Klarna Kosma is the Open Banking platform that Klarna spun out in March 2022 as a dedicated sub-brand and business unit. Built on the connectivity infrastructure Klarna originally created for SOFORT, Kosma packages PSD2 Account Information Services (AIS) and Payment Initiation Services (PIS) into a single XS2A API that aggregates more than 15,000 banks across 27 European and UK markets with >95% per-market coverage. The same platform powers Klarna's own BNPL underwriting and is sold externally to banks, lenders, fintechs, merchants, SMEs, and freelancers.
This catalog entry profiles Klarna Kosma's public API surface as of May 2026. Kosma does not publish downloadable OpenAPI specifications for its XS2A, Auth, Consent, Insights, KYC, or Payments APIs, so this repository is documentation-only: no openapi/, capabilities/, rules/, json-schema/, json-structure/, json-ld/, examples/, or vocabulary/ artifacts are generated. The apis.yml captures the documented APIs, products, environments, and tooling. If Kosma publishes machine-readable specs in the future, they should be added under the canonical artifact subfolders.
The XS2A API is the server-side endpoint set used by TPPs and merchants to create and control Open Banking sessions and flows under PSD2. It drives AIS (accounts, balances, transactions) and PIS (account-to-account transfers). Sessions are created against api.openbanking.klarna.com (production) or api.openbanking.playground.klarna.com (sandbox); the resulting token is handed to the XS2A App for the consumer-facing SCA flow.
The client-session companion to the XS2A API, hosted at authapi.openbanking.klarna.com. Whenever the flow requires consumer interaction (bank selection, SCA, multi-step forms), the Auth API exposes the session-scoped endpoints used to obtain and submit forms. It is the API surface behind the embeddable XS2A App / JavaScript SDK.
The Consent API exposes the PSD2 consent lifecycle so TPPs can list, inspect, refresh, and revoke consents granted by Payment Service Users (PSU). PSD2 requires that Klarna and its clients keep PSU information aligned with active consents — the Consent API is the programmatic surface for meeting that obligation.
Kosma Insights turns raw Open Banking transaction data into categorised spend, income, and affordability signals across 200+ categories. It surfaces income streams, recurring outflows, and cash-flow patterns, and is the AIS-derived data product behind Klarna's own BNPL underwriting and the same product sold externally to lenders, fintechs, and merchants.
Kosma KYC layers account ownership and identity verification on top of AIS connectivity. It confirms that the authenticating consumer is the legitimate account holder, returns verified attributes, and supports KYC, AML, and onboarding workflows for lenders, fintechs, neobanks, and crypto on-ramps across the EEA and UK.
Kosma Payments is the white-labeled PSD2 PIS product. It triggers account-to-account bank transfers directly from a consumer's bank, bypassing card rails. Sessions are created against /xs2a/v1/sessions on the XS2A API; the consumer authenticates via the XS2A App; Kosma orchestrates SCA and settlement confirmation with the ASPSP.
| Environment | Base URL |
|---|---|
| Production XS2A API | https://api.openbanking.klarna.com |
| Production Auth API | https://authapi.openbanking.klarna.com |
| Playground XS2A API | https://api.openbanking.playground.klarna.com |
A PSD2 test bank supports embedded, decoupled, and redirect SCA methods plus consent management.
Open Banking, PSD2, AIS, PIS, Account Information, Payment Initiation, KYC, Identity Verification, Categorization, Insights, Embedded Finance, BNPL, Lending, Fintech, Banking.
- PSD2-licensed AIS and PIS across the EEA and UK via Klarna Bank AB (publ)
- Single XS2A API aggregating 15,000+ banks in 27 countries with >95% per-market coverage
- Embeddable XS2A App / JavaScript widget for consumer bank selection and Strong Customer Authentication
- Auth API for client-session consumer interactions
- Consent API covering the full PSD2 consent lifecycle
- Kosma Insights — transaction categorisation across 200+ categories with income and affordability signals
- Kosma KYC — account ownership and identity verification on top of AIS connectivity
- Kosma Payments — white-labeled PSD2 PIS for merchant checkout and platform payouts
- Sandbox environment with PSD2 test bank covering all three SCA methods
- Underpins Klarna's own BNPL underwriting and SOFORT bank-transfer rails
- Portal — klarna.com/kosma
- Documentation — docs.openbanking.klarna.com
- XS2A API URLs and environments — docs.openbanking.klarna.com/xs2a/urls.html
- XS2A App — docs.openbanking.klarna.com/xs2a/xs2a-app.html
- PSD2 test bank — docs.openbanking.klarna.com/xs2a/test-bank-psd2.html
- AIS Quick Start — docs.openbanking.klarna.com/xs2a/quick-start-ais-accounts.html
- PIS Quick Start — docs.openbanking.klarna.com/xs2a/quick-start-pis.html
- Klarna GitHub — github.com/klarna
- UK Open Banking listing — openbanking.org.uk/regulated-providers/klarna-kosma
- Launch press release (March 2022) — klarna.com/international/press
Kin Lane — API Evangelist — apievangelist.com