# Точка Банк

Follow the daily cash movement on Tochka accounts in chat

Банковский API — счета, выписки, платежи, СБП

## How the agent works with Точка Банк

The agent works with the Tochka open banking API at enter.tochka.com/uapi: the list of accounts and balances, statements and operations for a period, payments and SBP. Out of that it builds the morning cash movement summary, looks for doubled charges and forgotten subscriptions over the month and puts together a payment calendar where mandatory charges meet expected incoming funds, so a cash-flow gap is visible in advance rather than on the day money runs short.

Data in Open Banking is laid out per account: a statement is requested for a specific account over a specific period, so the agent first lists the accounts of the company and then walks each one — the picture across all accounts is assembled on our side, it does not arrive ready-made. The counterparty name in a statement is whatever the payer typed, so when reconciling against accounting the agent relies on the amount, the date and the requisites, and treats the name string as a hint.

The agent does not handle money: payment signing stays on the bank side, and it cannot withdraw funds by the design of the access, not by agreement. It shows duplicates and stray charges but does not cancel them itself; it matches the Tochka statement against 1C entries and lays out discrepancies in amounts and counterparties, leaving the decision to you. Anything that changes a balance ends with your confirmation in the internet bank.

Statements come back page by page and with a small delay after a transaction is posted, so the agent assembles the morning summary from the closed previous day rather than from the current hour. Account and statement permissions are baked into the key itself, and when they are missing the answer is Forbidden by consent — the agent names that reason instead of passing the emptiness off as an absence of operations. The access period is fixed at issue time and the scheme has no refresh token.

## Integration scenarios

### Daily cash movement
The agent collects incoming payments, outgoing payments and balances across Tochka accounts and sends a short summary every morning.

### Reconciling the bank with accounting
The agent matches the Tochka statement against entries in 1C for a period and shows discrepancies in amounts and counterparties.

### Finding duplicates and stray charges
The agent checks the payments for the month and finds doubled charges and forgotten subscriptions.

### Payment calendar for the week
The agent combines mandatory payments and expected incoming funds and warns about a cash-flow gap in advance.

### Incoming SBP payments
The agent pulls SBP operations for a period, lays them out per account and shows how much came in through fast payments and on which days the flow dipped.

### History with one counterparty
The agent walks the accounts, collects operations with one counterparty over the quarter and shows amounts and dates, matching by requisites rather than by the typed name.

## How to connect

**Before you connect**

- Access to Tochka internet bank as a user allowed to manage integrations
- The phone that receives the confirmation SMS at hand
- Payment signing stays with the bank: the agent cannot move money

### Open «Интеграции и API» in Tochka bank
Tochka internet bank → the «Сервисы» tab → «Все сервисы» → «Интеграции и API». Sign in as the user whose phone you have: the key is confirmed by SMS.

### Click «Создать JWT-ключ»
Give the key a name and an access period, then «Продолжить». A JWT has no refresh token: once it expires you reissue by hand, and token and client_id change.

### Grant the permissions and confirm by SMS
All permissions are ticked by default; with several companies rights are set per company. Without accounts and statements — “Forbidden by consent”.

### Copy the token and the client_id right away
The key lands in the «JWT-ключи» section — copy it together with the client_id shown next to it. Deleting it there cuts access instantly: requests return 403.

## FAQ

### How do I connect Tochka?
With a JWT token from the Tochka Bank cabinet (the API section). The token is stored encrypted and can be revoked in the bank cabinet at any moment.

### Which operations are available to the agent?
Accounts, statements, operations and SBP — within the token rights. Read access to statements is enough for analytics.

### How safe is this?
The token is encrypted at rest (AES-256/GOST), transfer runs over TLS 1.3, servers are in Russia, compliant with Federal Law 152-FZ. The agent cannot withdraw money: payment signing stays on the bank side.

[Open Точка Банк](https://enter.tochka.com)