Issue Certificate

Methods located at https://secured-openapi.business.tbank.ru use two-factor authentication, or Mutual TLS, as additional security. Such methods are marked with .

To use Mutual TLS, issue a certificate from T‑Bank.

You need a qualified electronic signature to issue a certificate. You can request it in the Квалифицированная электронная подпись (Qualified electronic signature) section or use a signature from FTS.

The certificate is valid for 1 year from the issue date. In the Интеграции (Integrations) section, you can also view the certificate expiration date, reissue it, or issue a new one.

You'll get a notification 20, 10, 3, and 1 day before the certificate expires to the email address you specified when issuing the certificate. If the email can't be sent, we'll send it to your company's email.

Issue

If you have a qualified electronic signature, issue a certificate via CryptoPro plugin.

You can download the private key for certificate issue only on the third step of certificate issue during the first issue attempt. If you forget to download it, reissue the certificate.

If you reissue a certificate, the existing one will also be valid for one year from the issue date.

Via CryptoPro plugin

If you already have the CryptoPro plugin installed, skip to certificate issue.

In your personal account, go to Интеграции (Integrations) section. On theT‑API tab, click Выпуск сертификата (Certificate issue).
Select the service for which you'll use the certificate and click Дальше (Next).
Click Подтвердить и продолжить (Confirm and continue). If the Электронная почта (Email) field is blank or has the wrong email, change it yourself. If the data in other fields is blank or filled in incorrectly, click Есть ошибка (There's an error) and ask to fix it.
Download the private key and click Отправить заявку (Submit request). If you don't have the КриптоПро (CryptoPro) tab, check if the plugin works.

Via EDF or CryptoPro Tools

In your personal account, go to Интеграции (Integrations) section. On theT‑API tab, click Выпуск сертификата (Issue certificate).
Select the service for which you'll use the certificate and click Дальше (Next).
Click Подтвердить и продолжить (Confirm and continue). If the Электронная почта (Email) field is blank or has the wrong email, change it yourself. If the data in other fields is blank or filled in incorrectly, click Есть ошибка (There's an error) and ask to fix it.
Download the private key and the request.
Sign the request with a qualified electronic signature.
If you don't have a qualified electronic signature, you can submit a request for issuance in the Квалифицированная электронная подпись (Qualified electronic signature) section. For further work, you can use this signature or a signature issued via Gosuslugi or the Federal Tax Service.
Upload the signature in PDF, SIG, SGN, SIGN, or P7S format and click Отправить заявку (Submit request). You don't need to upload the original request file.

Track Issue Status and View All Certificates

You can follow the certificate issue status on the Сертификаты (Certificates) page. The issue process takes about 10 minutes.

You also can:

On the Действуют (Active) tab—download the certificate, see the expiration date, reissue it or issue a new one.
On the Не действуют (Non-active) tab—view unissued certificates or issue a new one.
On the Выпускаются (Being issued) tab—view your pending certificate requests, go to request signing, cancel the request, and issue a new certificate.

Request Signing

If you already use Kontur with a qualified electronic signature or already have CryptoPro Tools software installed, choose EDF.

If another employee has a qualified electronic signature, also select EDF:

Download the PDF request in step 3 of certificate issue.
Send the PDF request for certificate issue to the signature owner. The owner signs the request and sends the signature file to you.
Upload the signature in step 3 of the certificate issue. Make sure that you upload the request signature from the current attempt. If you upload the request signature from a previous attempt, the certificate won't be issued.

Go to EDF service. For example, Контур Крипто.
Upload the request.
Select Откреплённая подпись (Detached signature) and click Подписать (Sign).

Download the request with signature in the sig format.
Upload the request at step 3 of certificate issue in T‑Business personal account or send it at openapi@tbank.ru and click Отправить заявку (Send request).

The certificate will be displayed on the Выпускаются (Being issued) tab. In 10 minutes you can download it on the Действуют (Active) tab.

Certificate Usage

With the open-api-cert.pem certificate, you can use secure methods located at https://secured-openapi.business.tbank.ru. For such requests, you need a certificate and generated private key.

Before sending a request, make sure that you have:

issued token with your device's external IP specified;
private key;
signed certificate;
cURL utility installed.

If you make a request that requires a certificate without a certificate or with an invalid certificate, an HTTP 400 error returns.

Requests

You can make a request in several ways:

Use a certificate and private key:

curl --cert open-api-cert.pem --key private.key https://secured-openapi.tbank.ru/...

Examples

Make payment

In the command line, enter the following command:

curl -i -XPOST
--cert open-api-cert.pem --key private.key
-H 'Authorization: Bearer t.wFHqh3g2UwAl3CUSQqq_deCf201Qp0BY2mxFWQTggcc2g0uJxHPdNYD_yqZJFUjQ53YUeIb4Xr66jcfiMe7D8A'
https://secured-openapi.tbank.ru/api/v1/payment/ruble-transfer/pay
-d '{"id":"123456", "from":{"accountNumber":"12345678900987654321"}, "to":{"name":"ООО \"РОГА и КОПЫТА\"", "inn":"719351678037", "kpp":"111222333", "bik":"444555666", "bankName":"Чемпион", "corrAccountNumber":"12345678901234567890", "accountNumber":"11122233344455566677"}, "purpose":"Оплата по договору №123. НДС не облагается", "amount":10}'

Check payment status

In the command line, enter the following command using your token:

curl -i -XGET
--cert open-api-cert.pem --key private.key
-H 'Authorization: Bearer t.wFHqh3g2UwAl3CUSQqq_deCf201Qp0BY2mxFWQTggcc2g0uJxHPdNYD_yqZJFUjQ53YUeIb4Xr66jcfiMe7D8A'
https://secured-openapi.tbank.ru/api/v1/payment/123456