Token (Legacy)

**Legacy V1 Token Endpoint** - Use this endpoint for V1 APIs only (Send Event, Destinations, Get FI Customer, Register User).